TendSphereTendSphere

Privacy policy

Last updated October 31, 2026

TendSphere is a follow-up board for real-estate agents, at tendsphere.com. It's run by Tanner Braun in Clear Lake, Iowa. This page says what TendSphere stores, how it's protected, which services help run it, and how you get a copy of your data or have it deleted. Questions go to hello@tendsphere.com.

What TendSphere stores

  • Your account. When you sign in with Google, TendSphere receives your name, email address and profile picture, to set up and show your account. It never sees your Google password, and it doesn't keep Google's sign-in tokens.
  • Your board. The contacts and follow-up information you add or import: names, phone numbers, email addresses, birthdays, notes and follow-ups.
  • Apps you connect. If you connect Mesh, your Mesh API key. If you connect Google Calendar, the permission Google gives TendSphere to reach your calendar (a "refresh token"). Both are encrypted like the rest of your board, never shown again, and deleted when you disconnect. If you upload a contacts file, the information in it that you import.
  • Sign-in sessions. A record that you're signed in, so you stay signed in until you sign out or go 30 days without using TendSphere.
  • Your subscription. Your plan and a record of your payments (amount and date) from Stripe, and when you last used TendSphere.
  • Feedback. Notes you send us from the app, and our replies. A copy of each note you send, including its words, is posted to TendSphere's private team Discord channel (see Discord below).
  • AI assistants you connect. Which ones you've connected to your board, when, and when they last used it. Their sign-in tokens and connection keys are stored only as fingerprints, never as themselves.
  • Technical logs. Short logs, such as errors and the internet addresses (IP addresses) that connect, to keep TendSphere running, fix problems and block attacks. Logs that record internet addresses are deleted automatically within 90 days; error logs are replaced automatically as they fill.

Your clients' information, and who's responsible for it

The contacts on your board are your clients and your sphere. You decide what goes on your board, and TendSphere handles it on your behalf, only to run your board for you. No other agent can see it.

You're responsible for having the consent and other legal grounds to add and use your clients' information, and for giving them any notices the law requires. You're also responsible for how you contact them. TendSphere never texts, calls or emails your clients.

How it's protected

  • Everything travels over an encrypted connection (HTTPS).
  • Each agent's board (contacts, notes, follow-ups, feedback and the keys for apps you connect) is encrypted with that agent's own key. The keys are themselves locked with a master key that's kept apart from the database and its backups, so a copy of the database on its own can't be read.
  • Your account details (name, email address and picture), subscription and payment records, and sign-in sessions aren't encrypted that way: they're protected by the server's access controls, and the backups are encrypted by Backblaze.
  • Each agent can only ever reach their own data.
  • To be straight with you: while TendSphere is running, the app has to unlock your data to show it to you, so the person who runs the server can technically read it. We only look at an agent's data when that agent asks us to, or when it's needed to fix a problem.

No way of storing or sending information is completely secure, but we work to protect yours.

Where it's kept

On a server in the central United States (Contabo). Encrypted backups are copied to Backblaze in the United States within seconds of each change, plus a nightly copy. Backups are kept for up to 45 days.

Who else is involved

  • Google handles sign-in, and Google Calendar if you connect it.
  • Mesh, only if you connect it with your own Mesh key: your board reads your contacts from your Mesh, and the changes you make on the board (moving someone to a group, a corrected number, a note) go back to your Mesh.
  • Stripe handles payments. It receives the billing details and card you enter at checkout. TendSphere never sees or stores your card number. Stripe's own privacy policy covers what Stripe does with it.
  • Resend delivers TendSphere's emails. To deliver them it receives your name, your email address and what's in each email. A morning list includes your clients' names and the reason to follow up (for example "Birthday today"), and may also list their upcoming birthdays and home anniversaries and, if you've connected Google Calendar, showings, inspections, closings and other deal events coming up before your next morning email (the next couple of days, or the week ahead if it comes once a week; see Google Calendar below). Resend also delivers notices to Tanner, who runs TendSphere, when an agent signs up, pays, hasn't paid or added anything after a few days, or hasn't opened their board in a while (their name and email address, and the amount for a payment). Resend isn't allowed to use any of it for anything else.
  • Discord carries short notices to Tanner, in a private Discord channel, when an agent signs up, starts a beta, subscribes, renews, has a card payment fail, cancels, gets a refund, or sends feedback. Each notice has the agent's first name and last initial and, for payments, their plan and the amount; never their email address. A feedback notice also carries what the note is about and its words (up to the first 500 characters), so please leave clients' personal details out of feedback. Nothing else from anyone's board is ever sent to Discord. The feedback notices in Discord are deleted along with your account.
  • Contabo runs the server, and Backblaze stores the encrypted backups.
  • Cloudflare runs the domain's DNS and forwards email sent to hello@tendsphere.com, so that email passes through Cloudflare.
  • UptimeRobot checks that TendSphere is up. It sees only technical connection details, never anything on your board.
  • Your AI assistant, only if you connect one yourself (such as Claude or ChatGPT). When you ask it something about your board, it reads what it needs (for example who's due today, a client's card, or your deals), and that goes to the company behind it (such as Anthropic or OpenAI) under its own terms and privacy policy. It can only reach your board, and it can't send anything. Disconnect it any time in Connectors.

