Privacy Policy for Tendbble Application Services
Last updated: October 25, 2026 · Version 1.2
This Privacy Policy sets out the principles and guidelines applicable to the collection and processing of the User's Personal Data, informing them about:
- the Personal Data that Tendbble collects and the reasons for collecting it ;
- how Personal Data is used ;
- the rights they have over their Personal Data.
Tendbble reserves the right to modify this Privacy Policy as necessary, depending on changes to the Services offered or changes in legislation, at its sole discretion.
The management of Personal Data by Tendbble is always subject to the most recent version of the Privacy Policy. The User is invited to consult this Privacy Policy as often as necessary, it being specified that in the event of any changes, Tendbble will send written notification by any means to the User.
Google user data
This section explains how Tendbble accesses, uses, stores, shares, protects, retains and deletes data obtained from Google accounts ("Google user data"). Tendbble's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
1. Google user data we access
- Sign in with Google (scopes openid, email, profile): your Google account email address, name and profile picture, used to create and secure your Tendbble account.
- Gmail (gmail.readonly, gmail.compose, gmail.send, gmail.modify), only if you connect it: messages, threads, labels and attachments, so your agent can search and read your mail, summarise new messages, draft replies, and send, label or archive messages when you ask it to.
- Google Calendar and Google Meet (calendar.events.readonly, calendar.events, calendar.freebusy, meetings.space.readonly, meetings.space.created, meetings.space.settings), only if you connect them: your events, availability and, for meetings you hold, Meet spaces and transcripts, so your agent can tell you what is coming, find a free slot, and create or change events and meetings when you ask it to.
- Google Contacts (contacts.readonly, contacts.other.readonly, contacts), only if you connect it: names, email addresses and phone numbers of your contacts, so your agent can find the right person and add or update a contact when you ask it to.
- Google Drive, Docs and Sheets (drive.file, drive.readonly, drive), only if you connect them: the files you pick or ask about, so your agent can find, read, summarise, create or update documents when you ask it to.
- Google Tasks (tasks.readonly, tasks), only if you connect it: your task lists and tasks, so your agent can read and manage them for you.
- Google Health (sleep, activity and fitness, health metrics, all read-only), only if you connect it: so your agent can answer your questions about your own sleep and activity.
2. How we use Google user data
Google user data is used only to provide and improve the features you use in Tendbble: answering your questions about your mail, calendar, contacts, files, tasks and health data; preparing summaries, drafts and suggestions; and carrying out the actions you request or approve. When the mail assistant is on, each new message is read automatically to write a short summary and suggested replies for you; you can turn it off in Settings.
- We do not use Google user data for advertising, including personalised or retargeted ads, and we do not sell it.
- We do not use Google user data to develop, improve or train generalised artificial intelligence or machine learning models.
- No person at Tendbble reads your Google user data, unless you ask us to (for example for support) and give your consent, when it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or when the data has been aggregated and anonymised for internal operations.
3. AI processing
To answer you, the parts of your Google user data needed for a request (for example the mail you ask about) are processed by an AI model. These models run on Amazon Web Services: Anthropic Claude through Claude Platform on AWS, and the other models (Mistral, Qwen, Amazon Nova, xAI Grok, Moonshot Kimi) through Amazon Bedrock. By default they run in the European Union; a few models you can select yourself in the model picker (such as xAI Grok, Moonshot Kimi or some Claude models) run outside the European Union. These providers act as our processors, receive the data only to produce the answer, and do not use it to train their models.
4. With whom we share Google user data
We share Google user data only with the service providers that process it on our behalf to run Tendbble, under contracts requiring confidentiality and security:
- Amazon Web Services (hosting, storage, encryption keys and the AI models described above), in the European Union (Paris and Ireland) except for the models mentioned above;
- Langfuse (European Union), used to monitor the quality and security of AI answers: it may receive the text of AI requests and answers, with email addresses, phone numbers and bank and card numbers masked; the content of files and mailbox reads made by the agent is not sent to it.
5. How we protect Google user data
- Google access and refresh tokens are encrypted with AWS Key Management Service (a separate AES-256-GCM key for each value, bound to your account) and are never stored unencrypted.
- The data we keep (mail summaries, calendar slot titles, chat messages, imported files and their search index) is encrypted at rest with AWS KMS.
- All data is encrypted in transit (TLS). Access to production systems is restricted to authorised staff.
- Error reporting and analytics tools (Sentry, PostHog, Amplitude) are configured not to receive the content of your mail, files or messages.
6. Retention
Most Google user data is read when you need it and is not stored. What we do keep is deleted automatically:
- mail summaries and suggested replies: 60 days;
- calendar slots (times and titles) used to answer quickly: 30 days;
- your conversations with the agent, which may quote Google user data: 90 days;
- files you import (for example from Drive or a Gmail attachment): until you delete them, disconnect the service or delete your account.
