Privacy Policy

This Privacy Policy explains how Coforma LLC (“Tenmon,” “we,” “us”) collects, uses, and protects information in connection with the Tenmon platform (the “Service”).

By interacting with our Services or providing us with your information, you agree to the collection, use, and sharing of your information as described in this privacy policy.

Information we collect

• Account and identity: your name, email, and workspace/role information, handled through our identity provider.
• Integration configuration: settings and credentials you provide to connect GitHub, Linear, and Slack, such as webhook secrets and the Slack channel you designate.
• Connection credentials: when you install the official Tenmon.ai GitHub App to enable read/write features, we store the installation details and the list of repositories you select (encrypted). Access to your repositories uses short-lived tokens issued by GitHub on demand; we do not store long-lived repository tokens.
• Development activity: the agent and human activity we ingest from your connected systems — pull requests, reviews, comments, issues, project updates, and related metadata. These payloads may contain repository and project content, including code snippets your team places in GitHub or Linear.
• Derived data: information Tenmon computes from your activity, such as normalized agent identities, decision-feed items, and insights.
• Billing metadata: your subscription plan and status. Payments are processed by Stripe; we never store or transmit your payment card details.
• Essential operational telemetry: audit logs, traces, security signals and alerts, and reliability metrics we use to operate and secure the Service.
• Product analytics (PostHog): product-usage events and analytics identifiers, including cookie and similar technology identifiers, used to understand feature adoption and improve the Service.
• Volunteered Information: Content and information you elect to provide as part of your profile or in any reviews you make through the Services or emails, chats, or other communications sent to us.

We do not intentionally collect special categories of personal data, payment card data, or protected health information. Any personal data that appears in your GitHub or Linear activity is processed only to provide the Service.

How we use information

To provide, operate, secure, and improve the Service for you.

To surface the agent activity and decisions relevant to your workspace.

To process subscriptions and communicate with you about the Service.

To maintain security, compliance, and reliable operations through essential telemetry (for example audit logs, traces, security alerts, and reliability metrics).

To detect, investigate, and prevent security incidents and abuse.

To comply with legal obligations.

AI and your data

We never use your data to train, fine-tune, or improve any AI model. Some features are currently powered by Anthropic. When a feature sends your data to Anthropic, it is used only to generate that feature's result for you in accordance with Anthropic’s data processing addendum, under contractual terms that prohibit training on your data and require zero- or short-retention handling.

How we share information

We do not sell your personal data. We share information only with the subprocessors that help us operate the Service — our cloud provider, payments processor, identity provider, AI provider, and product-analytics provider — each under contractual confidentiality and security obligations. The current list, including what each is used for, appears on our Security page. GitHub, Linear, and Slack are your own connected systems, not Tenmon subprocessors. We may also disclose information where required by court order, law, legal process, to enforce or apply our terms of service, or to protect rights property, or safety of Tenmon, our customers, or others.

The categories of personal data we may disclose include any outlined in the initial section of this policy. We will only disclose information to the extent necessary to achieve the objective of the disclosure.

Where your data is stored

All data is stored and processed in United States cloud regions, and we do not move customer data outside US regions.

Data retention and deletion

We retain Customer Data for as long as your account is active and as needed to provide the Service or for as otherwise legally permitted or required. When you disconnect an integration, we clear its configuration and secrets. When your account is closed, we delete or de-identify Customer Data in accordance with our standard practices, except where retention is required for legal compliance. Operational and security logs are retained on a defined schedule.

Security

We protect data with encryption in transit and at rest, tenant isolation, and least-privilege access controls designed to protect your data from accidental loss or destruction and from unauthorized access, use, alteration, and disclosure. However, no website, mobile application, system, electronic storage, or online service is completely secure, and we cannot guarantee the security of your personal data transmitted to, through, using, or in connection with the Services. In particular, email, texts, and chats sent to or from the Services may not be secure, and you should carefully decide what information you send to us via such communications channels. Any transmission of personal data is at your own risk.

The safety and security of your information also depends on you. You are responsible for taking steps to protect your personal data against unauthorized use, disclosure, and access.

Learn more on our Security page.

Your choices and rights

You can access and update your account information, disconnect integrations, and request deletion of your account and associated data. To make a request, contact us using the details below. We will respond consistent with applicable law.

Analytics and cookies

We use essential operational telemetry plus cookies and similar technologies for different purposes:

Essential operations: technologies needed to run core product functions (for example sign-in/session continuity) plus essential operational telemetry such as audit logs, traces, security signals/alerts, and reliability metrics. This telemetry helps us detect and investigate incidents, support security and compliance obligations, and keep the Service reliable.

Product analytics (PostHog): cookies and similar technologies that help us understand feature usage trends and improve the product. Product analytics are separate from essential security/operations telemetry.

By signing up for the Service, you agree to our Terms of Service and this Privacy Policy, including the cookie and analytics uses described above. You can also manage cookies through your browser: most browsers let you review, block, or delete cookies, and browser privacy features or extensions can limit analytics technologies.

If you disable cookies or similar technologies, some parts of the Service (including sign-in/session persistence) may not work as intended.

Children

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal data from anyone under 18. If we learn we have collected or received personal data from a child under 18 years old without verification of parental consent, we will delete that information.

Changes to this policy

We may update this policy from time to time. We will post the revised version with a new “last updated” date and, where required by law, notify you.

Contact

Questions about this policy or your data? Email privacy@tenmon.ai or reach us through our contact page.