Tender (“Tender”, “we”, “us”) is a private, verified community where finance leaders ask for and give candid second opinions. This policy explains what we collect, how we use it, who can see it, and the choices you have. It applies to https://tendercfoa.com and the Tender app.
The short version: other members see your handle, role, industry and company size, not your name, unless you choose to show it. We verify who you are so the room stays real, and every time our team looks at your verification record it's logged where you can see it. We don't sell your information, and we don't run ads.
1. Information we collect
Information you give us
- Account details: your email address and a password. Passwords are handled by our authentication provider, and we never see them in plain text.
- Verification details: your legal name, company, job title, work email, LinkedIn profile URL, role, industries, revenue band and headcount band. We use these to confirm you are a finance leader.
- Your member profile: the handle you choose, plus your role, industries and revenue band.
- What you post and do: questions, answers, replies, votes, “helpful” marks, swipes, the questions you watch, reports you file, and your topic preferences.
- Named posts: if you tick “Show my name on this post”, we save your name, title and company as they were on that date and show them on that post.
- Connections: requests you send or receive, any note you add, whether they were accepted, and members you block.
- Scheduling: your time zone, the times you mark as free, and the time and video link of calls you book.
Information collected automatically
- Usage records: which screen you used (recorded by screen type, never the address of a specific question or invitation), the kind of interaction (for example a tap, scroll, form submission, or that the keyboard was used; never what you typed), and your device and browser type.
- Analytics: Vercel Web Analytics counts page views without cookies and without identifying you.
- Security data: a one-way hash of your IP address, used to limit abuse (for example repeated sign-in attempts), and standard server logs.
Calendar information (only if you connect a calendar)
See section 6.
2. How we use information
- To run Tender: showing questions to the members best placed to answer them, delivering answers, and filing closed questions in the Ledger.
- To verify that members are finance leaders, and to keep Tender's membership limits.
- To send the emails you'd expect: notifications, digests, invitations, connection requests and call invitations.
- To write summaries of closed questions (see “Service providers”).
- To connect members who both agree to it, and to help them find a time to talk.
- To keep Tender safe: preventing abuse, investigating reports, and enforcing our Terms.
- To understand how Tender is used, so we can improve it.
We do not sell personal information, we do not share it for targeted advertising, and we do not show ads.
3. Who can see what
- Other members see your handle, role, industries and revenue band next to what you post, not your name, company or email.
- Named posts: if you choose to show your name on a post, members see your name, title and company on that post. You can remove it at any time, and it comes off automatically if your title or company changes. Once removed, the post shows no name and no handle.
- Connections: before a request is accepted, the member who receives it sees only the requester's role, industries, company size and note. If they accept, you both see each other's name, title, company and email. Once you know who someone is, you may be able to tell which posts are theirs, and they may be able to tell which are yours.
- Tender's team can see your verification details to confirm membership and to act on reports. Every time they do, it's recorded, and you can see those records in Settings.
- Academic observers (verified faculty and students, read-only) can see summaries of closed questions that our team chooses to publish for them. Those summaries don't include names or handles.
- Legal and safety: we may disclose information if the law requires it, or to protect the safety, rights or property of members, Tender or others.
- Business changes: if Tender is reorganized, merged or sold, information may transfer as part of that. This policy would continue to apply to it.
4. Service providers
We use a small number of companies to run Tender. They process information only to provide their service to us:
- Vercel: hosting and cookieless analytics (United States).
- Neon: database and sign-in (United States).
- Resend: email delivery.
- OpenAI: writing summaries of closed questions. The question and its answers are sent without their authors' names, handles or emails. Our requests ask OpenAI not to store them, and OpenAI does not train its models on data sent through its API.
- Google and Microsoft: calendar scheduling, only if you connect a calendar.
5. Cookies and local storage
We use only essential cookies: the ones that keep you signed in and that protect sign-in and calendar connections. The app also saves a few preferences on your device, such as whether you've seen the install guide. We don't use advertising or cross-site tracking cookies.
6. Google and Microsoft calendar data
Connecting a calendar is optional. It lets Tender find times when you and a member you've connected with are both free, and add the call you book to your calendar. If you connect Google Calendar, Tender asks Google for:
- Free/busy information (
calendar.freebusy): when you are busy. Tender never sees event titles, descriptions, attendees or locations. - Events on calendars you own (
calendar.events.owned): used only to create the call you book through Tender, with a Google Meet link, and to cancel it if you or the other member cancels in Tender. Tender doesn't read, change or delete any other event. - Your email address: so you can see which account is connected.
If you connect Outlook or Microsoft 365, Tender uses Microsoft's Calendars.ReadWrite permission for the same two purposes only. It reads the start time, end time and busy status of events in the scheduling window, never their content, and it creates or cancels only the calls you book through Tender.
Limited Use. Tender's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, calendar data is:
- used only to find shared free times and to add or cancel the calls you book;
- never sold, never used for advertising, and never used to train AI or machine-learning models;
- never transferred to anyone else, except as needed to provide scheduling, to comply with the law, or as part of a merger or acquisition with your notice;
- never read by people, unless you ask us to (for example for support), it's needed for security or to investigate abuse, or the law requires it.
Storage and deletion. Busy times are fetched when they're needed and are not stored. Tender stores the access tokens that let it reach your calendar, encrypted (AES-256-GCM), along with the connected account's email. When you disconnect a calendar in Tender, we delete them straight away, and for Google we also revoke Tender's access. You can also remove access at any time from your Google Account (Security → Third-party access) or your Microsoft account. Deleting your Tender account deletes all calendar connections.
The other member sees only which of their suggested times work for both of you, never your calendar. The call you book (its time, and a Meet or Teams link) is saved with your connection so both of you can see it.
7. How long we keep information
- Account, verification and profile information: while your account is open.
- Connection requests that aren't answered expire after 14 days.
- Calendar tokens: until you disconnect the calendar or close your account.
- When you ask to delete your account (Settings → Account), we delete your account, verification details, connections and calendar connections within 30 days. We may keep what you posted without your name or handle, so that threads other members contributed to still make sense. We may keep limited records longer where the law requires it, or to prevent fraud and abuse.
8. Security
Information is encrypted in transit. The database enforces access rules so that each member's data is reachable only by the right people, calendar tokens are encrypted at rest, and staff access to verification records is logged. No system is perfectly secure. If you believe your account has been compromised, contact us right away.
9. Your choices and rights
- See and update your profile, topics and industries in Settings.
- Remove your name from any post, or from all your posts at once.
- Decline or block connection requests. Disconnect calendars at any time.
- Ask for a copy of your information, ask us to correct it, or ask us to delete your account, by emailing privacy@tendercfoa.com or using Settings.
Depending on where you live (for example California, other U.S. states, the UK or the EU), you may have additional rights: to access, correct, delete or port your information, to object to or restrict some uses, and not to be treated differently for using those rights. We'll respond within the time the law requires. You may also complain to your local data protection authority.
10. Where information is stored
Tender is operated from, and stores information in, the United States. If you use Tender from outside the United States, your information will be transferred to and processed there.
11. Children
Tender is for working professionals. It is not directed to anyone under 18, and we don't knowingly collect their information.
12. Changes to this policy
If we make material changes, we'll update the date at the top and tell members in the app or by email before the changes apply.
13. Contact
Questions or requests about privacy: privacy@tendercfoa.com.
