Privacy Policy

1. Introduction

Tempo Socials ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services at temposocials.com. By using the Service, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and a password (stored as a secure hash — we never store plaintext passwords).

Instagram Account Information

To provide our growth service, we log into your Instagram account using the credentials you provide. We store the resulting session state (browser cookies) on our servers to maintain the active session. We do not store your Instagram password after login. This session data is used solely to operate the Service on your behalf.

Automation Activity Data

We log all automation actions performed on your account (follows, unfollows, targets) for operational purposes including rate-limit enforcement, health monitoring, and your dashboard analytics.

Usage and Technical Data

We collect information about how you interact with the dashboard, including pages visited and features used. We also collect standard technical data such as IP address, browser type, and session identifiers for security and fraud prevention purposes.

3. How We Use Your Information

• To provide, operate, and maintain our Instagram growth service
• To manage your account and provide customer support
• To send transactional emails (email verification, password resets, billing receipts)
• To monitor service health, enforce rate limits, and prevent abuse
• To analyze usage patterns and improve the Service
• To comply with legal obligations

We do not use your data for advertising and do not sell it to third parties.

4. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy.

• Stripe — Payment processing. When you subscribe, your payment information is collected and processed directly by Stripe. We receive only a customer ID and subscription status — we never see or store your card number. Stripe Privacy Policy
• SendGrid (Twilio) — Transactional email delivery (verification emails, password resets, billing notifications). Your email address is shared with SendGrid solely to deliver these messages. Twilio Privacy Policy
• Oxylabs — Residential proxy infrastructure. All automation traffic is routed through Oxylabs proxies to protect your Instagram account. Oxylabs does not receive your personal data beyond the network traffic required to route requests. Oxylabs Privacy Policy

5. Data Security

We implement the following security measures to protect your data:

• All data is transmitted over encrypted HTTPS connections
• Passwords are hashed using bcrypt — plaintext passwords are never stored
• Instagram session data is stored on encrypted, access-controlled servers
• All automation traffic is routed through dedicated residential proxies
• Access to production systems is restricted to authorized personnel only

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your data for as long as your account is active. Upon cancellation:

• Your account data is retained for 30 days to allow reactivation
• After 30 days, personal data (name, email, Instagram session) is deleted
• Aggregated, anonymized analytics data may be retained indefinitely

If you request immediate deletion, we will process it within 10 business days (see Section 9).

7. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share data only in the following circumstances:

• With the third-party service providers listed in Section 4, solely to operate the Service
• To comply with legal obligations, court orders, or lawful requests from public authorities
• To protect the rights, property, or safety of Tempo Socials, our users, or the public
• In connection with a merger, acquisition, or sale of assets — you will be notified in advance

8. Cookies

We use only essential cookies: a session cookie to keep you logged into your dashboard, and a CSRF cookie to protect form submissions. We do not use third-party tracking cookies, analytics cookies, or advertising cookies.

9. Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your account and associated personal data
• Portability — request your data in a structured, machine-readable format
• Withdrawal of consent — stop using the Service and request data deletion at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

10. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Our legal basis for processing your data is contractual necessity (to provide the Service you signed up for) and legitimate interest (security, fraud prevention)
• You have the right to lodge a complaint with your local data protection authority
• You have the right to object to processing and to restriction of processing
• Data transfers outside the EEA (e.g., to our Canadian-based servers) are subject to appropriate safeguards

To exercise your GDPR rights, contact us at [email protected].

11. CCPA (California Users)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you additional rights:

• Right to Know — you may request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete — you may request deletion of personal information we have collected, subject to certain exceptions
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights
• Right to Opt Out of Sale — we do not sell personal information, so no opt-out is required

To exercise your CCPA rights, contact us at [email protected].

12. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal data, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and by updating the "Last updated" date at the top of this page. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For questions, requests, or complaints about this Privacy Policy or our data practices, contact us at [email protected]. We aim to respond to all privacy inquiries within 30 days.