Legal
Privacy Policy
This policy explains what personal data Tendo handles, why, where it sits, how long we keep it, and how to have it deleted. It is written to be read, not to be survived.
Last updated: 14 September 2026
1. Who we are
Tendo is a sole proprietorship operated by Khush Oberoi, registered at 1st Floor, F-6, Manish Global Mall, Sector-22, Dwarka, New Delhi 110077, India. We build and run messaging, voice and automation systems for businesses — WhatsApp reception, call handling, lead capture and follow-up.
You can reach us at khushoberoi@usetendo.com for anything in this policy, including deletion requests.
2. Two different roles
This matters, because it decides who is answerable to you.
When you contact Tendo directly — through this website, email, or our own WhatsApp number — we decide what happens to your data. In the language of the Digital Personal Data Protection Act, 2023, we are the Data Fiduciary.
When you message a WhatsApp number or speak to a phone line that we operate for one of our client businesses, that business decides what happens to your data. They are the Data Fiduciary. We are the Data Processor, acting on their written instructions. If you want your data from such a conversation deleted, you can ask us and we will act on it or pass it to that business — but the business sets the policy.
3. What we collect
Through WhatsApp and voice services
- Your phone number
- Your WhatsApp profile name, as WhatsApp supplies it
- The content of messages you send and the replies sent back
- For voice calls: a recording or written transcript of the call, where the business has chosen to enable it
- Timestamps, and technical delivery information such as whether a message was delivered or read
- Anything you volunteer in the conversation — your name, city, requirement, budget, the product you asked about
We do not read your other WhatsApp conversations. We only see messages sent to numbers we operate.
Through this website
This site runs no analytics, no advertising pixels and no third-party tracking scripts. It sets no tracking cookies. If you email us or book a call through the link on this site, we hold what you put in that form or email.
4. Why we use it
- To answer you, and to continue a conversation you started
- To pass your enquiry to the business you were trying to reach
- To route your enquiry to the right person, branch or dealer
- To keep a record so a business can see which enquiries it received and how they were handled
- To fix and improve the systems we run
We do not sell personal data. We do not rent it, trade it, or hand it to advertisers. We do not use the content of your conversations to build marketing lists for unrelated businesses.
5. Who else sees it
Only the parties below, and only to the extent each needs.
| Who | Why |
|---|---|
| The client business | The business whose number you messaged. They receive your enquiry — that is the point of contacting them. |
| Meta Platforms | WhatsApp messages are carried over the WhatsApp Business Cloud API, operated by Meta. Meta's own terms apply to that carriage. |
| Automation hosting | Our workflow platform processes and stores messages so replies can be produced. Servers may be located outside India. |
| Language and voice providers | Where a service produces written or spoken replies, message text may be sent to a processing provider to generate that reply. |
| Authorities | Only where we are legally required to disclose, and only what is required. |
6. Where it is stored, and transfers outside India
Some of the providers above operate servers outside India. Your data may therefore be stored or processed outside India. We only use providers that commit to reasonable security safeguards, and we transfer only what the service needs to function.
7. How long we keep it
- Conversation records: up to 12 months, unless the client business instructs us to keep them for a shorter period.
- Call recordings and transcripts: up to 6 months.
- Direct enquiries to Tendo: up to 24 months, so we can pick up a conversation where it left off.
After that, records are deleted or irreversibly anonymised. If you ask us to delete sooner, we act on it — see below.
8. Your rights
Under the Digital Personal Data Protection Act, 2023, you can ask us to:
- Tell you what personal data of yours we hold and who it has been shared with
- Correct anything inaccurate, or complete anything incomplete
- Erase your data, where we are not required to keep it
- Withdraw consent you previously gave
- Nominate someone to exercise these rights if you die or become incapacitated
Email khushoberoi@usetendo.com with the phone number you used. We respond within 30 days. There is no charge.
If we acted as Data Processor for a client business, we will either act on your request under that business's instructions or tell you which business to approach, within the same 30 days.
9. Stopping messages
Reply STOP to any WhatsApp number we operate and that number will stop messaging you. You can also block the number in WhatsApp, which works immediately and needs nothing from us.
10. Children
Our services are built for business-to-business and business-to-customer communication and are not directed at children. We do not knowingly collect personal data of anyone under 18. If you believe we hold such data, write to us and we will delete it.
11. Security
Access to conversation data is restricted to the people who need it. Credentials are stored in secrets management rather than in code or spreadsheets, and access is revoked when an engagement ends. No system is perfectly secure, and we do not claim otherwise — but if a breach affects your data, we will notify you and the Data Protection Board of India as the Act requires.
12. Grievances
If something here has gone wrong and you are not satisfied with our answer, you can escalate. In the first instance, write to:
Khush Oberoi
Grievance Officer, Tendo
1st Floor, F-6, Manish Global Mall
Sector-22, Dwarka, New Delhi 110077
khushoberoi@usetendo.com
If you remain dissatisfied, you may complain to the Data Protection Board of India.
13. Changes to this policy
If we change this policy, the date at the top changes with it. Material changes affecting how we use existing data will be communicated to affected businesses directly.