Privacy Policy

Overview

Tend is an AI inbox assistant that helps people connect their mailbox, review messages, understand priorities, draft replies, and send only the replies they approve. This Privacy Policy explains what information Tend collects, how it is used, and the choices available to users.

Information we collect

Tend does not collect mailbox data to sell, advertise, or build a profile about you. When you connect Gmail or Outlook, Tend syncs and stores only the information needed to show your inbox, create the features you request, and keep the service secure.

We do not sell mailbox data, use it for advertising, or allow staff to read it as a normal part of operating Tend. The information Tend needs may include:

• Basic account details, such as your name, email address, connected provider, sign-in status, and subscription status.
• Mailbox content needed for Tend features, such as messages, subject lines, participants, thread context, labels or folders, supported attachments, and draft or sent-message identifiers. This is used to show your inbox, summarize, search, draft, and complete actions you request.
• OAuth access tokens and provider account identifiers so Tend can sync your mailbox and complete actions you request. Tokens are encrypted, and Tend never asks for or stores your mailbox password.
• Drafts, compose text, chat or search prompts, settings, and feedback you create in Tend.
• Limited technical information, such as logs, sync status, browser details, errors, and feature usage, to keep Tend reliable and secure.
• Billing status and payment records handled by Stripe or another payment processor. Tend does not store full payment card numbers.

How we use information

• Authenticate you and maintain your Tend session.
• Sync, display, sort, summarize, search, and analyze your connected inbox.
• Detect action items, deadlines, priority, tone, safety signals, related threads, and context that may help you respond.
• Draft, improve, save, or send messages only through actions you choose in the product.
• Maintain integrations with Gmail, Outlook, AI providers, hosting providers, analytics or logging tools, and payment processors.
• Protect the service, prevent abuse, debug errors, enforce limits, provide support, and comply with legal obligations.

Mail permissions and user control

Tend may request mailbox permissions such as reading messages, modifying mailbox state, saving drafts, and sending mail. Reading is used to show and analyze messages. Modification is used for actions such as saving drafts, marking messages as read, or organizing messages when you choose those features. Sending is used only when you approve a send action. Tend is designed so that messages are not sent automatically.

You can disconnect a mailbox through the app or directly through your Google or Microsoft account security settings. Disconnecting revokes future access for that mailbox, although previously synced local data may remain until deleted under the retention process below.

AI processing

Tend uses AI systems to summarize messages, classify inbox items, draft replies, improve text, read supported attachments, and answer questions about connected mail. To provide those features, relevant message content, metadata, attachments, settings, and user prompts may be processed by Tend systems and by configured AI service providers.

Tend does not use your mailbox content to train its own general-purpose foundation model. Third-party AI providers are used as processors to provide requested features, subject to their business or API terms and the configuration used by Tend.

Google API Limited Use statement

Tend's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features, maintain security, comply with law, or perform actions the user requests.

Tend does not sell Google user data, use it for advertising, or transfer it to third parties except to service providers needed to operate the product, comply with law, protect users, or complete actions the user directs. Humans do not read Google user data unless the user gives permission for support, access is necessary for security or abuse investigation, access is required by law, or the data has been aggregated and de-identified.

Sharing information

• Service providers that help run Tend, such as hosting, database, logging, email, AI, and payment processors.
• Mailbox providers, when Tend performs an action you request on a connected mailbox.
• Legal, safety, or compliance recipients when required to protect users, comply with law, or enforce agreements.
• A successor organization if Tend is involved in a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate protections.

Retention and deletion

Tend keeps account, mailbox, draft, usage, and billing records for as long as needed to provide the service, meet legal or billing obligations, resolve disputes, maintain security, and operate backups. You may request deletion of your Tend account data. Some information may remain for a limited time in backups, audit logs, billing records, or records required by law.

Deleting data from Tend does not necessarily delete messages from your Gmail or Outlook account unless a product feature explicitly performs a mailbox deletion action that you request.

Security

Tend uses administrative, technical, and organizational safeguards intended to protect user data, including access controls, secure transport, scoped OAuth access, and operational monitoring. No system is perfectly secure, so users should keep their provider accounts and devices protected.

Your choices

• Disconnect Gmail or Outlook from Tend at any time.
• Review, edit, approve, or skip AI-generated drafts before sending.
• Request access, correction, export, or deletion of your Tend account data where applicable law provides those rights.
• Manage provider-level access in your Google or Microsoft account settings.

Children

Tend is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy as the product, legal requirements, or business practices change. The updated page will show the latest effective date. If a change is material, Tend may provide additional notice where appropriate.

Contact

For privacy questions or requests, contact Tend at privacy@tendbox.app.