Privacy

What we collect

There are two kinds of data when you use Tenacap:

• Account data - your name and email, and how you sign in (a Google account, or an email-and-password we store only as a salted hash, never in the clear).
• Cap-table data you enter or import - your company details, your stakeholders’ legal names and email addresses, their holdings (shares, options, SAFEs, notes, warrants), valuations, board approvals, and documents you generate or upload. Where you choose to provide them for tax forms (e.g. 83(b), 3921), sensitive identifiers such as an SSN or EIN are stored field-level encrypted, separate from the rest of the record.

How we use it

Only to provide the service to you: render and version your cap table, generate the documents and tax forms you ask for, and send the notifications you’ve enabled. We never sell or rent your data, never use it to contact your shareholders, and never run a secondary market - those are contractual promises, not just policy. We do not train models on your cap-table data.

How we protect it

Data is encrypted in transit (TLS) and at rest. The most sensitive stakeholder identifiers are additionally field-level encrypted with keys held separately from the database. Access is role-scoped per workspace and every change to the cap table is recorded on an append-only, hash-chained audit trail. See Trust & Security for details.

Who processes it (sub-processors)

We use a small set of vetted providers, each acting as a data processor on our behalf:

• Neon - managed PostgreSQL database (where your cap table lives).
• Vercel - application hosting and file storage, plus cookieless, non-identifying traffic analytics.
• Resend - transactional and notification email.
• PostHog - product analytics: which parts of the app get used, and where people get stuck. We identify you to it by account ID only - never your name or email address - and we do not record your screen, do not capture the text of what you click, and do not send share counts, holder names or any figure from your cap table. Your cap-table data is never connected to it.
• Google - only if you choose “Continue with Google” to sign in.

Retention, export & deletion

We keep your cap-table data for as long as your account is active. You can export everything at any time in an open, versioned schema (CSV + JSON) - no lock-in. When you close your account (self-serve in Settings → Account, or on request), you first download a complete archive of every record and document and affirm that you hold it; we then permanently erase your company and all of its data, including our copy of that archive unless you ask us to hold it for seven years. The cap-table file itself, the one you upload when you import, is kept the same way: for as long as your account exists, so we can re-run your import if we find a bug in how we read it. You can download your own uploaded file or ask us to delete it at any time from the import screen; closing your account deletes it too. There is one exception, and it is shorter rather than longer: if you sent us a cap table through the beta offer at /beta/upload without making an account, we delete that file, the import and the report 30 days after we send you the report, unless you decide to keep the cap table. The clock starts the day your report goes out, not the day you upload, and we email you a week before. If you cannot keep the cap table yet, for example because a total disagrees or rows were set aside, we do not delete it. The 30 days start once you can keep it. We delete it after 180 days in any case. What survives is the handoff receipt (your company’s name, the archive’s fingerprint and manifest, the affirming admin’s email and the time) and our security audit log, which records account-lifecycle events with an account identifier, a timestamp and the acting admin’s email - no cap-table figures, tax IDs or documents. A legal hold, if one is in place, pauses closure. See Closing your account.

Your rights

You can access, export, correct, and delete your data - most of it directly in the app. You are the controller of your stakeholders’ personal data; we are your processor for it, and we’ll support any access or deletion request you need to honor for them. To exercise a right or ask a question, email security@tenacap.com.

What we collect

When you join the waitlist we collect the email address you submit. Our infrastructure and email provider also process your IP address and browser user-agent as a normal part of receiving the request and sending email. If you answer the optional follow-up questions, we also store what you tell us about your current cap-table tool and company stage.

How we use it

To send you a welcome email and information on how to get started now that the beta is open, plus an occasional update. We use aggregate, non-identifying analytics to understand how many visitors join - we never send your email address to any analytics provider, on the waitlist or inside the app. The list is stored with Resend, our email processor. We keep your email until you unsubscribe (one click in every email, or email us) and we do not sell or share the list.