Privacy Policy

1. Introduction

This Privacy Policy explains how Temaat Ventures (“Rhythm,” “we,” “us,” or “our”) collects, uses, shares, and protects information in connection with our software-as-a-service platform and related websites, applications, APIs, and services (collectively, the “Service”). This Policy applies to visitors of our website, prospective customers, customer account administrators, and end users authorized by a Rhythm customer to access the Service (“Authorized Users”).

By accessing or using the Service, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

2. Our Role — Controller vs. Processor

Rhythm acts in two different roles depending on the type of information involved:

As a controller, Rhythm determines how and why we process information that we collect directly, such as account registration information, billing information, support communications, usage data, and information collected from our website visitors and prospective customers. This Policy describes our practices in that role.

As a processor (service provider), Rhythm processes Customer Data on behalf of our customers (the agencies and organizations that subscribe to the Service). In that role, our customer is the controller and is responsible for the lawfulness of its collection and use of personal information, for providing notice to its end users, and for honoring the privacy rights of those individuals. Our processing of Customer Data is governed by our Terms of Service and any applicable data processing terms with that customer, not by this Policy. If you are an Authorized User and have questions about how your employer or agency uses the Service or your data within it, please contact your employer or agency.

3. Information We Collect

3.1 Information You Provide

We collect information you provide directly to us, including:

• Account information: name, email address, phone number, job title, organization, and credentials such as username and password
• Billing information: billing contact, billing address, and payment information (payment card details are collected and processed by our third-party payment processor and are not stored on our systems)
• Support and communications: the content of messages, support requests, survey responses, and other communications you send us
• Marketing and event information: information you provide when you sign up for a webinar, demo, newsletter, or marketing event

3.2 Information Collected Automatically

When you use the Service or visit our website, we and our service providers may automatically collect:

• Device and connection data: IP address, device type, operating system, browser type and version, language preferences, and similar technical information
• Usage data: pages viewed, features used, clicks, dates and times of access, session duration, referring URLs, error logs, and similar interaction data
• Cookies and similar technologies: as described in Section 8

3.3 Customer Data

When you use the Service as an Authorized User of one of our customers, you may submit or have submitted on your behalf data relating to the operation of that customer’s business, including employee records, performance and activity data, commission and compensation data, policy and production data, and similar information (“Customer Data”). As noted in Section 2, we process Customer Data as a processor on behalf of our customer.

3.4 Information from Third Parties

We may receive information about you from third parties, such as integration partners you authorize, identity providers, business contact databases, or publicly available sources, and we may combine that information with information we already hold.

4. How We Use Information

We use the information we collect to:

• provide, operate, maintain, secure, and improve the Service
• create and manage accounts and authenticate users
• process payments and manage subscriptions
• respond to inquiries, requests, and support questions
• communicate with you about your account, the Service, security alerts, and policy changes
• send marketing communications about Rhythm’s products and events where permitted by law (you may opt out at any time)
• analyze usage patterns to understand how the Service is used and to develop new features
• detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms
• generate de-identified and aggregated data for our business purposes, as permitted by our Terms of Service
• comply with legal obligations and enforce our agreements

5. AI and Automated Processing

The Service includes features that use artificial intelligence and machine learning (“AI Features”). When you use AI Features, your inputs and the resulting outputs may be processed by Rhythm and, in some cases, by third-party AI providers acting as our service providers.

We do not use Customer Data to train any foundation model or general-purpose AI model operated by Rhythm or any third-party AI provider. We may use Customer Data to operate, fine-tune, or improve AI Features provided to our customers, and to generate Aggregated Data, in each case consistent with our Terms of Service.

AI outputs may be inaccurate or incomplete. We do not make automated decisions that produce legal or similarly significant effects about you without human involvement.

