Tenuta IQEffective 1 October 2026. Draft for legal review.
1. Scope
This policy explains how Tenuta IQ ("we") handles personal information when you use Tenuta IQ, visit our websites, or deal with us. We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles, and, where they apply, the UK GDPR, the EU GDPR, Singapore's PDPA, New Zealand's Privacy Act 2020 and applicable US state privacy laws. For Customer Data your organisation uploads into the Service, your organisation is the controller and we act as processor under our Data Processing Addendum.
2. What we collect
Account and contact data: name, work email, phone, role, organisation, billing contact and tax identifiers. Customer Data: the records, documents and contact details your organisation enters about properties, leases, parties, tenants, franchisees, owners and advisers, which may include personal information about individuals named in those documents. Usage data: log-ins, features used, device and browser data, IP address, approximate location, and diagnostic logs. Sign-in provider data: if you sign in or sign up with Google or Microsoft, that provider sends us your name, your verified email address and an account identifier; we never receive your password or any other data from that account. Payment data: processed by Stripe; we receive only the card brand, last four digits and payment status. Support and marketing data: messages you send us, and, with consent where required, marketing preferences.
3. Why we use it
To provide, secure and support the Service; to bill you; to generate critical dates, notices, reports and AI-assisted extractions at your direction; to communicate service notices; to improve the Service using aggregated or de-identified data; to comply with law; and, with your consent or where permitted, to send marketing you can opt out of at any time.
4. AI processing
Documents you submit for extraction are sent to our AI and OCR sub-processors, processed on your instruction, and not used to train their models. Extraction outputs are stored in your account as proposals until a user accepts them.
5. Where data is stored
Each customer account is hosted in a single regional cell: Australia (Sydney), Asia Pacific (Singapore), United Kingdom (London), European Union (Frankfurt) or United States (US East). Customer Data, backups and logs remain in that cell. Some sub-processors (for example email delivery or payment processing) operate globally; the list is on our Sub-processors page. Where personal information leaves its region we rely on standard contractual clauses or equivalent safeguards.
6. Sharing
We share personal information only with sub-processors who help us run the Service, with integrations you connect (for example your accounting system), with professional advisers, with authorities where required by law, and in connection with a merger, acquisition or sale of assets, in which case we will notify you. We do not sell personal information.
7. Retention
Account data is kept while your account is active and for up to seven years afterwards for legal and financial record-keeping. Customer Data is retained for 30 days after termination for retrieval and deleted from live systems and backups within a further 90 days, unless law requires longer. Usage logs are kept for 13 months.
8. Your rights
Depending on where you live you may have the right to access, correct, delete, restrict or port your personal information, to object to processing, to withdraw consent, and to complain to a regulator (in Australia, the Office of the Australian Information Commissioner). Contact us through our contact form. If your personal information is held in a customer's account, we will refer your request to that customer where appropriate.
9. Cookies
See our Cookie Policy.
10. Security
See our Security page. We will notify affected customers and regulators of eligible data breaches as required by the Notifiable Data Breaches scheme and equivalent laws.
11. Children
The Service is for business use and not directed at children under 18.
12. Changes and contact
We may update this policy; material changes will be notified in the Service. Privacy Officer, Tenuta IQ, Australia, through our contact form.