Legal

Privacy Policy

Effective October 18, 2026

This policy explains how Tenmore Inc., a corporation incorporated in Ontario (“Tenmore”, “we”, “us”) collects, uses, shares and protects personal information when you visit tenmore.com, create an account, or use our services (the “Service”). It is written to meet Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (Law 25), and the EU and UK General Data Protection Regulation (GDPR).

1. Our role

For your account, our website and our own operations, Tenmore decides how personal information is used: under the GDPR we are the controller.

When an organization (our customer) uses the Service for its people, the organization decides what is done with the information in its workspace, and we process it on its behalf: we are its processor (a service provider under Canadian law). Our Data Processing Agreement governs that processing. If you use the Service through your employer or another organization, its privacy notice also applies, and requests about your workspace data are best sent to it; we will help it answer.

The same applies when you chat with an assistant that one of our customers offers on its own website: that organization is responsible for your information, and we process it on its behalf (see section 4).

2. What we collect

• Account information: your name, email address and password (stored only as a one-way hash). If you turn on two-step verification, an encrypted authenticator secret and hashed recovery codes.
• Sign-in with Microsoft: if you choose it, your name, email address and Microsoft account identifiers, from Microsoft.
• Workspace information: the workspaces you belong to, your role, invitations you send or receive, and keys you create (stored as hashes).
• Usage records: for each request you send through the Service, its time, which of the workspace’s settings handled it, its size, cost, duration and outcome. Not its content (see section 3).
• Security records: sign-ins, failed sign-ins and changes to your security settings, with the IP address and browser used; and changes administrators make to a workspace, with who made them, from which IP address and browser.
• Billing information: if your organization buys a paid plan, the billing contact’s name and email address, the billing address, the tax number (such as a GST/HST or VAT number) and the payment details are entered on the payment page of Stripe, our payment provider. We never receive or store card numbers. We keep a record of the organization’s subscription: plan, number of seats, billing period, currency, renewal date, payment status, scheduled changes, and the identifiers that link the workspace to its Stripe records.
• Communications: what you send us by email, and the emails we send you about your account.
• Website visits: our servers record the IP address, the page requested, the page you came from and your browser’s description, to keep the site running and secure and to count visits to each page. After 30 days only daily totals remain (visits per page, referring site and country), with no IP addresses. We use no analytics or advertising trackers and no cookies for this.
• Chats with AI assistants: what you write to the assistants described in section 4, which we pass on to produce answers but don’t store.

We don’t ask for sensitive information (such as health or financial details), and the Service is not meant for it.

3. Content you send through the Service

The content of the requests you send through the Service, and of the answers to them, passes through our systems to reach the services your organization has chosen, and is not stored by us. Our records keep only the information listed under “Usage records”. Error messages are cleaned of quoted text and sensitive values before they are kept. Content is stored only when your organization chooses to save it in the Service (for example, test cases it writes), and then only for the period it sets.

The services your organization connects to the Service are chosen and contracted by your organization, and their own terms and privacy policies apply to what they receive.

During a free trial, we may provide an AI model from OpenAI so you can try the Service before connecting your own services. Requests sent to it go to OpenAI, our subprocessor, in the United States, which processes them to produce answers, does not use them to train its models, and may keep them for up to 30 days to detect abuse.

4. AI assistants and chats

The help assistant in the Service. When you ask it a question, we send your conversation, the page you are on, and the workspace information it looks up to answer you to OpenAI, our subprocessor, in the United States, which produces the answers. It looks up information only with your own permissions in the workspace. This information includes:

• settings, connected services and recent usage records;
• groups and their members;
• the assistants’ instructions and reference texts;
• test cases and their results;
• budgets and integrations.

Keys, passwords and other secrets are never sent to it.

• Storage: we don’t store the conversation. Its history stays in your browser. We count your questions for an hour to limit use, and our records of the assistant’s use don’t identify you.
• Changes: the assistant can change a workspace only while an owner has given Tenmore support access that allows changes, and only after an owner or administrator approves each change on screen. It can never do more than the person approving could do themselves. Each change is recorded in the workspace’s audit log as made by Tenmore Support, with the name of the person who approved it.
• Turning it off: workspace administrators can turn the assistant off.

The assistant on our website. When you chat with it, we send your messages to OpenAI to produce the answers. We don’t store them, and the conversation stays in your browser. To limit abuse, we use your IP address in a form that is scrambled with a key that changes every day; the counts expire within hours. Our records of each chat carry a random visitor identifier, never your IP address. Please don’t share personal details in the chat.

