Privacy Policy

Last updated: 15 May 2026

1. About this notice

This notice (the “Privacy Notice”) provides information about how Tenzo Ltd (“Tenzo”, “we”, “us”, “our”) gathers and uses personal information. We are committed to respecting the confidentiality of personal information and to processing personal data in accordance with applicable privacy and data protection laws. We want to make sure that you receive clear and transparent information about how we use your personal information and about your rights.

2. About us

Tenzo Ltd is a company registered in England and Wales under company number 10167410, with its registered office at 17 Meadway Park, Gerrards Cross, SL9 7NN. Tenzo Ltd is registered with the UK Information Commissioner’s Office under registration number ZB888577 and acts as a data controller in respect of personal information collected through our products and services.

Tenzo Inc., our US subsidiary, is registered at 2108 Cipriani Boulevard, Belmont, CA 94002, United States.

3. Contacting us

1. Should you have any questions or concerns about this Privacy Notice or the processing of personal data we hold about you, please contact us:
   • By post:
     • Tenzo Ltd., 17 Meadway Park, Gerrards Cross, SL9 7NN, United Kingdom
     • Tenzo Inc., 2108 Cipriani Boulevard, Belmont, CA 94002, United States
   • By email: [email protected]

4. Your rights and choices

4.1 Your rights in connection with personal information

You have the following rights in relation to the personal information we hold about you:

• Update your preferences and ask us to remove your information from our mailing lists.
• Delete your account and exercise any other rights available to you.
• Object to processing that we carry out on the basis of our legitimate interests, or for direct marketing.
• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request erasure of personal information where there is no good reason for us to continue processing it.
• Request that we restrict the processing of your personal information.
• Request the transfer of your personal information to you or to a third party in a structured, commonly used, machine-readable format.

We will respond to your request within one month of receipt. Where we are unable to provide a full response within that time we will explain why.

For requests related to data we process on your behalf as part of the Tenzo platform, please contact [email protected].

4.2 Your duty to inform us of changes

It is important that the personal information we hold about you is accurate and current. Please notify us promptly if your personal information changes during your relationship with us.

4.3 Fees

You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, excessive, or repetitive, or refuse to comply with your request in these circumstances.

4.4 What we may need from you

We may need to request specific information from you to confirm your identity and to verify your right to access the information you have requested. This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it.

4.5 Right to complain

If you are unhappy with how we have handled your personal information you can contact us, or make a complaint to the relevant data protection supervisory authority. For data subjects based in the United Kingdom you can make a complaint to the Information Commissioner’s Office (ico.org.uk, or 0303 123 1113).

5. Information we collect

5. 1 Information you provide to us

We collect personal information that you provide to us directly, including:

• Basic personal details, including your name, billing address, email address, telephone number and other contact details.
• Payment card information.
• Information you submit through forms on our website, customer support requests, or product feedback.
• Content you enter into AI assistant features within the Tenzo platform, including questions, prompts, custom instructions and any free-form text. See section 9 (Artificial Intelligence features) for details.

5.2 Information we collect from other sources

We may also receive personal information about you from third-party sources, including:

• Basic personal details: name, address, email, telephone and other contact details.
• Banking details from payment service providers.

5.3 Information from your use of our website and the Tenzo platform

When you use our website or the Tenzo platform, we collect:

• How often you access our website and the way you navigate around it, including time spent on individual pages.
• Device information, including operating system, hardware, software versions and browser configuration.
• Approximate location information derived from your IP address.
• Web chat messages, email correspondence and support tickets.
• IP addresses, session identifiers and connection information.
• Audit logs of actions you take inside the Tenzo platform.

We use cookies to support these activities. Please see our cookie policy for more information about the cookies we use and how to manage them.

5.4 Information that customers process through the Tenzo platform

Tenzo is a B2B analytics platform for restaurants and other hospitality businesses. When our business customers use the platform, the platform processes operational data that the customer chooses to connect, including:

• Sales, transaction and product data from point-of-sale and other source systems.
• Employee, rota and labour data, including employee names, roles and working hours.
• Manager logbook entries, including the body text written by employees and the identifier of the employee who authored each entry.
• Customer reviews collected from public review platforms, including the reviewer’s display name, rating and review text.
• Location-level operational data, including custom location attributes defined by the customer.

