Who processes your data
Last updated
Version 1.0 · Effective
Tendthread uses other companies to run the product. This page sets out each category of recipient, what it does, the data it sees and where it operates. Every one is engaged as a processor under a contract that limits it to acting on our instructions. It forms part of the privacy policy.
Database hosting
Stores everything Tendthread holds. This is the primary copy of your data.
Data seen: account records; leads and their contact details; the content of messages sent and replies received; follow-up plans and seller context.
Processed in: United Kingdom.
Application hosting
Runs and serves the website and the product itself.
Data seen: anything passing through a page request; request metadata such as ip address and browser.
Processed in: United States.
Background job execution
Runs the scheduled work — planning follow-ups, processing incoming replies, and sending on schedule.
Data seen: everything a scheduled job reads, which includes the content of messages sent and replies received.
Processed in: United States.
AI model providers
Generate follow-up drafts, decide what a reply means, and read the seller context you provide.
Data seen: the content of messages sent and replies received; seller context and generated drafts.
Processed in: Varies by request, May be outside the United Kingdom.
Note: Access to models goes through a single routing provider, which selects a host for each request. That provider is configured to exclude any host that trains on the data it is sent, and prompt logging is switched off.
AI request records
Keep a record of what each AI request asked for and what it returned, so an email that went out can be explained afterwards.
Data seen: prompt and response content, including lead and reply text; timing and cost.
Processed in: European Union.
Note: These records are stripped of credentials before they leave, but not of message content — the content is the reason the record exists.
Transactional email delivery
Sends Tendthread's own email to you: address verification, password resets and account notices.
Data seen: your email address; the content of those messages.
Processed in: European Union.
Note: Never used for outreach. Follow-ups go through your own connected mailbox, never through Tendthread's sender.
Mailbox providers — Google and Microsoft
The mailbox you connect. Tendthread reads the threads it manages and sends follow-ups through your own address, using the access you grant.
Data seen: the contents of your mailbox covered by the access you grant; your account email address and basic profile.
Processed in: Global.
Note: Named, unlike the categories above, because you choose the provider yourself and grant the access directly.
The named list
A business customer entering a data processing agreement with us is entitled to know which companies sit behind these categories, and to object to a change. Request the named list from privacy@tendthread.com and we will provide it, along with notice of changes to it.
Changes to this page
Adding a category of recipient changes how your data is handled, so it is a new version of this document and of the privacy policy, with a new effective date. Account holders are told directly when one is added.