Privacy notice
Last updated 27 September 2026
In short: we contact local businesses about websites we've built for them, using business information that is already public. We host those websites, their online ordering and booking, and an AI phone assistant. You can ask us what we hold about you, ask us to delete it, or opt out of emails at any time by writing to technical@syntiva.tech or using the unsubscribe link in any email.
Who we are
Syntiva Technology LTD (trading as Tendly), company registration HE 482247, Christodoulou Sozou 2, Eiffel Tower, 2nd floor, Office 201, 1096 Nicosia, Cyprus. We are the data controller for the information described below, except where we say we act for one of our clients. Contact: technical@syntiva.tech.
Whose information this covers
- Business owners and staff we contact about a website we've prepared for their business.
- Our clients: businesses that subscribe to our service, and the people who manage their account.
- Customers and callers of our clients: people who place an order, request a booking, or call the phone assistant of a business we host. For this information the business is the controller and we process it on its behalf (see below).
What we collect and where it comes from
| Information | Source |
|---|---|
| Business name, address, phone number, opening hours, website, public reviews and photos, menu or service list, and business contact email addresses | Google Maps (Google Places) and the business's own public website |
| Whether our emails were delivered, bounced or marked as spam; visits to the preview website we built (we store a one-way code instead of your IP address, plus the approximate city) | Our email provider and our web servers |
| Account details of clients: name, email, phone, subscription status | You, when you sign up |
| Orders and booking requests: name, phone, email, delivery address, items, notes | Customers of our clients, via the website or phone assistant |
| Phone calls to the AI assistant: caller number, an automatic transcript and a short summary. Callers are told at the start of each call that they are speaking with a virtual assistant and that the call is transcribed. | Callers |
We never see or store card numbers; card payments are handled entirely by Stripe.
Why we use it, and our legal basis
- Contacting businesses about a website we've built for them: our legitimate interest in offering a relevant service to businesses (GDPR Art. 6(1)(f)). We only use business contact details, keep emails few and relevant, and stop immediately if you opt out.
- Providing the service to clients, including billing: performance of our contract (Art. 6(1)(b)).
- Handling orders, bookings and calls for our clients: on the client's instructions, as their processor (Art. 28).
- Keeping an opt-out list so we never contact someone who asked us not to: legal obligation and legitimate interest.
Use of AI
We use AI (OpenAI) to write the text of the websites we prepare, to draft our emails, and to answer calls and take orders for our clients. A person at Tendly reviews each website and email before anything is sent. We do not make decisions with legal or similarly significant effects about anyone by automated means.
Who we share it with
Only with the service providers that run our platform, under contracts that limit their use of the data to providing their service to us:
- Cloudflare (hosting, database, file storage)
- OpenAI (AI writing, phone assistant and transcription)
- Twilio (phone numbers and calls)
- Stripe (payments and subscriptions)
- Resend (sending email)
- Google (business information from Google Maps and website speed checks)
We do not sell personal information. Some of these providers are in the United States; transfers from the EU are covered by the EU-US Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.
How long we keep it
- Businesses we contacted that didn't become clients: deleted 12 months after our last contact, including the preview website.
- Opt-outs: we keep only the email address, permanently, so we can honor the opt-out.
- Call transcripts: deleted after 12 months. Call summaries, orders and bookings are kept while the business is our client.
- Clients: for as long as the subscription runs, then as long as accounting and tax law requires.
Your rights
You can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or transfer it. You can always object to marketing emails, and we will stop. Write to technical@syntiva.tech; we reply within one month. If you're a customer or caller of one of our clients, you can also contact that business directly.
You can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or the data protection authority where you live.
Changes
We'll update the date above when this notice changes.