Back to Tenantry

Privacy Policy

Last updated: 2026-09-29

This Privacy Policy explains how [COMPANY LEGAL NAME] ("Tenantry", "we") collects, uses, and protects personal data when you use our website and Services.

1. Data we collect

  • Account data: email address and authentication identifiers (via Supabase Auth).
  • GitHub identity: when you connect GitHub, your GitHub username and numeric id, used solely to give you access to the private package feed.
  • Billing data: processed by Paddle.com as merchant of record. We receive subscription status and customer identifiers, not payment-card details.
  • Entitlement records: subscription status and the licence keys issued to your account.
  • Usage and performance data: pages visited, referring site, country, browser, device type and page-load measurements, collected by Vercel Web Analytics and Speed Insights without cookies and without identifying you (see section 4).

2. How we use data

  • To provide the Services: package-feed access and licence keys.
  • To manage subscriptions and respond to support requests.
  • To send service emails: when your access starts and when it ends. Paddle sends receipts and invoices.
  • To understand, in aggregate, how the website is used and how fast it is, so we can improve it.

3. Processors

We share data with sub-processors that operate the Services on our behalf, each under its own terms: Paddle (billing, as merchant of record), Supabase (authentication and database), GitHub (package-feed access), Vercel (hosting, Web Analytics and Speed Insights) and Resend (email). Some of them process data outside the UK and the EEA, under appropriate safeguards such as standard contractual clauses.

4. Cookies and analytics

We set only the cookies needed to keep you signed in. Paddle sets its own cookies when it shows prices or takes a payment, to prevent fraud and complete the checkout. Our analytics set no cookies: Vercel Web Analytics counts visits using a hash of the request that is discarded within 24 hours and cannot be used to identify you, and Speed Insights records how quickly pages load. Neither follows you across other websites.

5. Data retention

We retain account and entitlement data for as long as your account is active and as required for legal and accounting purposes. You may request deletion subject to those obligations.

6. Your rights

Depending on your jurisdiction you may have rights to access, correct, export, or delete your personal data, and to complain to a data-protection authority (in the UK, the Information Commissioner's Office). Contact us to exercise them.

7. Contact

Privacy enquiries: privacy@tenantry.dev. Data controller: [COMPANY LEGAL NAME], [REGISTERED ADDRESS].

This document is a template and must be reviewed by qualified legal counsel before launch.