Tempo

Privacy Policy

A truthful description of how Tempo handles data. Not legal advice.

Tempo is a personal assistant on your own data — not surveillance of your coworkers. Two rules govern everything:

1. Tempo never stores what it reads. It grounds its reasoning live in Slack (Real-Time Search) with your own token, uses the results in memory to answer you, and discards them. No message, file, channel, or thread content is ever written to disk or a database.

2. Tempo never acts without your tap. It proposes; you approve. Nothing is sent or changed on your behalf without an explicit action from you.

What Tempo stores

Your OAuth token — to run search + your own actions as youencrypted (AES-256-GCM)

Preferences — verbosity, reading level, read-aloud, focus/DND defaultssettings only

Pinned commitments — the promises you trackderived facts, no message text

Snoozes / done — which items you dismissedpermalink + status only

Usage metrics — your weekly impactcounts only

Learned signals — tune your ranking from your tapsper-sender counts only

Surface ids — your Tempo Canvas / List handlesids, not content

What Tempo never stores

Any message, file, channel, or thread content from Slack. Conversation transcripts. Anything you didn't explicitly approve. This is enforced structurally and by automated tests.

Your rights

See exactly what's stored, download all of it as JSON, or delete everything (which also signs you out) from your privacy dashboard. Access, export, and erasure are covered for every category we keep.

Permissions

Tempo requests only the scopes it actually uses; search runs on your own token, scoped to exactly what you can already see.

Data questions: open an issue. You never need to ask us to export or delete — both are buttons on your privacy dashboard.

← Back