Privacy Policy

Tenkr AS ("Tenkr," "we," "us," or "our") is a Norwegian company committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website at tenkr.online and interact with our services.

As a company established in Norway and operating within the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR) and applicable Norwegian data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

2. What Data We Collect

We collect only the data you voluntarily provide through our website forms. We do not collect data automatically through cookies, analytics, or third-party trackers.

Waitlist Signup

• Email address (required)
• Name (optional)
• Areas of interest (optional)
• Source page — which page you signed up from (collected automatically)

Service Inquiry

• Name (required)
• Email address (required)
• Description of your inquiry (required)
• Whether you opt in to the waitlist (required)

Integration Request

• Email address (required)
• Name of the integration you are requesting (required)

3. How We Use Your Data

We use your personal data for the following purposes:

• Waitlist management — to notify you when Tenkr becomes available and to send you relevant product updates
• Service inquiries — to respond to your questions and discuss potential engagements
• Integration requests — to understand demand for specific integrations and notify you when requested integrations become available
• Internal notifications — to alert our team when new signups, inquiries, or requests are received so we can respond promptly

4. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)) — when you submit a form on our website, you consent to the collection and use of your data for the stated purpose
• Legitimate interest (Article 6(1)(f)) — to send transactional notifications to our team and to improve our services based on aggregated, non-identifying patterns in requests

5. Data Storage and Security

Your data is stored in Cloudflare D1, a serverless SQL database operated by Cloudflare, Inc. Cloudflare maintains data centers globally and provides enterprise-grade security, including encryption at rest and in transit.

We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Third-Party Data Processors

We share your personal data with the following third-party service providers, acting as data processors on our behalf:

We do not sell, rent, or share your personal data with any other third parties.

7. Cookies and Tracking

We do not use cookies for tracking or analytics. Our website is a statically generated site with no third-party trackers, advertising pixels, or analytics scripts. No cookie consent banner is required because no cookies are set.

8. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy:

• Waitlist signups — retained until the product launches and you are notified, or until you request deletion, whichever comes first
• Service inquiries — retained for the duration of any resulting engagement, or up to 24 months from submission if no engagement occurs
• Integration requests — retained until the requested integration is available and you are notified, or until you request deletion

9. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal

To exercise any of these rights, contact us at privacy@tenkr.online. We will respond within 30 days.

10. International Data Transfers

Our data processors (Cloudflare and Resend) may process data outside the EEA. Where this occurs, transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) as approved by the European Commission, and the EU-U.S. Data Privacy Framework where applicable.

11. Children's Privacy

Our services are designed for working professionals and are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

12. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet):

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

14. Contact Us

For any questions about this Privacy Policy or your personal data, contact us at:

privacy@tenkr.online