Trust and security
Trust and security at Tenhatch
How we protect your data, who processes it for us, and how to tell us about a security issue.
How your data is protected
- Every Tenhatch site and web app is served over HTTPS only.
- The web tools, the early-access list and custom build requests are stored in our databases at Supabase, which encrypts data at rest. In the web tools, a signed-in customer can read only their own account’s data; everything else is read and written only by our servers.
- The Chrome extensions keep your rules in your own browser.
- API keys are stored only as a one-way hash, so even we cannot read a key after it is made.
- Payments go through Stripe, Shopify or the Chrome extensions’ payment provider; we never see card details.
- Each tool keeps only what it needs to run, and its privacy policy says exactly what that is.
Who processes data for us
These companies handle data only on our behalf, each for its own part of the work. Each tool’s privacy policy lists the ones that tool uses.
- Vercel
- Hosts every Tenhatch website and web app.
- Supabase
- Our database and the web tools’ sign-in. Supabase encrypts the data it stores at rest.
- Stripe
- Takes payments for the web tools, from launch. Card details go to Stripe, not to us.
- Resend
- Sends our email: sign-in links, reports, alerts and account messages.
- Fly.io
- Runs the background workers: AccessDiff’s scans, CheckoutBeat’s checks and the InStock First app.
- Anthropic
- Powers the web tools’ support assistant, which answers from each tool’s docs.
- Apify
- Runs the data tools, which you start from your own Apify account.
What we promise
Your data stays yours
Each tool keeps only what it needs to run. We never sell data or train models on it.
14-day refunds
On every web plan, no questions asked. Store apps refund through their store.
Accessible by design
We aim for WCAG 2.2 level AA on every site. Every page of tenhatch.com is tested against it, and with a keyboard alone, on every release. Accessibility statement
Report a security issue
If you find a security problem in a Tenhatch site, app, extension or API, email support@tenhatch.com with the subject “Security”. Tell us what you found and how to reproduce it. We read every report, reply as soon as we can, and fix what we confirm. Please give us time to fix an issue before you share it, and do not access other people’s data while testing.
Our security.txt has the same contact. Questions about privacy are answered on the privacy page; for a custom build’s security needs, tell us what you need.