Privacy Policy
Last updated: April 2026
This privacy policy explains how Tempered (the “Platform”) collects, uses, and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data Controller
The Platform is operated by Tempered, a trading style of Your Systems Team Limited (Company No. 06798860), which is the data controller for the personal data processed through the Platform.
- ICO Registration: ZC102414
- Registered address: 1 Peach Street, Wokingham, England, RG40 1XJ
- Privacy contact: privacy@temperedrisk.ai
What Data We Collect
Account Data
- Name, email address, and authentication credentials
- Organisation name and membership details
- API key metadata (names, scopes, creation dates — never the key itself)
Usage Data
- Evaluation requests and results (the content you submit for enrichment)
- API call timestamps, token counts, and response times
- Session data and authentication logs
Technical Data
- IP addresses and browser user-agent strings
- Cookies required for session management and security
Lawful Basis for Processing
| Data | Lawful Basis | Purpose |
|---|---|---|
| Account data | Contract (Art. 6(1)(b)) | Providing the Platform you signed up for |
| Evaluation content | Contract (Art. 6(1)(b)) | Performing the enrichment analysis you requested |
| Usage metrics | Legitimate interest (Art. 6(1)(f)) | Service improvement and billing |
| Technical/security logs | Legitimate interest (Art. 6(1)(f)) | Security monitoring and abuse prevention |
Data Retention
- Evaluation data: Retained for the duration of your subscription plus 30 days after account closure
- Account data: Retained until you request deletion or 12 months after last login
- Technical logs: Retained for 90 days
- Billing records: Retained for 7 years (legal requirement)
Your Rights
Under UK GDPR, you have the right to:
- Access your personal data (Subject Access Request)
- Rectify inaccurate data
- Erase your data (“right to be forgotten”)
- Restrict processing
- Data portability — receive your data in a structured format
- Object to processing based on legitimate interest
- Withdraw consent where processing is based on consent
To exercise any of these rights, contact us at the privacy address above.
Data Sharing
We do not sell your personal data. We share data with our sub-processors as listed in the Data Processing Agreement. These include AI vendors (to perform the enrichment analysis you request), infrastructure providers, and payment processors.
International Transfers
Where data is transferred outside the UK, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
Cookies
See our Cookie Policy for details on the cookies we use.
Changes to This Policy
We will notify registered users of material changes to this policy via email. The “last updated” date at the top reflects the most recent revision.
Contact and Complaints
If you have concerns about how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.