Scope#
This policy explains how Changsha Tenon Artificial Intelligence Technology Co., Ltd. (长沙榫卯人工智能科技有限公司), the company behind Tenon AI (“we”), handles personal information on its website, in inquiries and in service delivery. Tenon Account and each product have their own privacy notices, which govern their processing.
Information we handle#
- Browsing: no sign-in is required. The website uses no analytics, advertising or third-party tracking scripts.
- Business outreach: we collect the publicly disclosed contact details of companies and their managers (company, name, title, work email, and any phone number or WeChat ID the company lists on its website) from company websites and public business registries, send business emails about our services or add you as a contact on WeCom, and keep a record of the correspondence, chat messages and replies.
- Preferences: your appearance and language choices are kept in your browser; see the Cookie Policy.
- Inquiries: the name, company, contact details, requirements and business information you share when you reach us by email, WeChat, WeCom or Feishu, or during a free assessment.
- Tenon Account: email, display name, sign-in credentials and sessions; see the Tenon Account Privacy Notice.
- Delivery: in paid projects, the business material and system data you provide, and the conversations and run records between your staff and agents.
Your organization decides the purpose and means of processing delivery data; we process it on your behalf under the contract and data processing agreement.
How we use it#
- Answering inquiries, running free assessments, quoting, contracting and invoicing.
- Send business emails to companies that may need our services, or contact them on WeCom. Once you reply “unsubscribe”, tell us in a chat that you are not interested, or ask us to stop, we will not contact you again and can delete the related records.
- Delivering and maintaining your systems, workflows and agents under contract.
- Keeping the website, accounts and services secure.
We do not sell personal information, use your material to train models, or pass it to third parties for marketing.
Processors and third parties#
We use third parties only as needed to provide the service, and hold them to equivalent protection duties:
- Tencent Cloud: servers for the website and account service, and delivery of verification emails, in mainland China.
- Feishu: sending and receiving business email and instant messages, and storing business outreach records, in mainland China.
- WeCom: instant messages in business communication, in mainland China.
- Anthropic (United States): Claude helps us find and organise publicly available company information and contact details, draft business emails and, once we approve them, send them through Feishu. It also reads your replies to our business emails, summarises them and drafts our answers, which are likewise sent only after we approve them. It processes the company, name, title, public contact details and the correspondence.
- Model services: for each delivery we choose registered model services in mainland China, named in the contract annex.
- Third-party sign-in: when you choose GitHub, Google or Apple to sign in to Tenon Account, that provider handles the sign-in request.
Otherwise we share personal information with third parties only when the law requires it or with your separate consent.
Location and retention#
Personal information is stored in mainland China by default. If a service outside mainland China is genuinely needed, we explain it first and proceed only with your written consent and the legally required steps.
Business outreach records are stored in Feishu Base in mainland China. When our staff are outside mainland China, they view these records and the related correspondence remotely for business communication; when they talk with you on WeCom or Feishu, the chat messages and emails are also kept on the phones and computers they use outside mainland China. To find and organise publicly available company information, to draft and send business emails, and to handle your replies we use Claude from Anthropic PBC (United States, privacy@anthropic.com): the company, name, title, public contact details and the correspondence are sent to its service in the United States and handled and kept under its privacy policy. You can exercise your rights over this information through support@tenonai.cn as well, or contact Anthropic directly.
Enquiry records are kept for no more than 3 years after our last contact. Business outreach records are kept for no more than 2 years after our last contact, and unsubscribe records are kept indefinitely so we never contact you again. Contracts, invoices and similar records are kept for the periods the law requires. Delivery data is returned or deleted after the engagement ends, as the contract specifies.
To keep our network secure, our servers record access and security logs: the time, IP address and page requested, without URL parameters. These logs are deleted automatically after 6 months.
Security#
The whole site uses HTTPS and HSTS, access follows least privilege, keys never enter code or logs, and account database backups are cleaned up automatically after 30 days. See Security and data for more.
Your rights#
You can access, copy, correct or delete your personal information, withdraw consent, or ask us to explain how we process it. Tenon Account can be deleted from the account page; for anything else, email support@tenonai.cn and we will reply within 15 business days.
Delivery data is controlled by your organization. Staff should first contact their organization, and we will help it respond.
Children#
Our services are for businesses and adults. We do not knowingly collect personal information from children under 14, and delete any we find.
Changes to this policy#
We update this policy on this page with its effective date, and announce significant changes on the website in advance.
Questions about this page? Email support@tenonai.cn.