Skip to content
Legal & Compliance

Privacy Policy

How Tendon Systems collects, protects, uses, and handles your personal information, project briefs, and technical integration data.

Effective Date: October 15, 2026

At Tendon Systems ("we," "us," or "our"), your privacy and the confidentiality of your business operations are foundational to how we build software. This Privacy Policy details our practices regarding the collection, use, protection, and disclosure of personal and operational information when you access our website (tendonsystems.com), submit project inquiry forms, schedule discovery calls, or engage our custom software engineering and systems integration services.

By using our website, submitting discovery forms, or engaging our engineering team, you acknowledge and agree to the information handling practices described in this policy.

1. Information We Collect

We collect information in three ways: directly from you when you interact with our discovery channels, automatically when you navigate our digital properties, and through technical credentials or sample datasets provided during contracted engineering projects.

A. Information You Provide Voluntarily

  • Contact & Identity Data: Full name, professional email address, phone number, company or business name, and job title.
  • Project & Operational Data: Information submitted via our quote and contact forms, including your industry, operational bottlenecks, current software and spreadsheet workflows, calendar platforms (e.g., Google Calendar, Microsoft 365, Calendly, Cal.com, Acuity), desired system modules, target delivery timelines, and budget expectations.
  • Direct Communications: Notes and correspondence from email exchanges, phone consultations, WhatsApp inquiries, discovery interviews, and scoping sessions.

B. Information Collected Automatically

  • Technical & Device Data: Internet Protocol (IP) address, browser type and version, device operating system, language preferences, referring website URLs, access timestamps, and page request headers.
  • Usage & Navigation Metrics: Pages visited, duration of stay, button clicks, and interaction paths used to diagnose server errors and evaluate site performance.
  • Security & Anti-Abuse Tokens: Technical tokens, rate-limiting session keys, and silent honeypot validations used to defend our contact and quote endpoints against malicious automated submissions.

C. Client Project & Development Data

For contracted development projects, clients may supply access credentials, API keys, staging datasets, or sandbox environment configurations for third-party services (such as Stripe, calendar APIs, SMS gateways, or cloud hosting providers). All such materials are treated as confidential information under your executed Statement of Work or non-disclosure agreement.

2. How We Use Your Information

We process collected data exclusively for legitimate engineering, operational, and commercial purposes:

  • Consultation & Quoting: Evaluating project requirements, assessing feasibility, and preparing written proposals, technical architectural blueprints, and tailored cost estimates.
  • System Delivery & Engineering: Developing, configuring, testing, deploying, and maintaining custom operational platforms, client portals, automated workflows, and API integrations.
  • Client Support & Account Care: Providing ongoing maintenance, server monitoring, bug diagnostics, security patches, and responding to technical support inquiries.
  • Communication & Updates: Sending discovery call confirmations, milestone progress notifications, project updates, and administrative invoices.
  • Platform Security & Legal Compliance: Protecting our servers, client environments, and intellectual property against unauthorized access, bot exploitation, and spam, as well as satisfying our tax, accounting, and legal recordkeeping duties.

3. We Do Not Sell Your Data

Tendon Systems does not sell, lease, monetize, or trade your personal information, client project briefs, or business operational workflows to data brokers, advertising networks, or third-party marketing lists.

4. Third-Party Service Providers & Subprocessors

To deliver robust engineering and secure hosting, we partner with reputable third-party infrastructure providers that process data on our behalf under strict confidentiality and security commitments:

  • Cloud Hosting & Infrastructure: Vetted cloud compute and database hosting providers (such as Amazon Web Services, DigitalOcean, or client-designated dedicated cloud environments) for hosting development, staging, or production systems.
  • Transactional Communications: Dedicated mail delivery networks (such as Postmark, Amazon SES, or Mailgun) used to send lead notifications, form confirmations, and administrative emails reliably.
  • Payment Processing: Compliant third-party payment gateways (such as Stripe) for processing retainer deposits and project invoices. Tendon Systems does not store complete debit or credit card account numbers on our servers.
  • Calendar & Scheduling Integrations: Third-party calendar and booking APIs when you choose to connect or evaluate your scheduling workflow.
  • Legal Disclosures: We may disclose information if required to do so by applicable law, regulation, subpoena, or lawful court order, or to protect the vital rights, safety, and property of Tendon Systems, our clients, or the public.

5. Data Security & Architecture

We implement rigorous technical and organizational security controls designed to safeguard your information against accidental loss, unauthorized access, alteration, or disclosure:

  • Encrypted data transmission across all public endpoints using Transport Layer Security (TLS 1.3 / HTTPS).
  • Strict adherence to the principle of least privilege, ensuring only authorized engineering personnel have access to client configurations and server environments.
  • Zero hardcoded default credentials or backdoor accounts in our administrative panels and databases.
  • Automated rate-limiting and bot-filtering defenses on all public intake forms.

While we employ enterprise-grade security practices, no method of transmission over the Internet or electronic storage is completely infallible; we continuously monitor and patch vulnerabilities to maintain security integrity.

6. Data Retention

We retain prospective client inquiries, discovery submissions, and project correspondence for the duration of the business relationship and as necessary to follow up on project scoping. When you contract our services, project specifications, contracts, invoices, and payment records are maintained for statutory periods required by federal and state tax, accounting, and contract laws.

7. Your Rights & Choices

Depending on your jurisdiction and applicable data protection regulations (including United States state laws and international standards), you have specific rights concerning your personal information:

  • Right of Access: Request confirmation of whether we hold personal data concerning you and obtain a copy of that data.
  • Right to Correction: Request correction of inaccurate, incomplete, or outdated personal information.
  • Right to Deletion: Request the deletion of your personal data, subject to ongoing contract fulfillment, legal defenses, or statutory retention requirements.
  • Communication Opt-Out: Opt out of receiving non-essential communications at any time by contacting us directly.

To exercise any of these rights, email our team at info@tendonsystems.com. We will review and respond to verified requests within thirty (30) days.

8. Cookies & Analytics

We use essential cookies strictly necessary for website routing, session security, and cross-site request forgery (CSRF) protection. We do not deploy intrusive third-party cross-site behavioral tracking cookies. You may configure your web browser to decline cookies, though certain interactive features of our portals and forms may not function as intended.

9. Children's Privacy

Our website, digital systems, and custom software services are engineered exclusively for commercial enterprises and adult professionals. We do not knowingly solicit, collect, or process personal data from individuals under eighteen (18) years of age. If you believe a minor has submitted personal information to our site, please contact us immediately for swift removal.

10. Updates to This Policy

We may modify or update this Privacy Policy from time to time to reflect evolving technical implementations, legal standards, or operational changes. When revisions are published, we will update the "Effective Date" at the top of this document. Continued engagement with our digital services following an update constitutes acceptance of the revised terms.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our operational data handling practices, please contact our team:

Last updated: October 18, 2026
• Questions? Contact Legal

Have Questions About Working With Us?

We believe in transparent engineering, clear project scopes, and software you truly own.

Call us