Privacy Policy

Tembo Data Systems, Inc. is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use our websites, products, and services (collectively, the "Services"). Please read this Privacy Policy carefully. By using our Services, you agree to the practices described in this Privacy Policy.

This policy applies only to our Services and does not apply to third-party websites, platforms, or services. It also does not apply to our employees, contractors, or job candidates.

1. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use the Services, and information from third-party sources.

• Personal Information. Name, email address, phone number, business address, and other details you provide when creating an account or profile.
• Database Information. When you connect your database, we collect metrics, schema information, and configuration details. We do not access your actual data contents unless explicitly requested for troubleshooting.
• Usage Data. Information about how you use our Services, including features used, actions taken, time spent on pages, buttons clicked, and frequency of use.
• Device Information. IP address, browser type, operating system, hardware specifications, network information, preferences, settings, and other technical information.
• Service Provider Authentication Data. Logins or tokens (e.g., GitHub, AWS) to allow integration with third-party services you connect to our platform.
• Cookies and Tracking Technologies. We use cookies and similar tracking technologies to enhance your experience. For more details, see our Cookie Policy.
• Information from Third Parties. Information from marketing campaigns, referral programs, social platforms, or other third-party datasets that help us improve our Services.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Services
• Process transactions and manage your account
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Develop new products, services, and features
• Monitor and analyze trends, usage, and activities in connection with our Services
• Prevent fraud and verify identity
• Maintain business records and handle referrals
• Conduct marketing and notify you of new products or services
• Investigate misuse or prohibited behavior
• For legal purposes, including claims, mergers, or acquisitions
• Respond to support requests or survey invitations
• Any other use you authorize or consent to

3. AI Features and Data Processing

To provide its features, Tembo makes AI requests to our server. This happens for many different reasons, including when you ask questions in chat and for building up context or looking for issues to show you.

An AI request generally includes context such as your recently viewed files, your conversation history, and relevant pieces of code. This data is sent to our infrastructure on AWS, and then to the appropriate language model inference provider.

You own all the code generated by Tembo.

LLM Provider Data Privacy

Tembo itself does not use your code or data to train models. When you use Tembo's AI features, your code is sent to third-party language model providers (such as Anthropic, OpenAI, or xAI) through their APIs. These providers have the following privacy policies regarding your data:

• Anthropic (Claude): Does not train on data submitted via the Claude API. API inputs and outputs are not used to train models. Your code and prompts remain private. Data may be retained temporarily for trust and safety purposes (typically 30 days), but not for training.
• OpenAI: Does not train on any inputs or outputs from API users by default. API customers are opted OUT by default - your data is not used for training unless you explicitly opt-in.
• xAI (Grok): Does not use your business data, including inputs (prompts) or outputs (answers), for training their models when you use the API.

Tembo's role is limited to cloning your repository and running the AI agent until a pull request is opened. We do not store, analyze, or use your code for any other purpose. For complete details on how each LLM provider handles your data, please refer to their respective privacy policies.

4. How We Share Your Information

We do not sell or rent your personal information. We share your data with third parties only in the following circumstances:

• With Service Providers: Vendors and consultants that perform services for us, including cloud hosting, analytics, and AI service providers
• For Business Transfers: In connection with mergers, acquisitions, or sale of assets
• As Required by Law: To comply with legal obligations, respond to lawful requests, or protect our rights
• With Your Consent: When you direct us to share information
• With Auditors and Consultants: As needed for compliance audits and consulting services related to your use of our Services
• To Prevent Fraud or Abuse: With law enforcement or other parties when necessary to prevent illegal activity
• Anonymized or Aggregated Data: We may share anonymized or aggregated data for research, analytics, or industry insights

5. Data Security

We take appropriate measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server environments hosted on AWS
• Encryption for sensitive information
• Regular monitoring of systems for vulnerabilities
• SOC 2 Type 1 certification

However, no website or online platform is completely secure. We cannot guarantee the security of any information you transmit to us.

6. Your Rights and Choices

You have the right to:

• Access and receive a copy of your personal information
• Request correction of inaccurate or incomplete information
• Request deletion or restriction of your personal information in certain circumstances
• Object to our processing of your information where legally permitted
• Withdraw your consent at any time
• Request your data in a portable, machine-readable format
• Delete your account at any time through the Settings dashboard

To exercise these rights, please contact us at privacy@tembo.io. We may need to verify your identity before processing your request. Some data may be exempt from deletion due to legal obligations.

If you are located in the European Economic Area (EEA) or United Kingdom (UK), we process your personal data based on one of the following legal bases: (1) to fulfill our contract with you, (2) to comply with legal obligations, (3) for our legitimate business interests, or (4) based on your consent. You have the right to file a complaint with your local data protection authority.

7. Account Deletion

You can delete your account at any time in the Settings dashboard (click "Advanced" and then "Delete Account"). This will delete all data associated with your account. We guarantee complete removal of your data within 30 days.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. We periodically review whether the data we retain is still needed.

Data may be retained longer in the following circumstances:

• Continued service delivery
• Legal requirements or obligations
• Fraud prevention or security purposes
• Support requests or privacy protection
• Your consent to longer retention
• Data has been anonymized and no longer identifies you

9. International Data Transfers

Tembo is based in the United States and the information we collect is governed by U.S. law. If you are accessing the Services from outside of the U.S., please be aware that information collected through the Services may be transferred to, processed, stored, and used in the U.S.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated "Effective Date." We encourage you to review this policy periodically. The updated policy will be posted at the same URL with the new effective date.

11. Children's Privacy

We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us at privacy@tembo.io so we can delete it.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Tembo Data Systems, Inc.
Email: privacy@tembo.io

If you believe your privacy rights have been violated, we will investigate and respond to your complaint.