Legal

Privacy Policy

Last updated November 1, 2026

What we collect

When you use TensaFi we collect:

  • Account data — the email you sign up with, and (if you sign in with Google) your name and Google profile picture URL. Stored in Supabase.
  • Your saved content — the watchlist tickers, GroupiFi groups, and TestaFi strategies you create. Row-level security means nobody but you (and Supabase administrators) can read them.
  • Standard server logs — IP address, user agent, and timestamps for each request, retained by our hosting provider (Vercel) for a limited window.

What we don't collect

  • Your brokerage or bank account credentials — TensaFi never asks for these.
  • Payment card numbers — when billing launches we'll use Stripe; card data lives with them, not us.
  • Third-party analytics or advertising trackers.

How we use it

  • To keep you signed in and show you your own saved content.
  • To fulfill your explicit requests (fetch a quote, run a backtest, save a strategy).
  • To debug, investigate abuse, and keep the service running.
  • To contact you about material service changes (rare).

We do not sell or rent your personal data. Ever.

Third-party services

TensaFi is a thin app that leans on a handful of vendors:

  • Supabase — authentication and database (US region). Their privacy policy applies to data stored there.
  • Vercel — hosting and edge CDN.
  • Finnhub and Yahoo Finance — market data sources. Requests are made server-side, so your identity is not shared with them.
  • Financial Modeling Prep — serves company logos to your browser via a public image URL. They may see your IP.
  • Google — if you choose Google sign-in, Google's privacy policy applies to that flow.

Cookies

We use a single authentication session cookie (Supabase) to keep you signed in. No advertising, tracking, or third-party cookies.

Your rights

You can access, correct, or delete your data at any time. Email support@tensafi.com and we'll respond within 30 days. Deleting your account removes all rows we hold against your user id.

Data retention

Account and saved-content data is kept until you delete your account. Server logs are retained for up to 30 days.

Changes

We'll update this policy when we add features or vendors. Material changes will be flagged in the app or by email.

Contact