Privacy Policy

1. Introduction

Tempo ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management platform (the "Service").

2. Information We Collect

2.1 Information You Provide

• Account registration data (name, email, organization details)
• Employee records (job title, department, compensation, performance data)
• Communications (support requests, feedback)
• Payment information (processed by Stripe; we do not store card numbers)

2.2 Automatically Collected Information

• Log data (IP address, browser type, access times, pages viewed)
• Device information (operating system, device identifiers)
• Usage analytics (features used, navigation patterns)
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide, maintain, and improve the Service
• To process transactions and send billing-related communications
• To send administrative notifications and platform updates
• To respond to support requests and customer service inquiries
• To monitor and analyze usage patterns and trends
• To detect, prevent, and address technical issues and fraud
• To comply with legal obligations

4. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Stripe (payments), Neon (database hosting), Vercel (hosting), Resend/SendGrid (email delivery)
• Your Organization: Administrators within your organization can access employee data as permitted by role-based access controls
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with mergers, acquisitions, or asset sales

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., financial records may be kept for up to 7 years).

6. Your Rights (GDPR & Global Privacy)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Request restriction of processing
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise these rights, visit your Settings > Privacy page or contact us at privacy@tempo.app.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We use Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure adequate protection in compliance with GDPR and other applicable data protection laws.

8. Security

We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest, PBKDF2 password hashing, role-based access controls, audit logging, and regular security assessments. No method of transmission or storage is 100% secure, but we strive to protect your data.

9. Children's Privacy

The Service is not intended for individuals under 16 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact:
Tempo Privacy Team
Email: privacy@tempo.app
Data Protection Officer: dpo@tempo.app