Last updated: 1 March 2026
TEND. — a registered secondary name (binavn) of X Projects ApS, CVR 41736720, Østbanegade 123, 2100 København Ø — is committed to full compliance with the EU General Data Protection Regulation (GDPR). We process personal data lawfully, transparently, and only for specified purposes.
For all GDPR-related inquiries, you can reach our data protection team at contact@tendbutler.com.
As an EU/EEA resident, you have the following rights under GDPR:
Request a copy of all personal data we hold about you. We will provide this within 30 days.
Request correction of inaccurate data. You can also update most data directly in your Settings.
Request deletion of your data. Use "Delete Account" in Settings for immediate processing, or email us.
Request that we limit processing of your data while a dispute is resolved.
Receive your data in a structured, machine-readable format (JSON). Use "Export Data" in Settings.
Object to processing based on legitimate interest. We will cease processing unless we have compelling grounds.
| Activity | Legal Basis | Retention |
|---|---|---|
| Account creation & auth | Contract | Until deletion |
| Call handling & summaries | Contract | 12 months |
| Payment processing | Contract / Legal | 5 years (tax) |
| Calendar access | Consent | Until disconnect |
| Service improvement | Legitimate interest | Aggregated only |
| Call recording (opt-in) | Consent | 90 days |
We use the following sub-processors who may handle personal data:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database & auth | EU (Frankfurt) |
| Stripe | Payments | EU / US (SCCs) |
| Twilio | Phone & SMS | EU / US (SCCs) |
| VAPI | Voice AI | US (SCCs) |
| Hume AI | Voice synthesis | US (SCCs) |
| ElevenLabs | Voice synthesis | EU / US (SCCs) |
| Calendar | EU / US (SCCs) |
Tend uses minimal cookies:
| Cookie | Purpose | Type | Duration |
|---|---|---|---|
| sb-*-auth-token | Authentication session | Essential | Session |
| theme | Dark/light mode preference | Functional | 1 year |
We do not use advertising cookies, analytics trackers, or third-party marketing cookies. No consent banner is needed because we only use essential and functional cookies.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will:
Our lead supervisory authority is the Danish Data Protection Agency:
Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
www.datatilsynet.dk
For GDPR requests or data protection questions: contact@tendbutler.com