Data Governance Policy
How Tenzify decides what data to collect, protects it, keeps it only as long as needed, and answers to the people it belongs to.
Purpose and scope
This policy explains how Tenzify LLC manages the data behind its apps and websites: who is responsible, how data is classified and protected, how long we keep it, and how we handle requests and incidents. It applies to all Tenzify products, including DealBuddy and Glucose Converter, and to every provider that processes data for us. Our Privacy Policy describes the same practices from a user's point of view.
Principles
- Minimization. We collect only what a feature needs, and design features to work with less.
- Purpose limitation. Data is used only for the reason it was collected.
- Transparency. Our policies say plainly what we do, and we update them when products change.
- Security by default. Data is encrypted in transit and access is restricted from the start.
- User control. People can see, export, correct and delete their data.
Responsibility
Tenzify's managing member is the data owner and is accountable for decisions about what data we collect, who can access it and which providers we use. Every service provider processes data only on our instructions and under its own security and privacy commitments.
Data classification
| Data | Class | Notes |
|---|---|---|
| Account details (email, name, sign-in identifiers) | Confidential | Needed to provide an account |
| Deal and vehicle details, including VIN | Confidential | Visible only to the account holder |
| Deal sheet images | Restricted, temporary | Deleted after processing |
| Chat messages | Confidential | Used only to answer the user |
| Area (city or state) | Confidential | Device coordinates are never stored |
| Purchase status | Confidential | Card and bank details never reach our systems |
| Cached market comparisons | Internal | Not linked to a person |
| Support email | Confidential | Kept only as long as needed |
Access and security controls
- Access to production systems is limited to the managing member, on a least-privilege basis.
- Multi-factor authentication is required on administrative accounts for hosting, code, database, payment and app store consoles.
- Secret keys are kept in server environment configuration, never in source code or in the apps. The apps contain only keys designed to be public.
- All traffic uses HTTPS. Each user's records can be reached only through that user's signed-in account.
- Payment card data is handled entirely by Apple, Google and Stripe.
Service providers
The current list of providers and what each one does is in our Privacy Policy. Before adding a provider, we review what data it needs, its security practices and whether it uses customer data to train models, and we prefer providers that don't. We update the list whenever it changes.
Use of AI
- AI providers receive only the data needed for the specific request.
- Prompts instruct models not to extract personal identifiers from documents.
- We don't use customer data to train our own models, and we choose AI providers whose API terms exclude training on our data.
- AI output in our apps is informational. DealBuddy does not give financial, legal or tax advice.
Retention schedule
| Data | How long we keep it |
|---|---|
| Account and saved deals | Until the user deletes them or the account |
| Deleted accounts in backups | Removed within 30 days |
| Deal sheet images | Deleted after processing |
| Usage counts | While the account exists |
| Server logs | Up to 90 days, for security and troubleshooting |
| Cached market comparisons | Refreshed or removed as they go stale |
| Support email | Up to 2 years, unless a longer period is legally required |
Data requests
Users can delete a DealBuddy account in the app at any time. Other requests (access, copy, correction or deletion) go to privacy@tenzify.org. We verify the requester through the email on the account and complete requests within 45 days, usually much sooner.
Incident response
If we suspect a security incident, we contain it, investigate what was affected and fix the cause. If personal information was exposed, we notify affected users and any regulators as required by law, including California's breach notification law, without unreasonable delay.
Review
We review this policy at least once a year and whenever we launch a product or add a provider. Questions about it go to privacy@tenzify.org.