Privacy Policy

Effective: June 17, 2026 · Last updated: June 17, 2026

TempoHR is operated by Brightstack, a division of Michell + Marteen LLC, Houston, Texas.

[PLACEHOLDER — TempoHR-specific content to be added. Contact legal@brightstack.us] — service description and product-specific data handling.

1.Information We Collect

[PLACEHOLDER — TempoHR-specific content to be added. Contact legal@brightstack.us]

2.How We Use Your Information

[PLACEHOLDER — TempoHR-specific content to be added. Contact legal@brightstack.us]

3.How We Share Your Information

Service providers: infrastructure, communications, and payment providers, each bound by data processing agreements.

Legal requirements: when required by law or to protect user safety.

Business transfers: with notice to affected users.

4.Data Retention

[PLACEHOLDER — TempoHR-specific content to be added. Contact legal@brightstack.us] Account-level data is retained for the life of your account plus 90 days after deletion. You may request deletion at any time.

5.Security

  • Encryption in transit (TLS 1.2+) and at rest (AES-256).
  • Row-level security (RLS) ensuring tenant data isolation.
  • Regular security reviews and vulnerability scanning.
  • SOC-2-aligned infrastructure controls.

Report vulnerabilities to security@brightstack.us.

6.Your Rights

All users: access, correction, deletion, portability, and opt-out of marketing communications.

EU/EEA users (GDPR): legal basis is contract performance, legitimate interests, and consent. Right to object, withdraw consent, and lodge a complaint with your data protection authority.

California residents (CCPA/CPRA): right to know, delete, correct, and opt out of sale or sharing of personal information. We do not sell or share personal information for cross-context behavioral advertising. No discrimination for exercising privacy rights.

To exercise any right: privacy@brightstack.us. Response within 30 days (GDPR) or 45 days (CCPA).

7.Children's Privacy

Not directed to individuals under 16. Contact privacy@brightstack.us if you believe we have collected data from a child.

8.International Data Transfers

Servers located in the United States. EU/EEA and UK transfers rely on Standard Contractual Clauses (SCCs).

9.Changes to This Policy

Material changes notified by email or in-app notice at least 14 days before taking effect.

10.Contact

Brightstack / Michell + Marteen LLC, Houston, Texas
privacy@brightstack.us · brightstack.us