1. Who we are
Tenor Analytics is operated by Shahin Khan, registered as autónomo in Spain (tax ID available on request). Our registered contact email is contact@tenoranalytics.com.
2. What data we collect
We collect only the minimum data necessary to provide our service:
- Account data: email address and name when you create an account or purchase a report.
- Payment data: billing information is collected and processed exclusively by Stripe. We never see or store your card details.
- Uploaded files: CSV or Excel files you upload for analysis. These are deleted immediately after your report is generated.
- Usage data: anonymised analytics about how visitors use the site (pages visited, browser type). No personally identifiable information.
- Communications: emails you send us, including support requests.
3. How we use your data
- To generate and deliver your analytics report.
- To send you your report and account-related communications.
- To process your payment via Stripe.
- To improve our service using anonymised usage data.
- To respond to support requests.
We do not use your data to train AI models. We do not sell, rent, or share your data with third parties for marketing purposes.
4. Data retention
- Uploaded files: deleted immediately after report generation.
- Generated reports (PDF): stored for 30 days (Starter), 90 days (Growth), or 1 year (Pro/Agency), then permanently deleted.
- Account data: retained while your account is active. Deleted within 30 days of account deletion request.
- Payment records: retained for 7 years as required by Spanish tax law.
5. Your rights under GDPR
As an EU/EEA resident, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Request deletion of your personal data ("right to be forgotten").
- Object to or restrict processing of your data.
- Request a copy of your data in a portable format.
- Lodge a complaint with a supervisory authority (in Spain: AEPD — aepd.es).
To exercise any of these rights, email us at contact@tenoranalytics.com. We will respond within 30 days.
6. Third-party services
We use the following third-party processors:
- Stripe — payment processing (PCI DSS Level 1 certified)
- Supabase — database (EU region, SOC 2 Type II)
- Cloudflare R2 — temporary file storage (EU region)
- Vercel — hosting and serverless compute
- Resend — transactional email delivery
- Anthropic / OpenAI — AI analysis API (zero data retention policy)
7. Cookies
We use only essential cookies required for the site to function (session management, theme preference). We do not use advertising or tracking cookies. See our Cookie Policy for details.
8. Data security
All data is transmitted over HTTPS/TLS 1.3. Data at rest is encrypted using AES-256. Access to production systems is restricted to authorised personnel only.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified by email to registered users. The "last updated" date at the top of this page will always reflect the most recent revision.
10. Contact
Questions about this privacy policy? Email us at contact@tenoranalytics.com.
