Privacy Policy
Effective September 30, 2026
Tandora provides an AI assistant to businesses. This policy explains what information we receive, what we do with it, and the choices you have. Questions go to jason@tandora.ai.
Who we work for
Our customers are businesses. When a business uses Tandora, the information it puts into the service (its records, its email, its team's messages) belongs to that business. We process it on the business's behalf and only to provide the service to it. If you are a customer's client or contact and have a question about your information, the business you deal with is the right first contact; we will help them answer it.
Signing in
People sign in to a customer's Tandora site with Google or with a one-time code sent by email.
- Google sign-in: we ask Google only for your email address, to check that it is on the list of people the business has allowed to sign in. We do not receive your password, contacts, files or any other Google data through sign-in.
- Email code: we send a six-digit code to the address you enter. We keep only a scrambled (hashed) form of the code, for ten minutes.
- Sessions: once signed in, your browser holds a secure cookie. We keep a hashed form of it and a record of sign-ins and refused attempts, for security.
A business's mailbox
A business can connect a mailbox it controls so that its assistant can read incoming mail, prepare draft replies for a person to review, and write to the business's owner. Mail is read to do that work for the business and for no other purpose. The assistant does not send mail to anybody else on its own.
Google user data
Tandora's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not use it to train general-purpose AI models.
Who else handles information
- AI processing: to answer, the assistant sends the relevant text to Anthropic's API. Anthropic processes it to return an answer, under its commercial terms.
- Email: Google, when a business's mailbox is a Google mailbox.
- Hosting: the servers the service runs on, operated by our hosting provider.
We do not sell personal information and do not share it for advertising.
Keeping it safe
Information travels encrypted (HTTPS). Each business's records are kept separately, access is limited to the people and systems that need it, and our logs record what happened, not what an email said.
How long we keep it
We keep a business's information for as long as it uses Tandora. When a business leaves, we delete its information on request, except what we must keep by law. Sign-in codes expire after ten minutes; sessions end after at most fourteen days.
Your choices
You can ask us what information we hold about you, ask us to correct it, or ask us to delete it, by writing to jason@tandora.ai. Where the information belongs to a business customer, we will work with that business to respond. You can remove Tandora's access to your Google account at any time at myaccount.google.com/permissions.
Changes
If we change this policy, we will post the new version here with a new effective date.