Privacy Policy | Tenvale

Effective date: May 26, 2026. Last reviewed: July 7, 2026.

Tenvale LLC ("Tenvale," "we," "us") operates the Tenvale property-management platform at tenvale.com. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the choices available to you.

Who we are

Legal entity: Tenvale LLC, a Massachusetts limited liability company.
Contact: support@tenvale.com.

What we collect

Account information. When you sign up, we collect your name, email address, password (handled by our identity provider — see "Third parties" below), and, optionally, a phone number.

Property and unit information. Property addresses, unit identifiers, lease terms, rent amounts, and other operational data you enter to manage your portfolio.

Tenant information. Names, contact details, lease terms, payment preferences, and maintenance history for tenants you onboard to the platform. You are responsible for ensuring you have authority to enter this information and that you handle it in accordance with applicable law.

Payment information. When you connect a bank account or set up rent collection, we use Stripe to verify and tokenize the account. We do not store full bank account numbers or full card numbers on our servers; we store Stripe-issued identifiers and metadata required to process payments.

Communications. Email and SMS messages we send on your behalf (rent reminders, late-fee notices, lease-expiration notifications) and their delivery status (sent, delivered, bounced, complained).

Usage information. Pages visited, features used, and similar product analytics. If you arrived from a link with campaign parameters, we also record which campaign brought you here (see Cookies below). We do not run third-party advertising or analytics cookies.

How we use it

To operate the platform (run the dashboards, send notifications, process payments).
To provide customer support.
To detect and prevent fraud, abuse, or violations of our Terms of Service.
To meet legal, tax, and accounting obligations.
To communicate with you about the service (transactional emails) and, separately, to send marketing emails — only where you have given clear consent. Every marketing email contains a one-click unsubscribe link.

Third parties (subprocessors)

We use a small number of service providers to operate Tenvale. Each is a "subprocessor" in the sense that they process data on our behalf to deliver the platform. The customer-facing providers (the ones you actually interact with) are named below; the back-end providers are listed by category.

Stripe — Payments, payment-method tokenization, subscription billing, and Connect onboarding for landlord-to-tenant rent collection. (Visible to you whenever you check out, manage billing, or enroll in autopay.)
Clerk — Identity and authentication. (Visible to you on the sign-in and sign-up screens.)
Application database & file storage provider — Stores your account, properties, units, leases, tenants, payment metadata, and uploaded documents.
Application hosting & edge networking provider — Runs the Tenvale application servers and delivers content close to you.
Email delivery provider — Sends transactional and marketing email on our behalf.
SMS delivery provider — Transmits the account-notification text messages you opt into. It processes phone numbers solely to deliver those messages on our behalf; see "SMS / text messaging" below.
Error monitoring provider — Captures application errors so we can fix them. Configured with sendDefaultPii: false and a beforeSend filter that removes HTTP request bodies and recursively scrubs known sensitive field names (authentication tokens, Stripe identifiers, lease and payment identifiers, bank-account last four digits, and similar) before transmission. Free-form error messages and breadcrumbs are not scrubbed and may contain incidental information.
Cron heartbeat monitoring provider — Records when our scheduled background jobs run. No customer data is sent.

A detailed list of the currently-named subprocessors in each category is available on written request to support@tenvale.com.

We do not sell your personal information.

SMS / text messaging

If you opt in to text messages (tenants on the account-activation screen, owners under Settings → Notifications), we collect your mobile phone number and your SMS consent in order to send the account notifications you agreed to.

No mobile information — including phone numbers, SMS opt-in data, and SMS consent — will be shared with third parties or affiliates for marketing or promotional purposes. Your phone number is used only to deliver the account notifications you opt into. Our SMS delivery provider processes this data solely to transmit those messages on our behalf.

SMS consent is optional and is not a condition of using Tenvale. Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out at any time, or HELP for help. See our SMS / Text Message Program page for the full program details.

Cookies

We use cookies to keep you signed in (the Clerk session cookie).

We also set one first-party attribution cookie, tv_utm, if you first arrive at our site from a link that carries campaign parameters (UTM tags or an ad-platform click identifier such as gclid). It stores those first-visit parameters for up to 90 days so that, if you later create an account, we can attribute the signup to the campaign that brought you here. This cookie is httpOnly (it cannot be read by scripts on the page, including any third-party script), it is not used to track you across other sites, and it is read once when you create an account and cleared after the attribution is recorded. If we ever send ad-platform click identifiers back to an advertising platform for conversion measurement, we will update this policy before doing so.

We do not use advertising pixels or third-party analytics cookies. If we add any in the future, we will update this policy and provide notice through the in-product UI.

Your rights

You may, at any time:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your account and the associated personal information, subject to legal, tax, and accounting retention requirements (typically up to seven years for financial records).
Unsubscribe from marketing email at any time through the one-click link in every marketing email; transactional messages (rent receipts, password resets, security alerts) will continue.

Tenants can exercise most of these rights directly from Settings → Account in the tenant portal: update contact details, manage text-message and marketing-email preferences, download a copy of your data, or delete your account. For anything else — or if you do not have a tenant login — email support@tenvale.com.

Data retention

We retain account and operational data for as long as your account is active. After account closure, we retain data for 90 days to allow account restoration, then delete it — except where legal, tax, or accounting obligations require longer retention (typically up to seven years for financial transaction records).

Children

Tenvale is not intended for use by anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact support@tenvale.com and we will delete it.

Security

We follow industry-standard practices to protect the data you entrust to us, including encryption in transit, role-based access controls, and minimum necessary data sharing with subprocessors. No system is perfectly secure; report suspected vulnerabilities to support@tenvale.com.

Changes to this policy

We may update this policy from time to time. For material changes, we will notify account holders by email at least 30 days before the change takes effect. The "Effective date" and "Last reviewed" fields at the top of this page indicate the current version.

Governing law

This policy is governed by the laws of the Commonwealth of Massachusetts.

Contact

Questions? Email support@tenvale.com.