Tensile privacy notice (pilot)

Who we are. Tensile, run from Ontario, Canada. Privacy contact: Privacy Officer, Tensile, privacy@tensile.build.

We do not sell personal information and do not run advertising.

AI features. When you use a feature such as the bid briefing, addendum check or quote check, the documents and text needed for that task are sent to our AI provider, Anthropic (maker of Claude), which returns a result. Under Anthropic's published terms for its business API, it automatically deletes inputs and outputs from its systems within 30 days. The exceptions are content its safety systems flag as breaking its usage policy (kept up to 2 years), anything it must keep by law, and its most advanced models, which require limited retention. We don't choose those models, but if a request is refused in error, Anthropic's service may automatically rerun it on another of its models. Retained data is not used to train its models without express permission. Anthropic may process data outside Canada, including in the United States.

Who else handles it. Supabase (database and sign-in, in Canada), Cloudflare (file storage, which may be outside Canada), Vercel (hosting, in the United States), Resend (email, in the United States), Google (sign-in, and your profile photo, which loads from Google's servers). They process it only to provide their service to us. Some are outside Canada, so the information may be subject to the laws of those countries.

Within your company, teammates see your content according to their role. For example, field staff aren't shown prices, budgets, bids, suppliers or change orders. Our administrator can see account and company records (the company name and trades, the owner's name and email, how many team members and bids there are, and when the account was last active) for support and operations. The admin screens don't show your bid contents, file names or AI results. We don't read your documents unless you ask us to help or we are investigating security or misuse.

Keeping and deleting. We keep your content while your account is open. Tensile doesn't have a delete button yet, so deletion is done by us on request: email us and we will delete your content and account within 30 days, apart from what we must keep for legal or security reasons. We can also send you a copy of your data on request. Backups held by our database provider are overwritten on its own schedule.

Security. Encrypted connections, access rules that keep each company's data separate, role-based access, and secure file links. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will tell you and the Privacy Commissioner of Canada, and we keep a record of every breach.

Your rights. Ask to see, correct or delete your personal information, or to withdraw consent, at privacy@tensile.build. If you're not satisfied, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Cookies. Only what's needed to keep you signed in and to carry an invitation through sign-up: a sign-in session cookie (which can last up to about 13 months if you stay signed in) and short-lived invitation cookies. We don't use advertising or analytics cookies or third-party scripts, and the app doesn't store anything else in your browser.

Changes. We'll tell you by email or in the app before a meaningful change takes effect.