Privacy policy

This policy explains what Tendally does with information when you use our software: the point-of-sale app, the browser version, your online store, and this website. It is written to be read, not to be survived.

Who is responsible for what

There are two different relationships here, and it matters which one applies.

• Your business’s own records. Your products, sales, customers, suppliers, expenses, and staff belong to you. We hold them so your devices can sync and so nothing is lost if a device breaks. We do not sell them, mine them, or share them with other merchants.
• Your account with us. The email address, phone number, and payment record attached to your licence are ours to manage, because we need them to sell you a licence and support it.

What we store, and why

When you buy a licence

We record the email address and phone number you enter at checkout, the plan you bought, and the amount and reference of the payment. We need these to send you your activation code, to prove the licence is yours, and to handle renewals and refunds. Payments are processed by Paystack— your card details are entered on Paystack’s form and never reach us or our servers.

When you run your business

Your business’s data lives first on your own device, in a local database. When a connection is available it syncs to our cloud database, hosted on Supabase. That includes products and stock, sales and returns, purchases and expenses, customer records you choose to keep, and your staff accounts and their roles. Staff PINs are stored as one-way hashes and cannot be read back by us or by anyone else.

Product images and your store’s logo and banners are stored on Cloudflare R2 and served from our image domain. Anything you publish to your online store is, by design, public.

When someone shops at your online store

Your storefront collects information from your customers, and we hold it on your behalf:

• Orders. The name, phone number, delivery address, and note a shopper enters, plus what they asked for and the prices quoted at the time.
• Shopper accounts. If a customer signs up on your store, their name, email address, and a one-way hash of their password. An account belongs to your store alone — it is not a login for other Tendally stores, and we do not build a cross-store profile from it.
• Messages. Conversations between a shopper and your store, so both sides can see the history.
• Notifications. If a shopper turns on notifications, the browser subscription needed to send them. It contains no personal details and they can turn it off at any time.

If a shopper chooses to send their order by WhatsApp, that message and everything in it is handled by WhatsApp under its own terms, not ours.

On this website

We use Mixpanel to count page views and clicks so we can see which parts of the site are working. It records the pages visited, the buttons clicked, an approximate location derived from the connection, and the browser and device type. We do not use it to build advertising profiles. The internal admin area is excluded from tracking entirely.

Who else sees it

Only the service providers we need to run the product: Supabase (database and authentication), Cloudflare (image storage, and routing for online stores), Paystack (payments), Mixpanel (website analytics), and our email and SMS providers for sending activation codes and notifications. Each of them sees only what their job requires.

We will disclose information if we are legally required to. We will not sell it, and we will not hand your business’s records to a third party for their own purposes.

How long we keep it

Your business’s records are kept while your store exists, because accounting history is the point of the product — a sale from two years ago still matters to your reports. Sales, returns, and stock movements are permanent and append-only by design: they can be corrected with a return or an adjustment, but never silently edited or deleted. If you want your store and its data removed entirely, email us and we will do it.

Payment and licence records are kept for as long as tax and accounting obligations require.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, or ask us to delete it. To delete your account and its data, use tendally.com/delete-account — it works even if you no longer have the app installed. A shopper who has an account or has placed an order on a Tendally store should contact that shop first, since the shop decides what happens to its own customer records; if they cannot reach you, we will help.

Requests go to [email protected] and we aim to answer within 30 days.

Security, honestly stated

Data is encrypted in transit. Access to business data is enforced at the database level, so one store cannot read another’s. Staff PINs and shopper passwords are stored as one-way hashes. Devices hold a full local copy of your store, which is what makes offline selling work — so a lost or stolen device is a real risk, and you should deactivate its access from Settings and change PINs if that happens.

No system is perfect. If we ever discover a breach affecting your data, we will tell you what happened and what we are doing about it.

Changes

If we change this policy we will update the date above. If a change materially affects how we handle your data, we will tell you directly rather than quietly editing this page.

Contact

Email [email protected], or see the contact page.