Back to Tend.

GDPR & Cookie Policy

Last updated: 1 March 2026

Our Commitment to GDPR

TEND. — a registered secondary name (binavn) of X Projects ApS, CVR 41736720, Østbanegade 123, 2100 København Ø — is committed to full compliance with the EU General Data Protection Regulation (GDPR). We process personal data lawfully, transparently, and only for specified purposes.

Data Protection Officer

For all GDPR-related inquiries, you can reach our data protection team at contact@tendbutler.com.

Your GDPR Rights

As an EU/EEA resident, you have the following rights under GDPR:

Right of Access (Art. 15)

Request a copy of all personal data we hold about you. We will provide this within 30 days.

Right to Rectification (Art. 16)

Request correction of inaccurate data. You can also update most data directly in your Settings.

Right to Erasure (Art. 17)

Request deletion of your data. Use "Delete Account" in Settings for immediate processing, or email us.

Right to Restriction (Art. 18)

Request that we limit processing of your data while a dispute is resolved.

Right to Data Portability (Art. 20)

Receive your data in a structured, machine-readable format (JSON). Use "Export Data" in Settings.

Right to Object (Art. 21)

Object to processing based on legitimate interest. We will cease processing unless we have compelling grounds.

Data Processing Activities

ActivityLegal BasisRetention
Account creation & authContractUntil deletion
Call handling & summariesContract12 months
Payment processingContract / Legal5 years (tax)
Calendar accessConsentUntil disconnect
Service improvementLegitimate interestAggregated only
Call recording (opt-in)Consent90 days

Sub-Processors

We use the following sub-processors who may handle personal data:

ProviderPurposeLocation
SupabaseDatabase & authEU (Frankfurt)
StripePaymentsEU / US (SCCs)
TwilioPhone & SMSEU / US (SCCs)
VAPIVoice AIUS (SCCs)
Hume AIVoice synthesisUS (SCCs)
ElevenLabsVoice synthesisEU / US (SCCs)
GoogleCalendarEU / US (SCCs)

Cookie Policy

Tend uses minimal cookies:

CookiePurposeTypeDuration
sb-*-auth-tokenAuthentication sessionEssentialSession
themeDark/light mode preferenceFunctional1 year

We do not use advertising cookies, analytics trackers, or third-party marketing cookies. No consent banner is needed because we only use essential and functional cookies.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will:

  • Notify the Danish Data Protection Agency (Datatilsynet) within 72 hours.
  • Notify affected users without undue delay if the breach poses a high risk.
  • Document all breaches and remedial actions taken.

Supervisory Authority

Our lead supervisory authority is the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35
2500 Valby, Denmark
www.datatilsynet.dk

Contact Us

For GDPR requests or data protection questions: contact@tendbutler.com