Privacy

What this page covers

This page covers the tendre.AI website: what we process when you browse it, buy a licence, or write to us. It also covers the characters, locations, objects and animals you save with our cloud rendering service. It also covers what you send when you use Face swap online.

Browsing

You can browse the site without an account. Our server keeps technical logs, the date, the page requested and what your browser sends, to keep the service running and secure.

The site is delivered through Cloudflare, which keeps technical logs of its own for the same purpose.

Buying a licence

To sell and deliver a licence we keep the order reference, the amount, the payment method, the transaction reference, your email address when you give us one, and your licence identifier with its credit balance. The legal bases are the performance of the contract and our accounting obligations.

Card payments are handled by our payment provider, which receives your card details directly. We never have access to them. Crypto payments are read from public blockchains: we keep only the amount and the transaction reference.

Writing to us

When you use the contact form we keep your message, and your email address if you give one, for as long as it takes to answer you and to keep a record of the exchange.

Characters, locations, objects and animals

When you save a character, a location, an object or an animal to reuse it in Multi-Ref Video, from the app or through the API, we store the images you send and, for a character, the views generated from its photo. They are encrypted, one key per file, and tied to your licence. The legal basis is the performance of the contract. A character's voice is stored the same way, whether you chose it from our catalogue or imported it: an excerpt of 20 seconds at most, which may be the voice of a real person.

They stay under your control: you can delete any of them at any time, from the app or through the API, and they are erased automatically after one year without use. We do not use them to train models, and we show them to no one. A voice is erased with its character, and you can also remove it on its own.

Face swap

When you use the character replacement tool (Face swap) on your own computer, nothing leaves it. When you use it online, the video you import, views of the character and, if you choose the character's voice, a short sample of that voice are sent over an encrypted connection to our rendering service, then to our computing provider, for the sole purpose of producing the result, which is returned to you.

We do not keep these files, or the result, on our servers. Only the text of the request (the character's name and the scene) is kept, for 12 months, as for any cloud render. Everyone filmed in the video must have agreed to its use (see our Terms, 5.4).

Age verification

Reaching some content requires a check once per session. We store only a non-identifying session proof, a token and its expiry, in a server-side httpOnly cookie. It holds no personal data and cannot be used to identify you.

Audience measurement

We measure where visits and sales come from. That uses one first-party cookie, kept for 30 days, which remembers the source of your first visit until a possible purchase.

There is no third-party script, no advertising cookie and no advertising profiling on this site. The events we record hold no IP address: only a source, a campaign, a country, the type of event and, for a visit from a Google ad, the click identifier that Google adds to the link. We neither sell nor rent any data.

When you arrive from a Google ad and then buy a licence or take out a subscription, our server tells Google Ads (Google Ireland Limited) that this click led to that purchase. It passes on only the click identifier, the date and the amount: no name, email address, IP address or cookie, and no Google script runs on this site. This tells us which ads are useful.

Who acts on our behalf

Our host FlokiNET ehf, Iceland, on a dedicated server located in Romania. Cloudflare for delivery and protection. Our payment provider for card payments, and PayPal for PayPal payments. Each acts on our instructions under a processing agreement.

For some videos rendered online, a video rendering provider, from data centres located in Malaysia. It receives the text of the request, the starting image, the reference images (views of your characters, images of your locations, objects and animals) and, where applicable, a short excerpt of the character's voice, then produces the video. It acts as a processor, on our instructions only, and does not use this data to train its models.

Some are established outside the European Union. Those transfers are covered by the European Commission's standard contractual clauses, a copy of which you may request.

How long we keep it

Orders and invoicing: 10 years, an accounting obligation.

Licence and credits: for the life of the licence, then one year.

Support exchanges: three years after the last contact.

Attribution cookie: 30 days.

Server logs: 12 months.

Age session proof: the length of the session.

Saved characters (and their voice), locations, objects and animals: until you delete them, and at most one year after their last use.

Text of cloud render requests, Face swap included: 12 months.

Files sent to the video rendering provider and the video produced: up to 24 hours on its side.

Those flagged by its safety filter: 180 days on its side.

Your account

An account is optional. If you create one, we keep your email address, your display name, your profile picture when your sign-in service provides one, the sign-in methods you have linked with the identifier each of them gives us, the creation date, and the licences linked to the account. The legal basis is the performance of the contract.

A session cookie keeps you signed in, for 30 days at most. A second cookie only tells the site that you are signed in, so that it can show your account menu; it holds no personal data. Signing out of all devices, from the account page, ends every session.

The account is kept until you delete it, which you can do at any time from the account page. Deletion is immediate and your licences are detached from the account. Orders, invoices, licences and credits keep the periods listed above. Sign-in codes last 10 minutes.

Signing in

With your email address: we send you a single-use code, valid for 10 minutes. We keep only a fingerprint of it, never the code itself, and the times it was sent, so as to limit attempts.

With Google, Apple or Discord: the service you choose gives us your identifier with it, your email address, your name and, for Google and Discord, your profile picture. That service knows that you sign in to tendre.AI, under its own privacy policy. We never receive your password and we ask for nothing else: neither your contacts nor your messages, and we never post on your behalf.

With Apple, you can hide your email address. We then receive a relay address from Apple, through which our emails reach you.

Subscription

If you subscribe, we keep the reference of your customer record with our payment provider, the status of your subscription, the dates of its periods and the history of your credits. The legal bases are the performance of the contract and our accounting obligations.

Payments, invoices and payment methods are handled by our payment provider, on its own pages, including the payment portal that opens from your account. We never see your card details. If you pay with PayPal, PayPal handles the payment on its own pages and we never see your PayPal account details.

While your subscription is active, your saved characters, locations, objects and animals are never erased for lack of use.

Emails

We only send the emails your account needs: sign-in codes and, when necessary, messages about your account or your subscription. No newsletter, no advertising. They are sent through our email provider, Resend (United States), under the European Commission's standard contractual clauses.

Your rights

You may request access to your data, its correction, its erasure, the restriction of its processing and its portability. You may object to a processing, withdraw your consent at any time, and leave instructions about what becomes of your data after your death.

One address for all of it, complaints included: [email protected]. We answer within one month.

If our answer does not satisfy you, you may refer the matter to the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

Data controller: TENDRE, Toulouse, France.

Minors

The service is not intended for minors and we do not knowingly collect their data. If you believe otherwise, write to [email protected] and we will delete it.

Updates

Last updated: 11 November 2026. If something important changes, we will tell you before it takes effect.