7. Deletion and revoking access
- Disconnecting a Google service in Tendbble's Settings revokes Tendbble's access at Google and erases the data obtained from that account: mail summaries and the to-dos and reminders drawn from them, calendar slots, imported files and their search index. Notes your agent saved to its memory are kept until you delete your account; the disconnect screen tells you so.
- You can also revoke access at any time from your Google account at myaccount.google.com/permissions.
- Deleting your Tendbble account disconnects every Google service, revokes access and erases your data; you can restore your account during 30 days, after which the deletion is final. Billing records are kept for 10 years as required by French law.
- To request access to or deletion of your data, write to [email protected].
8. Changes
If we change how Tendbble uses Google user data, we will update this policy and notify you in the app and by email before the change applies, and ask for your consent again where required.
Definitions
Each of the terms mentioned above and below beginning with a capital letter shall have the meaning given in its definition, whether in the singular or plural, namely:
Application: refers to the mobile application "Tendbble" available online on the App Store (Apple) and Google Play (Android), accessible via smartphones and/or tablets
Account: refers to the interface that allows the User, upon subscription, to access all Services, view and/or modify their personal information, complete and publish their Profile, integrate content, and interact with other Users
Agreement: refers to all contractual documents binding between the Parties, as listed in the applicable terms and conditions
Personal Data: refers to any information relating to an identified or identifiable natural person (data subject), directly or indirectly, by reference to an identification number or to one or more factors specific to that natural person (including, but not limited to, their name, telephone number, date of birth). Information concerning the collection of the User's Personal Data is set out in the Privacy Policy
Privacy Policy: refers to this charter relating to the policy for managing the User's Personal Data implemented by Tendbble
Profile: refers to the interface where the User's information and choices are public. The Profile can be managed from the User's Account
Applicable regulations: refers to all legal and regulatory provisions in force applicable to the protection of personal data, in particular Law No. 78-17 of January 6, 1978 on information technology, files, and civil liberties, as amended, its implementing texts, Regulation (EU) 2016/679 of April 27, 2016 on data protection (hereinafter "GDPR") and any legal or regulatory provisions that may be added or replace them at a later date
Services: refers to all services offered and published by Tendbble within the framework of the Application, such as: - creating an Account;
- completing a Profile and publishing it for the purpose of connecting and sharing content between Users;
- editing, co-creating, and publishing content in the form of photographs, videos, or any other type of content;
- accessing a private messaging service to communicate with other Users;
- interacting via a public or private feed to discover, like, comment on, or share content published by the community;
- edit, co-create and publish collaborative content with other Users in the form of montages or any other collective media;
- purchase digital content;
- view products or services for marketing or advertising purposes;
- access content for commercial or advertising purposes.
User: refers to any person who uses or wishes to use the Application in order to benefit from the Services offered by Tendbble in this context.
Collection of personal data from the user
The information collected from the User for the performance of the Services includes Personal Data such as:
- their name;
- their first name;
- their username (unique for identification on the Application);
- their secondary name ("Display Name") used for public display of their profile;
- their biography (personal or professional description);
- their profile photograph and/or profile cover photograph;
- their gender;
- their phone number and/or email address;
- their age and date of birth;
- their country of residence;
- their live location, provided that the User has expressly consented to this;
- their Profile photograph and/or Profile cover photograph;
- their address book data (first name, last name, phone number, and email addresses of contacts); - their country of residence or location;
- connection data (login details, activity timestamps, interactions with the interface, and technical information about the device used.
Some of this Personal Data is mandatory in order to access the Services. If this Personal Data is not provided, the User may be unable to access the Application and the Services offered therein.
Retention Period
The Personal Data collected and processed is kept for the entire duration of the Services, so as not to exceed the period necessary for the purposes for which it is processed.
At the end of the Agreement, Personal Data will be retained for a period of twelve (12) months for the purpose of sending commercial offers to the User by any means whatsoever.
In any event, certain categories of Personal Data will be subject to intermediate archiving at the end of the Services, or their interruption for any reason whatsoever, if such Personal Data is necessary for Tendbble to protect itself against legal action. The duration of this intermediate archiving is five (5) years from the date of interruption of the Services, with the exception of proof of subscription to the Services and a copy of the Agreement, which will be kept, where applicable, for a period of ten (10) years from the performance of the Services, in accordance with Article L. 213-1 of the French Consumer Code.
In the event that the Agreement signed between Tendbble and the User has been suspended or blocked, the Personal Data will be retained for a period of five (5) years from the date of suspension, with the exception of proof of subscription to the Services and a copy of the Agreement, which will be retained, where applicable, for a period of ten (10) years from the date of performance of the Services, in accordance with Article L. 213-1 of the French Consumer Code.