Assistants our customers offer on their websites. The organization offering the assistant decides what it does and is responsible for your information; its privacy notice is linked from the chat, and the chat shows “Powered by Tenmore”. We process your messages on its behalf, to reach the AI service that organization has chosen. We handle them as on our own website:

• messages not stored, and the conversation kept in your browser;
• IP addresses used only in scrambled form to limit abuse;
• a random visitor identifier in the organization’s usage records.

Chats in the Service. Conversations with the assistants your organization sets up are kept only in your browser, and are cleared when you sign out.

5. How we use it, and why

We don’t sell personal information, use it for advertising, or use the content you send through the Service to train models. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects. We will ask for your consent before sending you marketing email, and every such email will let you unsubscribe.

6. Who we share it with

• Your organization: administrators of a workspace you belong to can see the information the Service records about its use, including your usage records and the changes you make.
• Our service providers (subprocessors), who process it only on our instructions: Amazon Web Services (hosting, in Canada), Amazon Simple Email Service (account email), Microsoft (our email and, if you choose it, sign-in), OpenAI (the AI model provided during free trials, and the model behind our help assistant and the assistant on our website) and Anthropic (the AI model behind the assistant our support staff use, only while an organization grants us support access to its workspace). The current list is in our Data Processing Agreement.
• Stripe, our payment provider (Stripe Payments Canada, Ltd. and its affiliates), receives the billing information described in section 2 to take payments, calculate taxes, send invoices and receipts, and prevent fraud. For some of this, such as fraud prevention and its own legal obligations, Stripe decides how the information is used, under its own privacy policy (stripe.com/privacy). Stripe may process information in the United States and other countries.
• Services your organization connects to the Service, as described in section 3.
• Tenmore support sees a workspace only when its owner grants access for a limited time, or in an emergency with a recorded reason and immediate notice to the owners.
• Authorities, when the law requires it; we will tell the affected customer unless the law forbids it.
• A buyer or successor, if Tenmore is reorganized, merged or sold, under the protections in this policy.

7. Where it is stored

We store personal information in Canada, in Amazon Web Services’ Canada (Central) region in Montreal, Quebec. Our content delivery network passes requests through servers in North America and Europe without storing them, and some service providers listed above may process information in the United States.

The European Commission recognizes Canada as providing adequate protection for personal information, so information from the EU can be sent to us without further safeguards. Where information leaves Canada, we use the European Commission’s Standard Contractual Clauses or another lawful mechanism, and, for information about people in Quebec, we assess the transfer before it happens, as Quebec law requires.

8. How long we keep it

When you delete your account, or an owner deletes a workspace, the information is deleted within 30 days, and from backups within 35, except invoices and payment records, which we keep as long as tax law requires. Records about your activity in a workspace you shared with others belong to that organization and follow its retention settings.

9. Security

We encrypt information in transit and at rest, and encrypt secrets (such as keys for connected services and authenticator secrets) with keys held separately from the data. Passwords are stored as one-way hashes; two-step verification is available to everyone. Access to production systems is limited to the people who need it, goes through single sign-on with multi-factor authentication, and is logged. If a breach of security creates a real risk of significant harm to you, we will tell you and the relevant authorities, as the law requires.

10. Your rights

Depending on where you live, you can:

• ask what personal information we hold about you, and get a copy, including in a structured, commonly used format;
• have it corrected if it is wrong or incomplete;
• have it deleted (you can delete your account yourself from your account page);
• object to, or ask us to restrict, how we use it, including uses based on our legitimate interests;
• withdraw consent you have given, at any time;
• complain to a privacy authority (see section 14).

Email privacy@tenmore.com. We will answer within 30 days and may need to confirm your identity first. If the information is held for an organization you belong to, we will pass your request to it and help it answer.

11. Cookies

We use only cookies and browser storage needed to sign you in, keep your session secure, remember your choices in the Service, and keep chat history in your browser. We use no advertising or analytics cookies, so we don’t ask for consent to them. Our website and the Service load everything they need, fonts included, from our own servers.

12. Children

The Service is for organizations and is not intended for anyone under 16. We don’t knowingly collect information from children.

13. Changes

If we change this policy, we will update the date above and, for significant changes, tell account holders by email before the change takes effect.

14. Contact and complaints

Our Privacy Officer is responsible for the protection of personal information at Tenmore Inc. Contact: privacy@tenmore.com.

By mail:
Tenmore Inc.
145 1/2 Church Street Office 985
Toronto ON M5B 1Y4
Canada

If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca), Quebec’s Commission d’accès à l’information (cai.gouv.qc.ca), or the data protection authority where you live or work in the EU or the UK.