Tempra Privacy Policy

Effective date: October 7, 2026

Last updated: October 7, 2026

Related customer documents: AI Disclosure, Account Deletion Guide, and Subprocessors and Service Providers.

In short. Tempra uses your profile, resume, any academic transcript you supply, and application activity to help you apply on Workday, Ashby, and Greenhouse. We send that information to AI and browser providers, and to the employer site you choose. We ask Anchor to video-record the hosted browser. There is no unrecorded option for that workflow. The AI agent can save or submit before you review. Optional product emails need a separate opt-in and use your Tempra account email only. Deleting Tempra does not pull back an employer’s copy.

1. Who we are and what this policy covers

Tempra is operated by Jason Chan, doing business as Tempra ("Tempra," "we," "us," or "our"). You can contact us about privacy at jason@usetempra.com.

This policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, create an account, purchase a plan, provide career information, a resume, or an academic transcript, use our AI-assisted job application service, or communicate with us. Personal information includes information that identifies you or can reasonably be linked to you, including certain information generated about you.

Tempra helps applicants prepare and complete applications on supported employer websites. Supported application flows include Workday, Ashby, and Greenhouse, subject to the supported links and features shown in the Service. For the personal information we process to operate Tempra, Jason Chan doing business as Tempra is responsible as the data controller or business, where those terms apply. Employers and their recruiting platforms determine their own uses of application information. Their privacy notices apply to that processing; their use of your information is not controlled by this policy.

Tempra is available worldwide. Rights described below apply when the relevant law applies to you and our processing. If a privacy law where you live gives you additional rights, email jason@usetempra.com and tell us which right you want to use. Describing those rights does not mean every feature is lawful or identical in every country.

This policy provides privacy information. It does not replace our Terms of Service or obtain consent merely because you read it, use the website, or create an account. Separate permissions or consents are required where applicable law requires them.

2. Important information before you use automation

• Your whole career and personal profile can be sent to AI providers. We do not limit every AI request to the one field being answered. A request may contain your whole saved application profile, including any sensitive fields you completed, as well as application questions, page text, screenshots, available choices, and information already entered on the page. One application can involve several AI providers. Current answering uses DeepSeek as the primary model (a China-based provider) and Google Gemini as a fallback. Plan name does not freeze every recipient.
• AI and automation create application responses and can be wrong. Except for information you enter or change yourself, AI models and automated rules copy, generate, infer, or select application answers. They can infer preferences, fabricate or embellish details, misunderstand a question, choose an unsuitable option, or produce an answer that is false, incomplete, biased, outdated, or inconsistent with your intentions. Review every answer and certification whenever you have a reasonable opportunity to do so.
• Automation acts for you on third-party websites and can submit before review. When you start an application, you direct Tempra's AI agent to fill, advance, and complete it on your behalf. The Service may attempt to return control at a recognized submission stage, but employer sites vary and there may be no review opportunity. Software or AI can misidentify a control, trigger unexpected site behavior, duplicate an action, or fail to recognize that information was saved or submitted.
• Jobs-tab Autopilot submits without review. When you acknowledge the separate automated-submission notice and confirm a Jobs-tab queue, you authorize Tempra to start and submit those Ashby or Greenhouse applications as execution slots become available. A new Autopilot batch also authorizes up to three different matching replacements per requested application slot from its recorded candidate pool. There is no review step. New queues use the last valid saved profile copied at confirmation; later profile edits do not rewrite that copy or its authorized replacements. A submitted application cannot be recalled through Tempra.
• Information leaves Tempra to perform the service. We send information to service providers, including AI and remote-browser providers, and enter or upload information on employer websites you select.
• Tempra does not sell customer data to AI labs. Tempra does not sell or license customer profiles, resumes, applications, recordings, or diagnostics to an AI lab for compensation or model training. Tempra does send personal information to AI providers to operate the Service. Depending on a provider's terms, service tier, and settings, that provider may ingest, retain, review, use, or train on submitted information. Section 6 explains this distinction.
• Disclosure can occur before final submission. An employer website may receive or save text, selections, and uploads as fields are filled or application pages are saved. Stopping before the final Submit button does not mean the employer received nothing.
• Hosted browser sessions are configured for continuous visual recording. Tempra requests that Anchor Browser create an MP4 visual recording of each managed hosted-browser session for debugging, support, safety, and service improvement. When the provider honors that configuration, recording starts when the application browser opens and can cover sign-in, setup, automation, and review. It can capture login activity, profile and resume information, sensitive application answers, employer content, and anything else displayed in the hosted browser. Section 3 explains the recording and other diagnostic records.
• The managed workflow does not currently offer an unrecorded-session option. You must separately consent to and acknowledge the recording notice before Tempra requests a hosted application session. If you do not want Tempra to request this recording, do not open the managed application workflow. Recording consent is not consent to unrelated processing.
• Results are not guaranteed. Tempra does not guarantee that an application will be accurate, complete, accepted, successfully submitted, reviewed by an employer, or lead to an interview, offer, visa, or employment.
• Deleting your account cannot recall an employer's copy. Deletion of Tempra data and deletion of data held by employers or other independently responsible organizations are different processes.

The Privacy Policy explains information practices. The Terms of Service allocate contractual responsibility and contain warranty and liability limitations. Neither document removes privacy, consumer, or other rights that cannot legally be waived.

3. Information we collect

The information involved depends on what you provide, the pages you visit, and the features you use. Information visible in documents, application pages, or generated answers can fall into several categories below.

