Privacy Policy

Tempo ("Tempo," "we," "us," or "our", operated by TempoPace) is a business operations platform for small businesses. This policy explains what personal data we collect, why, who we share it with, and the choices you have.

We act in two roles. For your account data (who you are, how you pay us, how you use Tempo) we are the controller. For the business data you put in Tempo about your own clients (names, contact details, invoices, proposals) you are the controller and we are your processor: we handle it only to provide the Service to you, on your instructions. You are responsible for having a lawful basis to put your clients' data into Tempo.

• →Account data: your name, email address, business name, team membership and role, and a salted password hash (or your name and email if you use Google sign-in).
• →Business data you enter: client names and contact details, jobs, notes, invoice amounts and line items, proposals, services and pricing, brand voice, website content you ask us to scan, and uploaded files such as your logo.
• →Subscription data for your Tempo plan: plan, status, trial and renewal dates, billing email and a Stripe customer ID. Your card number is entered on Stripe's pages and is never seen or stored by Tempo.
• →AI interaction data: prompts you give Harmony, the business context sent with them, and the drafts it returns.
• →Usage and diagnostic data: which features you use, AI usage counts, rate-limit counters, and error logs (error message, page or function, and your user ID), so we can fix bugs, prevent abuse and control costs.
• →Data about your clients' interactions: when a client opens a proposal, invoice or payment link from you we record that it was viewed, how many times and when. When a client e-signs a proposal we record the name they type, the time, and their IP address as evidence of signature. This is held on your behalf as part of your business data.
• →Acquisition data: when you arrive from a link or campaign we record the landing page, referrer site and any UTM tags, and attach them to your new account so we know which channels work. We do not use advertising cookies or build advertising profiles.
• →Device data: if you turn on push notifications, a push subscription token for your browser.

You never paste API keys or secret credentials into Tempo. Stripe is connected through Stripe Connect (we store your Stripe account ID, not your secret key). Square and Google are connected through their own authorization screens; the access tokens we store are limited to the permissions you approve and are encrypted at rest. You can disconnect any of them in Settings, which deletes the stored connection.

Payments from your clients go directly to your own Stripe or Square account. Tempo does not hold your money.

• →To provide and operate the Service, including drafting, invoicing, reminders and sending approved messages (performance of our contract with you).
• →To bill you for your plan, prevent fraud and keep records we are required to keep (contract and legal obligation).
• →To secure the Service, diagnose problems, rate-limit abuse and understand which features are used and which channels bring in customers (our legitimate interests).
• →To send you service notices such as security, billing and policy-change emails (contract and legitimate interests).
• →With your consent where the law requires it, for example push notifications. You can withdraw consent at any time.

We do not sell your personal data, we do not "share" it for cross-context behavioural advertising, and we do not use your business data to train AI models.

We use these service providers (processors) to run Tempo. They may process your data only on our instructions and for these purposes:

We may also disclose data when required by law or to protect rights and safety, and as part of a merger, acquisition or sale of assets (you would be told, and any successor must honour this policy).

Messages you send through Tempo go to the clients you choose. Teammates you invite can see the organization's data according to their role.

Harmony uses Anthropic's Claude to draft proposals, review requests, follow-ups and insights. Nothing AI-written is sent to a client without your explicit approval. Drafts are part of your business data and are deleted with your account.

We do not use your business data to train AI models, and Anthropic does not train its models on data sent through its API under its commercial terms. AI output can be wrong; you are responsible for reviewing it.

We keep your data while your account is active. You can delete your account yourself at any time in Settings → Delete account. That permanently deletes your login, profile, settings, clients, notes, jobs, proposals, invoices, automations, drafts, connected-account tokens, uploaded files and your organization, and cancels your subscription.

What we cannot delete: payment, invoice and tax records held by Stripe, which Stripe must keep under its own legal obligations, and a minimal ledger of Stripe event IDs and types that contains no personal data. Backups roll off on our provider's normal schedule. Data we are legally required to retain (for example for tax or fraud disputes) is kept only for as long as that requirement lasts.

If you own an organization with other members, remove them or transfer ownership first. If you are a member of a team, deleting your account removes your personal data, and the records you created for the team remain with the team owner.

Depending on where you live (including the EEA, UK, California and other US states), you may have the right to:

• →Access the personal data we hold about you and receive a copy in a portable format
• →Correct inaccurate data
• →Delete your data (use Settings → Delete account, or email us)
• →Object to or restrict certain processing, and withdraw consent
• →Not be discriminated against for exercising your rights
• →Appeal our decision, and lodge a complaint with your data protection authority or state attorney general

Email [email protected] to exercise a right. We will verify your identity and respond within 30 days (45 where the law allows an extension). If you are a client of a Tempo user, please contact that business first; we will assist them in responding.

Tempo and its providers process data in the United States and other countries. Where data moves out of the EEA or UK, we rely on the safeguards our providers offer, such as standard contractual clauses.

We use browser storage that is strictly necessary to keep you signed in and remember settings such as light/dark mode, in-progress onboarding answers and acquisition tags. We do not use advertising or cross-site tracking cookies. We do not respond to "Do Not Track" signals because we do not track you across sites.

Data is encrypted in transit, access is limited by row-level security so each organization sees only its own data, sensitive connection tokens are encrypted at rest, and administrative access is restricted. No system is perfectly secure. If a breach affects your personal data we will notify you and regulators as the law requires.

Tempo is for businesses and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.

If we make material changes we will notify you by email or in the app at least 14 days before they take effect, and update the effective date above.

Questions or requests? Email [email protected].