What we collect, what we don’t, and what you can do about it.
Last updated: April 27, 2026
The short version
Tempough is a business tool for tracking time, planning work, and invoicing clients. To do that we have to store the data you enter — your team’s names, the hours they log, the clients you bill, and the invoices you send. We don’t sell any of it, show you ads, share it with anyone you haven’t chosen, or use it to train AI models. You can export or delete your data anytime.
What we collect
Account info
When you sign up we collect your name, email, company name, and a hashed password. If you invite teammates, we collect the same for each of them. We record the IP address your account was created from to help detect abuse.
Work data you enter
Clients, projects, tasks, time entries, expenses, receipts, invoices, payments, time-off requests, and anything else you type into the app. This is the data Tempough stores on your behalf so the product works.
Your clients' contact info
If you invite people from one of your clients to view their invoices in the client portal, we store their name and email address so we can send them a sign-in link. We don't email them for any other reason. You can remove a contact at any time from the Clients page.
Payment info
If you subscribe to a paid plan, Stripe processes your payment card. We never see or store your full card number — Stripe returns a token we use to identify your subscription. If your clients pay you through Tempough, the same applies to their cards.
Usage + diagnostics
We keep server logs (IP, timestamp, request path, response code) for up to 30 days so we can debug issues and investigate abuse. We don’t use third-party analytics, tracking pixels, or ad cookies on the signed-in app.
How we use it
- Running the product. Displaying your data back to you, computing forecasts, generating invoices.
- Billing you. Charging your card on the plan you signed up for.
- Transactional email. Login codes, invoice notifications, approval requests — nothing you didn’t opt into by using the feature.
- Support. If you email us, we read the message and any attached screenshots to help you.
- Fraud + abuse prevention. Detecting stolen accounts, spam signups, or payment fraud.
What we don’t do
- Sell your data to anyone. Ever.
- Share your data with advertisers or ad networks.
- Use your data to train AI models. If you use an AI feature inside Tempough, we tell you first.
- Read your work data for product-improvement beyond aggregated, anonymized counts (e.g. "how many invoices were sent last month across all customers").
- Track you across other websites.
Who we share it with (our subprocessors)
Tempough runs on a small set of infrastructure vendors. Each only sees the specific data it needs, and each is contractually bound to handle it securely.
| Vendor | What they do for us |
|---|---|
| Amazon Web Services | Application hosting + encrypted data storage |
| Stripe | Payment processing (customer payments + our own billing) |
| Resend | Transactional email delivery (verification codes, invoices, approvals) |
| Twilio | SMS delivery (reminders + verification), when you enable it |
| QuickBooks Online | Invoice + customer sync, when you authorize it |
| Slack | Posting workspace notifications to your Slack channel, when you provide a webhook URL |
| Microsoft Teams | Posting workspace notifications to your Teams channel, when you provide a webhook URL |
| Sentry | Error reporting — request paths and stack traces (no work data) |
Where your data lives
Your workspace runs in AWS’s US-East region. Data in the database is encrypted at rest; all connections to the app and the API use TLS. Daily automated backups are retained for 30 days and then deleted.
How long we keep it
We keep your data for as long as your account is active. When you delete your account, we remove your workspace within 30 days, except for records we’re legally required to retain (e.g. invoice and tax history, typically 7 years).
Your rights
Whatever jurisdiction you’re in, you can do the following at any time:
- Export everything. Profile → Export my data. You get a JSON download covering your account, time entries, expenses, and approvals.
- Correct your info. Edit your profile directly or email us.
- Delete your account. Email privacy@tempough.com from the address on file.
- Opt out of non-essential email. The app only sends transactional email tied to features you use.
Cookies
Tempough uses two cookies, both for sign-in only: a session token for staff using the main app, and a separate session token for client-portal visitors. Both are HttpOnly, scoped to your workspace URL, and cleared when you sign out. We don't use tracking or advertising cookies.
Children
Tempough is a workplace tool not intended for anyone under 16, and we don’t knowingly collect information from them.
Changes to this policy
If we change how we handle your data in a material way, we’ll email account admins and update the “last updated” date at the top of this page.
Questions?
Email privacy@tempough.com — we read every message and usually reply within a business day.