For this data, our business customers act as data controllers and Tenzo acts as a data processor. We only process this data in accordance with our contract with the business customer and applicable law.

6. How we use the information we collect

6.1 General uses of information

We use the information we collect to:

• Provide the products and services that you have requested and fulfil our contractual obligations.
• Operate the Tenzo platform, including authentication, access control, and product analytics.
• Fulfil any obligations we may have to third parties that have received your information.
• Conduct internal business administration and record keeping.
• Respond to enquiries you make through our website or to customer support.
• Ensure compliance with legal and regulatory obligations.
• Detect, investigate and prevent fraud, abuse and security incidents.

6.2 Information for marketing purposes

We may use your information to identify products, services or events that we think may be of interest to you. We will only send you marketing messages where you have consented to such contact, or in the case of products and services where these are similar to those that we have already provided to you.

You may withdraw your consent at any time by:

• Clicking the “unsubscribe” link in any marketing email you receive from us.
• Updating your marketing preferences in your Tenzo account.
• Contacting us directly at [email protected].

If you choose to unsubscribe, we will cease to send you such communications.

7. Our bases for collecting and using the information

We rely on the following legal bases for processing personal information:

• Performance of a contract with you, or to take steps at your request prior to entering a contract.
• Compliance with a legal obligation.
• Our legitimate interests, including delivering and improving the quality of our products and services, collecting marketing intelligence and performing statistical analysis, provided these interests are not overridden by your interests, rights or freedoms.
• Your explicit consent, where required, including for certain AI features.
• The establishment, exercise or defence of legal claims.

If you do not provide the personal information we require, we may not be able to provide certain services. You may withdraw any consent you have given at any time by contacting us.

8. Sharing your information

We will not disclose your personal information to third parties except as described in this Privacy Notice.

We may share your information with:

• Other Tenzo group entities globally.
• Software providers that support our platform and business operations.
• Web analytics providers.
• Cloud computing and hosting providers.
• Payment processing and accounting providers.
• Social media providers.
• Artificial intelligence model providers, where you have invoked an AI feature — see section 9.
• Law enforcement and regulatory authorities, where required by law.
• Third parties to whom you have consented to disclosure.

The third-party processors we currently use include:

Processor	Purpose	Categories of data shared
Amazon Web Services	Hosting and infrastructure	All categories above, stored on AWS infrastructure
Microsoft Azure	Hosting and infrastructure	Selected operational data
Snowflake	Data warehousing	Operational data processed on behalf of business customers
MixPanel	Product analytics	Product usage events, user identifier, business identifier
SendGrid	Transactional email	Recipient email address, message content
Smartlook	Session replay and product analytics	Product usage events and session recordings
Google (Sign-in)	Authentication	Email address, first and last name
Google Analytics	Web analytics	Pseudonymous usage data from our marketing website
Salesforce	CRM and contracting	Contact details of business customer representatives
Help Centre (self-hosted)	Customer support	Support ticket content and contact details
OpenAI, L.L.C.	AI model provider for the Tenzo ChatGPT app and other OpenAI-powered AI features	The categories listed in section 9, only when you invoke an AI feature backed by OpenAI
Anthropic PBC	AI model provider for in-product AI features such as dashboard and card summaries and the Tenzo AI assistant	The categories listed in section 9, only when you invoke an AI feature backed by Anthropic

9. Artificial Intelligence features

Tenzo offers a number of optional AI-powered features, including in-product AI summaries of cards and dashboards, an AI assistant inside the Tenzo platform, and the Tenzo connector for ChatGPT (the “ChatGPT app”). These features are powered by third-party large language model providers, currently OpenAI, L.L.C. and Anthropic PBC.

This section explains exactly what data is sent to those providers, when, and for what purpose. We are providing this level of detail so that you can make an informed decision about whether to use these features.

9.1 When data is sent

Data is only sent to an AI provider when you actively invoke an AI feature. Examples include:

• Connecting the Tenzo ChatGPT app to your ChatGPT account and asking it a question about your business.
• Clicking “Summarise” on a card or dashboard inside the Tenzo platform.
• Using the Tenzo AI assistant inside the platform.

If you do not use these features, no data is sent to OpenAI or Anthropic.

