We keep only what we need
Tendrill operates on a principle of data minimization: we only store what’s absolutely necessary to provide the service, and we delete data as soon as it’s no longer needed.Zero data retention doesn’t mean we store nothing - it means we store the minimum required and don’t retain data beyond its useful life.
What zero retention means
Data we DON’T retain
Data we DO retain (minimally)
How this works in practice
When you connect an account
When you disconnect
When you delete your account
Data lifecycle
1
Collection
We collect only what Plaid provides and only what you explicitly share
2
Use
Data is used exclusively to provide your portfolio monitoring service
3
Storage
Stored encrypted, with access limited to essential systems
4
Deletion
Automatically deleted when no longer needed or upon your request
Comparison with other services
*We may use anonymized, aggregated patterns to improve our service, but never individual portfolio data.
What “anonymized” means
When we say data is anonymized:- Your identity is removed - No way to trace back to you
- Aggregated - Combined with thousands of others
- Statistical only - Used for trends, not individual analysis
Your data rights
Under various privacy laws (CCPA, GDPR equivalents), you have the right to:Access
Request a copy of all data we have about you
Deletion
Request complete deletion of your data
Correction
Request correction of inaccurate data
Portability
Receive your data in a portable format
Audit trail
We maintain internal audit logs for security:- What: Actions taken on your account
- When: Timestamps of data access
- Who: System or personnel involved
- Why: Purpose of access
Changes to this policy
If we ever change our data retention practices:- We’ll notify you via text message
- We’ll update this documentation
- Major changes require your consent
- You can always delete your data if you disagree
FAQ
Why do you need to store any data?
Why do you need to store any data?
To provide the service, we need to know what you own to monitor it. We can’t alert you about NVDA earnings if we don’t know you own NVDA. But we minimize what we store and delete it when no longer needed.
Is my conversation history stored?
Is my conversation history stored?
Yes, for a limited time to provide context for follow-up questions. “How’s that stock doing?” only makes sense if we remember what stock you asked about. You can request deletion of conversation history.
What happens if Tendrill shuts down?
What happens if Tendrill shuts down?
We would notify all users, provide time to export data, then securely delete all user data. Our policy ensures data doesn’t persist beyond usefulness.
Can law enforcement access my data?
Can law enforcement access my data?
We comply with valid legal requests (subpoenas, court orders). We would:
- Verify the request is valid
- Provide only what’s legally required
- Notify you if legally permitted
Next steps
Disconnect & Delete
Learn how to remove your data
What We Never Do
Explicit commitments about your data