TendSphere doesn't sell your data, share it with advertisers, or use it to train AI. If you connect an AI assistant, its provider's own policy says whether it learns from what it reads. There are no ads and no tracking. If we add a new service that handles your information, we'll list it here before it does.

Emails TendSphere sends you

  • A morning list of who to follow up with and why, with your clients' names and the reason. It may also list clients' birthdays and home anniversaries coming up, showings, inspections, closings and other deal events coming up before your next morning email (the next couple of days, or the week ahead if it comes once a week), and gifts left to drop off. You choose which mornings it comes and at what time.
  • A Sunday summary of your week.
  • Replies to feedback you send us.

You can turn off the morning list and the Sunday summary any time in Account. Essential notices about your account or the service still come.

Cookies

TendSphere uses cookies only for signing in: a few short-lived ones while you sign in with Google, to keep the sign-in safe; one that keeps you signed in; and one for up to ten minutes while you connect Google Calendar, to check the connection was started by you. There are no advertising or tracking cookies. Your browser also keeps your light or dark choice, so pages open in the right colors. That isn't a cookie, and signing out clears it.

Google user data

TendSphere's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

  • Sign-in uses your name, email address and profile picture, only to set up and show your account.
  • Google Calendar, if you connect it, asks only to see events on your calendars. If you turn on "Can change" for the first time, Google asks you once more, for permission to edit them too; if you later reconnect that account, it asks for both at once. TendSphere reads events on the main calendar of each Google account you connect, from about a month back to a week ahead (title, time, place, description and link) to show them in the Coming up strip on your board and to match showings and closings to your deals. It changes an event only if you've turned on "Can change" and then move the event on your board, and it changes only its start and end time. Calendar events aren't stored on TendSphere's server. They're fetched when your board is open, once when you connect an account (to learn its address), and once each morning to build your morning list, which may say a client has a showing to follow up on, and may list showings, inspections, closings and other deal events coming up before your next morning email (the next couple of days, or the week ahead if it comes once a week): only the kind of event, its day and time, and whose deal it is, never the event's title, place, description or notes.
  • Google data is used only to run your board for you, and isn't passed to AI assistants you connect. It isn't sold, shared with advertisers, used for advertising, or used to train AI, and no person reads it unless you ask us to help with a problem or the law requires it.
  • You can withdraw access any time: Disconnect in Connectors (TendSphere also withdraws its access at Google), or remove TendSphere at myaccount.google.com/connections.

If there's a security problem

If we discover a security breach affecting your data, we'll email the affected agents without unreasonable delay and notify regulators where the law requires.

Your privacy rights

Depending on where you live, the law may give you rights to see, correct, delete or get a copy of your personal data, and to opt out of uses such as targeted advertising. TendSphere doesn't sell data or use it for targeted advertising. TendSphere may be below the size at which Iowa's Consumer Data Protection Act and many other state privacy laws apply, but we honor requests for a copy or deletion anyway, within 30 days. If a request is about information on an agent's board, that agent answers their own clients.

Children

TendSphere is for adult real-estate professionals. It isn't meant for anyone under 18, and we don't knowingly collect information from them.

Getting your data out, or deleting it

You can download everything on your board any time from Account. To get a copy from us, or to have your account and everything on your board deleted, email hello@tendsphere.com from the address you sign in with. We'll do it within 30 days. Deleted data drops out of the backups within a further 45 days. Records of payments are kept for the books, without your name, and Stripe keeps its own invoices.

Changes

If this policy changes, the date at the top changes too. If a change affects how TendSphere uses your information, we'll email you before it takes effect.