TTendorra
Sign inRequest beta access

Privacy policy

Last updated 22 October 2026

Tendorra helps property development teams extract, organise and present the information in their project documents. This policy explains what we collect, why, who sees it and your choices. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).

Who we are

Tendorra ("we", "us") operates the Tendorra website and service. Contact us at hello@tendorra.com.au.

What we collect

  • Account details: your name, work email, company and the type of work you do.
  • Project information you add: documents and files you upload (programmes, QS reports, invoices, checklists, quotes), and information you type into registers, budgets and reports.
  • Email you choose to bring in: emails you drag in, and emails from a mailbox you connect that carry a project's category or label. If you turn on the Sent Items scan, only sent emails that mention a project and contain a request are saved; all other sent mail is ignored.
  • Business directory details: if you are a specialist consultant, the profile, credentials and ratings you provide.
  • Usage and technical data: basic logs (such as errors and activity records) used to run, secure and improve the service.

How connecting your email works

  • We ask for read-only access to your mailbox (Microsoft 365 / Outlook "Mail.Read", or Gmail "gmail.readonly"). We cannot send, change or delete your email.
  • We read only the emails you ask us to bring in, using a project category or label, an email you drag in, or the Sent Items rules described above.
  • We store the connection token securely. You can disconnect at any time in Settings → Email inboxes, and you can also remove access in your Microsoft or Google account settings. Emails already imported stay on the project until you delete them.
  • Original email files are deleted from our storage after 24 hours. The text, summaries and timeline entries read from them remain until you delete them.

How we use information

  • To provide the service: build timelines, registers, budgets, checklists and reports from the documents you give us.
  • To run your account, provide support, keep the service secure and meet legal obligations.
  • To contact you about the beta, your account and changes to the service.

We do not sell your information, and we do not use your email or documents for advertising.

AI processing

We use AI services (currently Google's Gemini) to read documents and emails and to suggest timeline entries, register items and checklist updates. The text and files needed for that task are sent to the AI provider for processing. They are not used to train the provider's models under the terms we use. AI output can be wrong: it is always shown as a suggestion for you to check against the source.

Google user data: Tendorra's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide the features you ask for, is not used for advertising, is not sold, and is not used to develop or train generalised AI models.

Who else sees your information

  • Your company: people in your company see its projects according to the access you set. People you invite or award work to see only what is shared with them.
  • Other companies in the network: if you post or quote on a job, the information in that job and quote is visible to the other party. Specialist profiles are visible to other signed-in users.
  • Service providers that host or process data for us: Supabase (database and file storage, Sydney region), Vercel (hosting), Google (AI processing) and our email provider for notifications. They may only use it to provide their service to us.
  • Where the law requires or allows it, such as a court order.

Where it is stored and how long we keep it

Project data is stored in Australia (Sydney region). Some providers, such as the AI provider, may process data outside Australia. We keep your information while your account is active. When you delete a project, or ask us to delete your account, we delete the associated data, except where we must keep records by law.

Security

Access is controlled so that each company sees only its own data, connections use encryption in transit, and access tokens are stored securely. No system is perfectly secure; if there is a breach likely to cause serious harm we will notify affected people and the Office of the Australian Information Commissioner as the law requires.

Your choices and rights

  • Access or correct your personal information, or ask us to delete it, by emailing us.
  • Disconnect an email inbox, turn off the Sent Items scan, or delete imported emails and projects at any time.
  • Complain to us if you think we've mishandled your information. If you're not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).

Changes

We'll update this page when our practices change and note the date above. For significant changes we'll tell account holders by email.