Plain-language summary: Tenlo collects information you give us when signing up and using our platform. We use it to operate our services and never sell it to third parties. You can request deletion of your data at any time.
We collect information you provide directly to us and information generated through your use of our platform.
We use your information to:
We do not use your data to train AI models, and we do not sell or rent your personal information to any third party.
We share your information only in the following limited circumstances:
We work with trusted vendors who process data on our behalf under strict confidentiality agreements. These include Supabase (database), Twilio (SMS), Resend (email), Stripe (payments), Vercel (hosting), OpenAI and Anthropic (AI processing), and Pinecone (vector search).
We may disclose information if required by law, court order, or to protect the rights, property, or safety of Tenlo, our users, or the public.
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email prior to any such transfer.
We may share information with your explicit permission for purposes not described here.
We retain your account and business data for as long as your account is active. When you cancel your subscription, we retain your data for 90 days to allow for account reactivation, after which it is permanently deleted from our systems.
Aggregated, anonymized analytics data may be retained indefinitely. Backup copies may persist for up to 30 additional days following deletion.
You may request earlier deletion at any time by contacting us at privacy@tenloai.com.
We take reasonable technical and organizational measures to protect your information, including:
No method of transmission or storage is 100% secure. If you suspect unauthorized access to your account, contact us immediately at security@tenloai.com.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
To exercise any of these rights, email privacy@tenloai.com. We will respond within 30 days.
If you are located in Canada, you have additional rights under PIPEDA. If you are in the EU/EEA, GDPR rights apply. California residents may exercise rights under CCPA.
We use the following categories of cookies:
We do not use advertising or cross-site tracking cookies. You can manage or disable non-essential cookies in your browser's privacy settings at any time.
Our platform integrates with third-party services to deliver features. Each operates under their own privacy policy:
Tenlo is not responsible for the privacy practices of these third parties. We encourage you to review their policies.
Tenlo is a business-to-business platform intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
Tenlo is headquartered in Canada and complies with Canada's Anti-Spam Legislation (CASL), S.C. 2010, c. 23. When we send commercial electronic messages (CEMs) — including review request SMS and emails — on behalf of our customers, we require and facilitate compliance with the following obligations.
We only send CEMs to recipients where express or implied consent exists. Express consent is obtained when a recipient explicitly agrees to receive messages. Implied consent may exist where there is an existing business relationship between the sender and the recipient. Tenlo's platform is designed to support customer-directed campaigns; our customers are responsible for ensuring valid consent exists for each recipient in their campaigns.
Every commercial electronic message sent through Tenlo identifies the sender and includes accurate contact information, including the business name and a means to contact the sender.
Every message includes a clear and functional unsubscribe mechanism. Unsubscribe requests are processed within 10 business days as required by CASL. Once a recipient unsubscribes, no further messages will be sent to that contact.
Tenlo maintains records of consent on behalf of customers where technically feasible. Customers are responsible for maintaining their own consent records and providing proof of consent if required. We recommend customers document how and when consent was obtained for each recipient.
Important: While Tenlo provides tools to assist with CASL compliance, our customers are the senders of their review request campaigns. Each customer is independently responsible for ensuring they have obtained valid CASL consent from their recipients before initiating a campaign through our platform.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 14 days before the changes take effect, and we will update the "Last updated" date at the top of this page.
Your continued use of Tenlo after the effective date constitutes acceptance of the updated policy.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
We aim to respond to all privacy-related inquiries within 5 business days.
privacy@tenloai.com