Privacy Policy

ConsentTensor, Inc. ("ConsentTensor", "we", "us") is the controller of personal data collected through our website and marketing activities. When you use the platform to scan your own properties, we act as a processor on your behalf under your instructions and our Data Processing Addendum (available on request at privacy@consenttensor.com).

• Account and contact data — name, work email, company, and messages you send through forms.
• Billing data — subscription plan, billing status, and payment identifiers. Card details are handled by Stripe; we never store full card numbers.
• Scan data — URLs you submit, publicly available page content, cookies, tags, scripts, and form markup observed on those pages, plus resulting findings and reports.
• Usage and device data — pages viewed, approximate location derived from IP, browser and device type, referrer, and timestamps.
• Cookies and similar technologies — see our Cookie Policy. Non-essential cookies are set only after you opt in.

• Providing and securing the service — performance of a contract.
• Responding to sales, support, and security enquiries — legitimate interests or contract.
• Product analytics and improvement — consent where required, otherwise legitimate interests.
• Marketing email — consent or, for existing customers, legitimate interests with an unsubscribe link in every message.
• Fraud prevention, billing, tax, and legal compliance — legal obligation and legitimate interests.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We use vetted service providers under contract, including hosting and database infrastructure, transactional email delivery, Stripe for payments, and error monitoring. A current subprocessor list is available at privacy@consenttensor.com. We may also disclose data where legally required or to protect our rights and users.

Data may be processed in the United States and other countries where our providers operate. Where personal data leaves the EEA, UK, or Switzerland, transfers rely on the EU Standard Contractual Clauses (with the UK Addendum where applicable) plus supplementary measures such as encryption in transit and at rest.

Contact submissions are kept for up to 24 months, account and billing records for the life of the account plus 7 years where tax law requires, scan results for the duration of your subscription plus 90 days, and server logs for up to 90 days. We delete or anonymise data once the purpose is met.

Depending on where you live you may request access, correction, deletion, portability, restriction, or objection, and withdraw consent at any time. California residents may request disclosure of categories collected, deletion, correction, and opt-out of sale or sharing (we do neither), and may not be discriminated against for exercising these rights. Submit a request to privacy@consenttensor.com; we verify identity and respond within 30 days (45 days for CCPA requests, extendable once). Authorised agents may act on your behalf with written permission. EEA/UK residents may also complain to their local supervisory authority.

We use TLS in transit, encryption at rest, least-privilege access, row-level database authorisation, and audit logging. No system is perfectly secure; report suspected issues to security@consenttensor.com.

The service is for business use and is not directed to anyone under 16. We do not knowingly collect data from children and will delete it if discovered.

We will post any material change on this page and update the "last updated" date. Where required, we will notify you by email or in-product before the change takes effect.