PRIVACY POLICY
What we collect, what we do not, and what leaves your device.
Last updated November 5, 2026
This policy covers tengerways.com and the Brutus private beta. It is written to be checked against what the site actually does, not to be broad enough to cover anything we might do later.
Who is responsible for your data
Tenger Ways, LLC, a Delaware limited liability company, with an office at 156 Chappaqua Road, Briarcliff Manor, NY 10510. For anything on this website we are the controller. For personal data your organization puts into Brutus, your organization is the controller and we are the processor, on the terms in the Data Processing Agreement. Privacy questions and rights requests go to hello@tengerways.com or to that postal address.
What we never do
We do not look up your IP address to guess who you are. We do not buy data about you from brokers. We do not run identity resolution, fingerprinting or cross-site advertising trackers. We do not sell personal data, and we do not share it for behavioural advertising. There is no category of personal data we sell, so there is nothing for you to opt out of selling.
What stays on your device
The role chips you pick, the reduce-motion and keyboard-shortcut switches, and anything you type into the hand-off box are kept in your own browser’s storage. Today the hand-off box transmits nothing at all. Clearing your browser storage, or using Forget Me in the footer panel, erases all of it. None of it is sent anywhere on its own.
What is sent when you register or reach out
Getting in touch is the one moment this website transmits anything about you, whether that is the contact form, the subscribe form or a beta-access request. When you press the button, the following is sent and stored as a lead record in our CRM:
- Your email address, and your name and company if you typed them.
- Your team size, your message, and any invite code you entered.
- Which form you used, and which wording of the page you saw.
- The role chips you had selected, if any. They stay on your device until you submit a form; submitting sends them with it, so we know which audience the request came from.
- Basic attribution: the referring site, any utm_source, utm_medium and utm_campaign in the link you followed, and the date you first visited.
If you would rather send none of that, email hello@tengerways.com instead of using the form. We use what you send to answer you, to decide whether to open a beta seat, and to understand which pages bring people in. We do not use it for anything else.
What the Toil Library will collect, before it collects it
The hand-off box will one day feed the Toil Library. Before that collection runs a single day, this is the contract it ships under, and it is published here in advance on purpose: typed text is stripped of emails, phone numbers, names and anything resembling a client detail before anything is stored; raw text lives twelve months and only the counts live longer; everything is tied to a random visitor ID rather than a name; Global Privacy Control is honoured from the first day; and visitors from regions that require consent are asked first. None of this is running today.
Brutus
Inside Brutus, your organization is the controller of the personal data it puts in and we are the processor. The Data Processing Agreement sets out how we handle it: what we may do with it, how long we keep it, what happens at the end, and what we owe you if something goes wrong. What Brutus learns stays scoped to the level where it learned it, as described on the memory page. Your content is never used to train models for anyone else.
Who else touches it
Only the providers named in Subprocessors, each for one stated job: hosting, the CRM that stores leads, the service that sends email, and the model providers that do the inference inside Brutus. Website form data does not go to model providers. That page lists every one of them and what each receives.
How long we keep it
Lead records are kept while there is a live conversation and for three years after the last contact, then deleted. Beta account data is kept for the life of the account and deleted within ninety days of its closure, unless you ask us to delete it sooner. Server logs are kept for ninety days.
Your rights
Wherever you are, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Write to hello@tengerways.com and a person will answer. We do not require an account to make a request and we will not charge you for one. If you are in the UK, the EU, or a US state with its own privacy statute, those laws give you these rights explicitly and we honour them for everyone rather than keeping two standards.
Cookies
This site sets no advertising cookies and runs no third-party analytics tags. What it stores in your browser is listed under “What stays on your device” above, and it is there to remember your own choices rather than to watch you.
Children
This is a service for businesses. It is not directed at children and we do not knowingly collect data from anyone under 16.
Changes
When this policy changes, the date at the top moves. If a change affects what we collect or who receives it, we will say so plainly rather than quietly widening a sentence.
Questions
Write to hello@tengerways.com and a person will answer. If a term here conflicts with a signed agreement between us, the signed agreement wins.
READ THE NO CREEPY PROMISE.
The same commitments, written the way we actually talk about them.