Privacy Policy
Last updated: March 2026
Data Controller
The data controller is Sorakai EURL, a company registered in France (SIREN 999 522 048), with its registered office at 200 rue de la Croix Nivert, 75015 Paris. Contact: tenka.contact2026@gmail.com.
Data We Collect
Tenka only collects data necessary for operation: Discord server ID (guild_id), Discord user ID (user_id) for quota tracking, command usage statistics, and token counts. Message content is not stored beyond ephemeral processing. No passwords or payment data are stored on our servers.
Legal Basis for Processing
Performance of contract (provide the service), legitimate interest (improve the service, anonymized metrics), consent (optional data: personality, custom instructions).
Storage and Retention
All data is stored on AWS in the European Union (Ireland) with encryption at rest. Conversation caches are deleted after 24 hours (DynamoDB TTL). Usage statistics are retained for 13 months for billing. Logs are retained for 7 days.
Sub-processors
Tenka relies on the following sub-processors: • Anthropic, PBC — Message content (ephemeral, AI processing), United States, Standard Contractual Clauses (SCCs) • Amazon Web Services (AWS) — All application data, EU (Ireland), N/A (EU-based) • Stripe, Inc. — Payment and billing data, United States, SCCs • Discord, Inc. — Interaction metadata, United States, SCCs • Netlify, Inc. — Website visitor data (IP addresses, pages visited), United States, SCCs
International Data Transfers
Where personal data is transferred to sub-processors located outside the European Union (Anthropic, Stripe, Discord), such transfers are governed by Standard Contractual Clauses (SCCs) as adopted by the European Commission. AWS stores all application data within the EU (Ireland).
Your Rights (GDPR)
Under the GDPR, you have the right to access, rectify, delete, port, and object to the processing of your personal data. To exercise these rights or request deletion of all your server's data, contact us at tenka.contact2026@gmail.com. We commit to processing your request within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés — www.cnil.fr) if you believe that the processing of your personal data constitutes a violation of the GDPR.
Data Processing Agreement (DPA)
For Enterprise customers, a GDPR-compliant Data Processing Agreement is available on request. Contact us at tenka.contact2026@gmail.com.
Contact
For any privacy-related questions: tenka.contact2026@gmail.com