9.2 What data is sent

When you invoke an AI feature, the following categories of data may be sent to the relevant AI provider, depending on the question you ask and the feature you invoke:

Category	Examples of fields	When it is sent
Account identifiers	Your Tenzo user identifier, your email address associated with your Tenzo account, the identifier and name of the business you are currently working in	Sent as part of session context when you start a conversation with the ChatGPT app or the Tenzo AI assistant
Locale and preferences	Your locale, currency, timezone, week-start day, business reporting periods, and any custom instructions you have configured for the AI assistant	Sent so that the AI can produce answers in your preferred format
Business metadata	Names of businesses you have access to, names and identifiers of locations, and any custom location attributes you have configured (which may include financial figures such as rent or target margin)	Sent when you ask the AI about locations, switch businesses, or ask a question that requires per-location context
Analytics queries and results	The metric, dimension and filter selections you make, the resulting aggregated metric data for the date range you request, and any cards or dashboards you ask the AI to read, create, or summarise	Sent when you ask the AI a question about your metrics or ask it to build a card or dashboard
Manager log entries	The title, body text, date, location and the identifier (typically the email or username) of the employee who authored each log entry you ask the AI to read	Sent only when you explicitly ask the AI to read or summarise manager logs
Customer reviews	The review text, rating, source platform (e.g. Google, TripAdvisor), language, review date and the display name attached to the review by the source platform	Sent only when you explicitly ask the AI to read or summarise reviews
Free-form input from you	The questions, prompts and custom instructions you type into the AI feature	Sent whenever you interact with an AI feature

We do not share payment card information, banking details, marketing preferences or session-replay recordings with AI providers.

9.3 How AI providers may use the data

Tenzo has contractual data-processing terms in place with each AI provider, including:

• OpenAI, L.L.C. — under OpenAI’s API Data Processing Addendum. Data submitted via the API is not used by OpenAI to train its models, and OpenAI retains API inputs and outputs only for a limited period for abuse-monitoring purposes before deletion.
• Anthropic PBC — under Anthropic’s Commercial Terms and Data Processing Addendum. Data submitted via the API is not used by Anthropic to train its models, and is retained only for the period required to provide the service and meet legal obligations.

We recommend that you also review the privacy and data handling policies of each provider:

• OpenAI: openai.com/policies/privacy-policy
• Anthropic: anthropic.com/legal/privacy

9.4 Notes for business administrators

If you are an administrator of a Tenzo business, you can disable the ChatGPT app and the in-product AI features for your business at any time by contacting [email protected] or your account manager. Individual users may also choose not to use these features.

10. Where we store your information

We transfer, use and/or store your personal information outside of the United Kingdom and the European Economic Area (“EEA”). Destination countries may not provide the same level of data protection as your country of residence. Staff outside the UK and the EEA may process information on our behalf.

Where we transfer your personal information outside the UK or the EEA we put in place appropriate legally-approved safeguards, including the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the EU Standard Contractual Clauses, as applicable.

You may request details and copies of the safeguards we use by contacting [email protected].

11. Keeping your information

We retain personal information for as long as is necessary for the purposes for which it was collected, taking into account:

• Our contractual and business relationship with you.
• Any legal obligations we have to retain the information.
• The applicable statute of limitations.
• Guidelines issued by relevant supervisory authorities.

AI provider retention periods are described in section 9.3.

12. Security

We take the security of personal information seriously and we have put in place appropriate technical and organisational security measures to protect your personal information. We have procedures in place to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.

Our employees, agents, contractors and third parties process personal data only in accordance with our instructions and under a duty of confidentiality.

Although we will do our best to protect your personal data, including by encrypting our communications, we cannot guarantee the security of data transmitted to our website or platform; any transmission is at your own risk.

13. Links to other websites

Our website and platform may contain links to third-party websites. While such links are provided for your convenience, you should be aware that the information handling practices of the linked websites might not be the same as ours. Tenzo is not responsible for the privacy practices or the content of those third-party websites.

14. Changes to our Privacy Notice

We reserve the right, at our discretion, to change, modify, add to or remove portions of this Privacy Notice at any time. Where required, we will notify you of material changes. The “Last updated” date at the top of this notice indicates when it was last revised.