Processing carried out,purposes and legal basis
Tendbble uses the Personal Data collected from the User for the following purposes:
- Performing the Services agreed between it and the User, including the creation, security, and management of the Account, as well as the provision of Services related to the use of the Application in accordance with the Agreement (legal basis: performance of pre-contractual measures or the Agreement).
- To send the User, where applicable, information about the Services by SMS, RSM, or any other means of communication, within the limits of the authorization given by the User (legal basis: consent).
- Improve the quality of the Services (legal basis: legitimate interest).
- Ensure compliance with (i) applicable legislation, (ii) normal use of the Services and related security measures, and (iii) this Privacy Policy (legal basis: compliance with legal and regulatory obligations).
- Send the User, in accordance with applicable legal provisions and with their consent where required by law, marketing, advertising and promotional messages, invitations to events and information relating to the use of the Services (legal basis: legitimate interest and consent).
- List the User in internal databases (legal basis: legitimate interest and performance of pre-contractual measures and the Agreement).
- Analyze Personal Data in order to better understand User behavior (legal basis: consent).
- Customize the ads displayed on the Application via the User Account (legal basis: consent).
- Enable the performance of ancillary services such as payment services and analysis of Personal Data (legal basis: performance of pre-contractual measures or the Agreement).
- Transfer Personal Data, once anonymized, to third-party companies involved in the performance of the Services (data analysis services) (legal basis: performance of pre-contractual measures or the Agreement and consent).
- Enable the User to exercise their rights in accordance with the applicable Regulations (legal basis: compliance with legal and regulatory obligations).
With regard to the personalization of advertisements, Tendbble provides third-party companies involved in the performance of these services with reports on the number and type of people who view and interact with their advertisements. These reports include information on:
- demographic data (geographical location, subject to the User's express consent);
- personal information (name, gender, interests, age, profile photographs, or any other publicly identifiable information)
- the advertisement(s) with which the User has interacted, if applicable;
- the time at which the User interacted with the advertisement(s), as well as how they interacted.
However, Tendbble does not share any information with these third-party companies that could be used to contact or identify the User, such as their name or telephone number, without obtaining their prior written consent.
Recipients and reasons for transfering personal data
Tendbble collects and processes the User's Personal Data personally through its legal representative and its team, its employees or external service providers, who are in any case bound by a confidentiality clause and informed of the security obligations relating to the collection and processing of Personal Data.
In the context of the use of the Services, some of the information collected may be transmitted:
- to Tendbble's teams (its legal representative and, where applicable, its collaborators, employees, occasional interns or external service providers);
- to GDPR-certified applications that Tendbble needs to process the actions it performs, such as third-party companies involved in the processing of payments and the analysis of Personal Data, in anonymized form; - to Tendbble's IT department;
- Tendbble's computer data hosting and backup server;
- when Tendbble is legally required to do so in order to comply with any legal request;
- in the event that Tendbble transfers its business by any means whatsoever, to the potential transferee of its business or shares in its share capital.
Transfer of personal data
Personal Data is stored within the European Union, namely with the following service providers, acting as processors within the meaning of the applicable Regulations:
- Amazon Web Service, with its registered office at 26-28 North Wall Quay, Dublin 1, D01 T3X0, IRELAND;
- Google Cloud, headquartered at 29-31, Avenue J.F. Kennedy, Luxembourg City, L-1855, LUXEMBOURG
These service providers selected by Tendbble have undertaken to Tendbble not to transfer any data outside the European Union. To date, no transfers outside the European Union have been reported by or these service providers. Should this be the case in the future, these service providers have undertaken to (i) inform Tendbble in advance and (ii) comply, in any event, with the provisions of the GDPR so that the minimum protection guarantees thereof are respected.
Furthermore, for the purposes of analysis, technical supervision and improvement of the Services, certain Personal Data of the User, in anonymized form, may be transferred outside the European Union and the European Economic Area.
These transfers may include the following destinations:
- the United States, to the following companies: Google LLC, Mixpanel, Sentry, Amplitude;
- Canada; and
- the United Kingdom.
However, the User is informed that these countries and the aforementioned companies have been recognized by the European Commission as adequate pursuant to adequacy decisions adopted by the latter on the basis of Article 45 of the GDPR establishing that these third countries or companies ensure an adequate level of protection of Personal Data in accordance with the applicable Regulations.
Hypertext links, "cookies" and internet tags
7.01 Hypertext links
The Application contains a number of hypertext links to other sites, set up with the authorization of Tendbble. However, Tendbble does not have the ability to verify the content of the sites thus visited, and therefore assumes no responsibility for them.
7.02 Cookies
A "cookie" is a small information file sent to the User's browser and stored on the User's device (e.g., computer or smartphone) (hereinafter referred to as a "Cookie"). This file includes information such as the User's domain name, the User's internet service provider, the User's operating system, and the date and time of access. Cookies do not in any way damage the User's device.
