GDPR Compliance

How Tempo protects your data rights under GDPR and global privacy regulations

Data Export

Download all your personal data in machine-readable JSON format at any time from your Settings.

Right to Erasure

Request complete deletion of your personal data. We process erasure requests within 30 days.

Data Protection

Encryption at rest and in transit, RBAC, audit logging, and MFA protect your data.

Our GDPR Commitment

Tempo is committed to full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. We process personal data lawfully, transparently, and for specific purposes.

Legal Basis for Processing

  • Contract Performance: Processing necessary to provide the Service as agreed
  • Legitimate Interest: Security monitoring, fraud prevention, service improvement
  • Legal Obligation: Tax reporting, employment law compliance
  • Consent: Marketing communications, analytics cookies

Data Subject Rights

Right of Access (Art. 15)

You can request a copy of all personal data we hold about you. Export is available via Settings > Privacy > Export Data.

Right to Rectification (Art. 16)

You can update your personal data directly in the platform or request corrections from your administrator.

Right to Erasure (Art. 17)

You can request deletion of your personal data. Available via Settings > Privacy > Delete My Data.

Right to Data Portability (Art. 20)

Export your data in structured JSON format for transfer to another service.

Right to Restrict Processing (Art. 18)

You can request we limit processing of your data while a dispute is resolved.

Right to Object (Art. 21)

You can object to processing based on legitimate interests at any time.

Sub-Processors

ProviderPurposeLocation
NeonDatabase hostingUS (AWS us-east-2)
VercelApplication hostingGlobal CDN
StripePayment processingUS/EU
Resend/SendGridEmail deliveryUS
AWS S3File storageConfigurable
AnthropicAI analytics (opt-in)US

Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer:
Email: dpo@tempo.app
Response time: within 72 hours for data breach notifications, within 30 days for data subject requests.

Data Processing Agreement

Enterprise customers can request a signed Data Processing Agreement (DPA) that includes Standard Contractual Clauses (SCCs) for international data transfers. Contact legal@tempo.app for details.