TENX ARENA / product policy
Know how your work is handled.
The invitation identifies the organization requesting the simulation and its approved handling schedule. Product participation and optional research use are separate.
Who is responsible
Naprolity OÜ operates TENX ARENA (registry 14649371; Männimäe, Pudisoo küla, Kuusalu vald, Harju maakond 74626, Estonia). For customer-directed candidate work, the customer organization normally determines the purpose and acts as controller; Naprolity acts as processor under documented instructions. The customer must provide its own lawful basis and notice. Naprolity separately acts as controller for its account administration, security, billing, abuse prevention and service operations. The signed agreement must reflect the actual roles.
Account and work data
TENX holds your account identity and secure-session records, invitation and permission records, work actions, messages, source interactions, AI request/output metadata, artifacts and revisions, authorized review records and support requests. Credentials, private chain-of-thought, webcam recording and personality inference are not part of this product's work evidence.
Who can see it
Access is checked against the inviting organization's TENX permissions and exact mission or review assignment. Authorized organizational reviewers see relevant work evidence, not your optional research choice. Platform operators handle access, integrity and data requests. Authentication alone grants no organizational authority.
AI processing
OpenRouter is the external inference gateway. Requests require the approved provider family, zero-data-retention routing and denied provider data collection, with fallback disabled. AI receives only context explicitly available and shared for that actor. Provider metadata and operational billing records may still be retained. These controls do not mean data never leaves TENX or that every form of metadata retention is disabled.
Infrastructure and international processing
Vercel hosts the application, Neon hosts PostgreSQL, Resend delivers transactional email, and OpenRouter routes approved inference to Google through the Vertex provider family. Better Auth runs within TENX infrastructure. Current processing is not EU-only. Requested zero data retention is not EU residency, and does not remove service metadata or all gateway logging. Applicable agreements and transfer safeguards must be verified before a customer sends personal data.
Your choices and requests
Use Privacy & Data Requests for access, correction, restriction, deletion review, export or a research withdrawal request, including before you have an account. You receive a private case receipt with a normal one-calendar-month response target. The operator may need proportionate identity checks or customer-controller instructions. Any lawful extension or refusal needs an explanation. The signed-in data controls also allow an immediate change to optional research permission. Declining research never blocks ordinary work. You may complain to the Estonian Data Protection Inspectorate or your competent supervisory authority.