Privacy Policy

Last updated: April 2026

This privacy policy explains how Tempered (the "Platform") collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

The Platform is operated by Tempered, a trading style of Your Systems Team Limited (Company No. 06798860), which is the data controller for the personal data processed through the Platform.

• ICO Registration: ZC102414
• Registered address: 1 Peach Street, Wokingham, England, RG40 1XJ
• Privacy contact: [email protected]

What Data We Collect

Account Data

• Name, email address, and authentication credentials
• Organisation name and membership details
• API key metadata (names, scopes, creation dates — never the key itself)

Usage Data

• Evaluation requests and results (the content you submit for enrichment)
• API call timestamps, token counts, and response times
• Session data and authentication logs

Technical Data

• IP addresses and browser user-agent strings
• Cookies required for session management and security

Lawful Basis for Processing

Data	Lawful Basis	Purpose
Account data	Contract (Art. 6(1)(b))	Providing the Platform you signed up for
Evaluation content	Contract (Art. 6(1)(b))	Performing the enrichment analysis you requested
Usage metrics	Legitimate interest (Art. 6(1)(f))	Service improvement and billing
Technical/security logs	Legitimate interest (Art. 6(1)(f))	Security monitoring and abuse prevention

Data Retention

• Evaluation data: Retained for the duration of your subscription plus 30 days after account closure
• Account data: Retained until you request deletion or 12 months after last login
• Technical logs: Retained for 90 days
• Billing records: Retained for 7 years (legal requirement)

Your Rights

Under UK GDPR, you have the right to:

• Access your personal data (Subject Access Request)
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability — receive your data in a structured format
• Object to processing based on legitimate interest
• Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at the privacy address above.

Data Sharing

We do not sell your personal data. We share data with our sub-processors as listed in the Data Processing Agreement. These include AI vendors (to perform the enrichment analysis you request), infrastructure providers, and payment processors.

International Transfers

Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

Cookies

See our Cookie Policy for details on the cookies we use.

Changes to This Policy

We will notify registered users of material changes to this policy via email. The "last updated" date at the top reflects the most recent revision.

Contact and Complaints

If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.