Unless the User decides to disable Cookies, they accept that the Application may use them. The User may disable Cookies at any time, free of charge, using the disabling options available to them and listed below, bearing in mind that this may reduce or prevent access to all or part of the Services offered by the Application.
Tendbble may process information about the User's visit to the Application, such as the pages viewed or searches performed. This information enables Tendbble to improve the content of the Application and the User's browsing experience.
Cookies facilitate navigation and/or the provision of the Services offered by the Application. The User may configure their browser to allow them to decide whether or not to accept Cookies so that Cookies are stored on their device or, conversely, are rejected, either systematically or depending on their issuer. The User may also configure their browser software so that they are asked whether to accept or reject Cookies before a Cookie is likely to be stored on their device. Tendbble informs the User that, in this case, not all of the features of their browser software may be available.
The maximum storage period for Cookies is thirteen (13) months after they are first placed on the User's device, as is the period of validity of the User's consent to the use of Cookies.
The lifetime of Cookies is not extended with each visit. The User's consent must therefore be renewed at the end of this period.
If the User refuses to accept Cookies on their device or browser, or if the User deletes those stored there, the User is informed that their browsing and experience on the Application may be limited. This may also be the case when Tendbble or one of its service providers cannot recognize, for technical compatibility purposes, the type of browser used by the device, the language and display settings, or the country from which the device appears to be connected to the internet.
Where applicable, Tendbble declines all responsibility for the consequences of the degraded functioning of the Application and any Services offered by Tendbble resulting from (i) the User's refusal of Cookies, and (ii) the impossibility for Tendbble to store or consult the Cookies necessary for their functioning due to the User's choice.
Each browser has different settings for managing cookies and user preferences. These settings can be found in the browser's help menu, which will explain how the User can change their cookie preferences.
At any time, the User may choose to express and modify their preferences regarding Cookies. Tendbble may also use the services of external service providers to help it collect and process the information described in this section.
7.03 Internet tags ("TAGs")
Tendbble may occasionally use internet tags (also known as "tags," action tags, single-pixel GIFs, transparent GIFs, invisible GIFs, and one-for-one GIFs) and deploy them through a web analytics partner that may be located (and therefore store the corresponding information, including the User's IP address) in a foreign country. This service provider has undertaken to comply with the applicable Regulations and is responsible, in its capacity as a processor, for the use of any Personal Data it may process.
These tags are placed both in online advertisements enabling Internet users to access the Application and on the various pages of the Application.
This technology enables Tendbble to evaluate visitors' responses to the Application and the effectiveness of its actions (for example, the number of times a page is opened and the information consulted), as well as the User's use of the Application.
Tendbble may collect information about visitors to the Application and other websites through these tags, compile reports on the activity of the Application for Tendbble, and provide other services related to the use of the Application and the internet.
User rights over their personal data
8.01 User Rights
The User has the right to obtain a copy of the Personal Data concerning him/her held by Tendbble.
The User also has the right to access the Personal Data held by Tendbble in order to request the correction, modification or deletion of any incorrect information.
The User has the right to object to or restrict the processing of their Personal Data.
The User also has the right to the portability of their Personal Data, i.e. the right to receive the Personal Data provided to Tendbble in a structured, commonly used and machine-readable format and the right to transmit this Personal Data to another data controller.
Finally, the User also has the right, where applicable, to define guidelines regarding the fate of their Personal Data after their death.
These rights may be exercised at any time by providing proof of identity and a legitimate reason if required by the applicable Regulations, by sending a simple request to:
- from the "PERSONAL DATA" tab;
- by registered letter with acknowledgment of receipt to the following postal address:
S.A.S Tendbble
Rue Pierre Laffitte
Alpha Sophia Antipolis
06410 Biot – France
- by email to the following email address:[email protected] .
Tendbble will endeavor to respond to the User's request within a reasonable time frame and, in any event, within the time limits set by the applicable Regulations.
The User has the right, where applicable, to lodge a complaint with the competent supervisory authority (the CNIL: CNIL - Service des Plaintes - 3 Place de Fontenoy - TSA 80715 - 75334 PARIS CEDEX 07), or to seek redress from the competent courts if they consider that Tendbble has not respected their rights.
8.02 Personal information and minors
The use of the Services, including the creation of an Account, is reserved for Users who are natural persons over the age of fifteen (15) and capable of entering into obligations in accordance with applicable law. However, it is specified that minor Users may only use the Services available via the Application to the extent that they are authorized to do so by applicable law or, where applicable, have obtained the authorization of their legal representatives.
Where the minor User is under the age of fifteen (15), only an adult User with parental authority may create the Account in the name and on behalf of the minor User.