Privacy policy
What we collect, why we have it, who else sees it, and how to get it removed.
Last updated 5 September 2026
Who we are
Tenswipes writes and designs Instagram carousels for small businesses and delivers them on WhatsApp. This policy explains what we collect, why, who we share it with, and how to get it removed.
We are based in Nigeria and handle personal data under the Nigeria Data Protection Act 2023. Where the UK or EU GDPR applies to you, we treat you as having the equivalent rights set out below.
What we collect
| Data | Why we have it |
|---|---|
| Email address | To identify your account, send your receipts and finished files, and contact you about the service. |
| Name and profile picture, if you sign in with Google | Shown to you in the interface so you know which account you are using. Nothing else. |
| Password, if you register with email | Stored only as a hash by our authentication provider. We never see it. |
| Your business description, audience, Instagram handle and brand colour | This is the brief. Every carousel we write for you is generated from it. |
| The visual looks you choose | So your month of posts stays consistent with your brand. |
| Your WhatsApp number and the time you opted in | To deliver your carousels, and to prove you asked us to. Only stored if you opt in. |
| Payment records: amount, plan, provider reference, date | To give you what you paid for and to keep accounts. We never see or store your card details. |
| Your topic calendar and the carousels we generate | So you can review them, and so we can send them on the right day. |
Google sign-in specifically
If you sign in with Google, we receive your email address, your name and your profile picture from your Google account. We use them only to create and identify your Tenswipes account and to show you who is signed in.
We do not read, create or modify anything else in your Google account. We request no access to Gmail, Drive, Contacts, Calendar or any other Google service. We do not sell Google user data, do not use it for advertising, and do not use it to train any AI model.
Tenswipes's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect Tenswipes at any time from your Google account permissions page, and you can delete your account with us as described below.
What we never collect
- Card numbers, bank details or any payment credentials. Those go directly to Paystack or Polar and never touch our servers.
- Your Instagram password, or any access to your Instagram account. We produce files you post yourself.
- Your WhatsApp messages. We can send you messages once you opt in; we cannot read your conversations.
- Location data, device identifiers or advertising identifiers.
Who else processes your data
We use these services to run Tenswipes. Each one only receives what it needs to do its part.
| Service | What it receives |
|---|---|
| Supabase | Your account, brand profile, calendar and generated files. This is our database, authentication and file storage. |
| Vercel | Hosts the website. Sees requests and standard server logs. |
| Hetzner | Runs the machine that generates your carousels. Processes your brief and your slides. |
| Google Gemini | Your business description and topic, to write the slide copy and plan your month. |
| Ideogram | The text of a slide, to draw its artwork. Only for the generated-art looks. |
| DailZero and WhatsApp | Your WhatsApp number and the carousel being delivered. |
| Postmark | Your email address and the files attached to it. |
| Paystack and Polar | Your email address and the amount, so they can take payment. They handle the card details, not us. |
AI and your content
Your business description and topics are sent to Google Gemini to write copy, and slide text is sent to Ideogram to draw artwork. This is the service working as intended.
We do not use your content to train our own models, and we do not grant these providers the right to train on it. Their own terms govern what they do with data sent through their APIs, and those terms can change; we will update this page if the position changes materially.
The carousels are generated by software. Read them before you post. They can contain mistakes, and anything factual about your business is only as accurate as the brief you gave us.
How long we keep it
- Your account and brand profile: until you delete your account.
- Generated carousels and their files: for the life of your account, so you can go back to them.
- Your WhatsApp number: until you remove it. Opting out deletes the number and the consent record together.
- Payment records: kept as long as tax and accounting law requires, even after account deletion.
Your rights
Email hello@tenswipes.com and we will act on any of these within 30 days.
- Get a copy of everything we hold about you.
- Correct anything that is wrong.
- Delete your account and the data attached to it.
- Withdraw consent for WhatsApp messages, which you can also do yourself at any time in the app.
- Object to how we are using your data, or ask us to restrict it.
- Complain to the Nigeria Data Protection Commission, or your local supervisory authority.
Security
Data is encrypted in transit. Your finished carousels sit in private storage reachable only through short-lived signed links. Passwords are hashed by our authentication provider and never visible to us. Access to production systems is limited to people who need it.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the relevant authority as the law requires.
Children
Tenswipes is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children.
Changes
We will update this page when what we do changes, and change the date at the top. If a change materially affects your rights, we will email you rather than rely on you noticing. Questions go to hello@tenswipes.com.