6. How We Share Information

We do not sell your personal information. We share information only as described below:

• Service providers and sub-processors: with vendors that provide services on our behalf, including cloud hosting, data storage, payment processing, communications, analytics, customer support, security, and AI infrastructure. These providers are bound by written agreements that restrict their use of information to the purposes of providing services to us.
• Within your organization: if you are an Authorized User, the customer that authorized your access (typically your employer or agency) and its designated administrators may have access to your account information and activity within the Service.
• Integrations you authorize: if you connect the Service to a third-party product or service, we may share information with that third party as necessary to provide the integration.
• Legal and safety: when required by law, subpoena, court order, regulator request, or other legal process; to enforce our agreements; or to protect the rights, property, or safety of Rhythm, our customers, or others.
• Business transfers: in connection with a merger, acquisition, financing, reorganization, or sale of all or a portion of our assets, subject to appropriate confidentiality protections.
• With your consent: for any other purpose disclosed to you at the time of collection or with your consent.

7. Customer Data

We process Customer Data only as instructed by our customer (the controller) and as necessary to provide, secure, and improve the Service, comply with law, and perform our obligations under our customer agreements. We use appropriate safeguards to protect Customer Data and do not access it except as needed to deliver the Service, provide support, address security or operational issues, or as authorized by our customer or required by law.

8. Cookies and Tracking Technologies

We use cookies, pixels, web beacons, and similar technologies to operate the Service, remember preferences, authenticate sessions, secure the Service, and analyze usage. We use the following general categories:

• Strictly necessary cookies: that are required for the Service to function, including authentication and security
• Performance and analytics cookies: that help us understand how the Service is used so we can improve it
• Functional cookies: that remember your preferences and personalize your experience

We may use third-party analytics providers (for example, web analytics tools) to help us understand usage. These providers may set their own cookies and process information about your use of the Service.

You can control cookies through your browser settings. Disabling some cookies may affect Service functionality.

Some web browsers offer a “Do Not Track” (DNT) signal. Because no uniform industry standard for responding to DNT signals has been adopted, we do not currently respond to DNT signals. If a standard is established in the future, we will revise this Policy accordingly.

9. Data Security

We maintain administrative, technical, and physical safeguards designed to protect the information we collect, including encryption in transit, access controls, monitoring, and regular security review. No security measures are perfect, however, and we cannot guarantee that the Service or any data within it will never be subject to unauthorized access, loss, or compromise. You are responsible for keeping your credentials confidential and for promptly notifying us of any suspected unauthorized access to your account.

10. Data Retention

We retain account, billing, and usage information for as long as necessary to provide the Service, comply with legal and accounting obligations, resolve disputes, and enforce our agreements. We retain Customer Data in accordance with our agreement with the applicable customer; after termination of a customer’s subscription, we provide an export window and then delete Customer Data from active systems, subject to retention in backups consistent with our standard backup-retention practices.

When information is no longer needed, we delete or de-identify it in a secure manner.

11. International Data Transfers

The Service is hosted and operated in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States and other jurisdictions in which we or our service providers operate. These jurisdictions may have data protection laws different from those of your country.

12. Your Choices and Rights

Marketing communications. You may opt out of marketing emails by following the unsubscribe link in any marketing message or by contacting us. Transactional and account-related messages will continue.

Account information. You may review or update your account information through the Service or by contacting your account administrator.

Cookies. You can control cookies through your browser settings.

Authorized Users. If you are an Authorized User and you want to access, correct, delete, or otherwise control information processed by Rhythm on behalf of the customer that authorized your access, please direct your request to that customer. We will assist our customer in responding to verified requests as required by applicable law.

Depending on where you reside, you may have additional rights under applicable privacy laws, including the right to:

• request access to, and a copy of, the personal information we hold about you
• request correction of inaccurate personal information
• request deletion of personal information, subject to legal exceptions
• opt out of certain processing, including targeted advertising or “sales” of personal information (we do not sell personal information)
• restrict or object to certain processing
• not be discriminated against for exercising these rights

These rights apply to information we process as a controller. To exercise any of these rights, contact us using the information in Section 15. We will verify your identity before fulfilling a request. We will respond to verified requests within the time required by applicable law. You may also designate an authorized agent to make a request on your behalf, subject to verification.

13. Children’s Privacy

The Service is not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn that we have inadvertently collected personal information from a child under 18, we will delete it.

14. Changes to This Policy

We may update this Policy from time to time. When we make changes, we will revise the “Last Updated” date above and, where appropriate, provide additional notice through the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

15. Contact Us

Questions, requests, or complaints regarding this Policy or our privacy practices should be directed to:

Temaat Ventures
Using the contact information provided on the Service.