Privacy Policy

Scope

This Policy applies to our website, messaging services (SMS/RCS), and related apps or APIs that link to it.

Information We Collect

• •Account & Contact Data: name, email, mobile number.
• •Messaging Data: message content, timestamps, delivery status, and preferences.
• •Financial Connection Data: if you connect accounts via Plaid, we receive read-only account identifiers, balances, holdings, transactions, and related metadata that you authorize. We do not receive or store your bank credentials.
• •Technical Data: IP address, device identifiers, cookies, diagnostics, and analytics.

How We Use Information

• •Provide and improve the service (alerts, insights, account and security notifications).
• •Personalize content to your holdings and preferences.
• •Secure accounts and prevent fraud/abuse.
• •Comply with law and enforce our terms.
• •With your consent, send promotions or product updates.

SMS/RCS Compliance & Mobile Data Sharing

Plaid

We use Plaid Inc. ("Plaid") to connect your financial accounts securely. By connecting an account, you agree that Plaid's privacy policy applies to Plaid's processing of your data. We receive read-only financial information you authorize (e.g., balances, holdings, transactions) to generate insights. We do not store bank login credentials and cannot move or hold funds.

Legal Bases (EEA/UK)

Where applicable, we process data based on legitimate interests (providing and improving services), contract performance (delivering requested features), consent (optional marketing), and legal obligations.

Data Sharing

• •Service providers: e.g., messaging carriers, cloud hosting, analytics—bound by contract to use data only for our instructions.
• •Legal/disclosure: to comply with law or protect rights, safety, and security.
• •Business transfers: in a merger, acquisition, or asset sale, with notice where required.

We do not sell personal data.

Data Retention

We retain data as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below.

Security

We employ technical and organizational measures (encryption in transit and at rest where applicable, access controls, monitoring). No system is 100% secure; please use strong, unique passwords and safeguard your devices.

Your Rights & Choices

• •Manage messaging: reply STOP to unsubscribe; HELP for help.
• •Access, correction, deletion: email david@tendrill.com.
• •Marketing opt-out: use unsubscribe controls in any message.
• •CCPA/CPRA (California): you may request access, deletion, or correction of personal information. We do not sell or share personal information for cross-context behavioral advertising.
• •GDPR (EEA/UK): you may request access/erasure/portability/restriction/object; you may lodge a complaint with your local supervisory authority.

Children's Privacy

Our services are not directed to children under 13 (or as defined by local law). We do not knowingly collect such data.

International Transfers

We may transfer data internationally subject to appropriate safeguards (e.g., SCCs, adequacy decisions).

Changes to This Policy

We may update this Policy. We will post changes here and update the effective date.