Account and contact information

We process account identifiers, sign-in and account-management information supplied through our authentication provider, account status, and relevant timestamps. Your application profile can contain your name, preferred name, email address, telephone number, and postal address. Your account sign-in address and the email address you use for job applications may differ. If you opt in to optional product updates and offers, those messages use the sign-in email on your Tempra account, not a different email from your job-application profile, resume, or an employer page.

Career, education, and preferences

We process work history, employer names, job titles, employment locations and dates, descriptions of responsibilities and achievements, education, qualifications, academic dates and GPA, skills, languages and proficiency, and professional or portfolio links. We also process preferences such as desired compensation, currency, availability, relocation, travel, and work location.

Eligibility and sensitive information

Your profile and applications may include work authorization, citizenship or immigration-related answers, sponsorship needs, an indication of whether you are over 18, government employment, military service, non-compete information, and related explanations.

Optional disclosure fields include gender, race or ethnicity, veteran status, and disability status. The saved profile can also store criminal-conviction, religion, marital-status, and date-of-birth answers if you fill them in. Those stored values can still go to an AI provider with an unrelated question. Documents, free-text answers, and employer pages may also reveal health information, sexual orientation, union membership, or other information treated as sensitive under applicable law. We do not require you to put all of this in your profile. See Section 6 for additional information and choices. Application automation currently requires a disability answer of Yes, No, or Prefer not to say before you can apply.

Resumes, academic transcripts, and other information you submit

We process uploaded resume and academic-transcript contents and file metadata, including filename, format, size, integrity information, and upload or deletion status. A resume may include photographs, signatures, references, or information about other people. An academic transcript can include your institution, courses, grades, academic standing, dates, student identifiers, and other information printed in the document. If you upload a transcript and make it available in your profile, Tempra can use it for applicable employer upload questions. Support, complaint, and application-incident records can include the information and attachments you choose to send, our communications with you, application and case identifiers, assessments and response decisions, containment and remediation actions, and restricted logs showing which responders accessed or exported evidence. A security report sent to jason@usetempra.com can contain a reporter's name or alias, contact information, technical findings, reproduction steps, evidence, and related correspondence.

Provide information about another person only when you have authority to do so and have given any required notice. Do not include unrelated confidential employer information, Social Security numbers, government-ID scans, full payment-card details, passwords, medical records, or other unnecessary sensitive information in your profile, resume, or support messages. If an employer needs additional information, assess its request and privacy notice before supplying it through the employer's page.

Applications and remote-browser activity

We process the job URL you select, application and employer-page content, the selected resume and any academic transcript made available for the application, the profile copy used for the application, form questions and options, entered answers and selections, uploaded files, page titles, application status, submission evidence, cancellation requests, and associated timestamps.

The hosted browser processes the pages you open within the application session, cookies and session state created by those pages, screen content, and your mouse, keyboard, and explicitly pasted clipboard input. This includes employer login information when you type it into the hosted browser. Tempra's connection carries that input to the browser provider and employer website. We do not maintain a separate employer-password field in your Tempra profile, but that does not mean credentials or authenticated page content never pass through our systems or providers. Visible content can also appear in screenshots or page extraction.

This browser access concerns the hosted application session. It does not itself give Tempra access to unrelated tabs in your personal browser, your entire device, your email inbox, or your clipboard in the background.

AI outputs and diagnostics

We process prompts, model responses, generated answers and explanations, inferred preferences, extracted page text and structure, screenshots and annotated screenshots, application events, error categories, retries, and technical execution records. These records can include your profile information or information already entered on an employer page. Generated information is not necessarily accurate.

We create a diagnostic record for every managed application automation run so we can operate the service, reconstruct failures, respond to support requests, detect abuse, assess automation quality, and improve the platform. The contents depend on the stage the run reaches. Current Tempra records can include application and page identifiers; page titles and status; timestamps; extraction and retry strategy; detected questions, answer choices, fields, and controls; errors and submission-related status; structured pipeline data; and still screenshots annotated with detected controls. Screenshots may display names, contact details, career information, sensitive answers, resume content, employer content, session information visible on the page, or other information entered before the capture. AI prompts and outputs are also processed as described in Section 6, but Tempra's structured run telemetry does not necessarily retain every prompt, answer, or underlying click or keystroke event, and an early failure may occur before an annotated screenshot is created.

For Jobs-tab Autopilot, Tempra captures a full-page screenshot before filling the application and another after a final-submission click. We send the first image to Google Gemini to check that an application form is available, and both images together to assess the submission result. Images may contain application content and information already entered, including sensitive answers. Tempra stores the screenshots and AI verdicts as private application-level run artifacts when artifact storage succeeds; access and retention follow the diagnostic-record rules in this policy. A failed check or provider error stops the run.

In addition to those structured records and selected screenshots, Tempra configures Anchor Browser's continuous session-recording feature as active. Anchor describes this feature as creating an MP4 recording of the complete visual browser experience. When the provider honors the requested configuration, the recording begins with the hosted session, before you sign in or press Start automation, and continues through setup, automated actions, and review until the session ends. It can visually capture email addresses, usernames, login activity, masked or revealed credentials, mouse movement, text as it appears on screen, resume content, sensitive answers, employer messages, and any other content displayed in the hosted browser.

This is a visual browser-session recording. Tempra does not configure microphone audio, webcam capture, or a separate keystroke-event replay through this feature. Information you type or paste can nevertheless appear in the video when the browser displays it. When Anchor honors the requested setting, the recording is stored by Anchor Browser and can be viewed or downloaded through authorized provider tools by authorized Tempra personnel for debugging, support, safety investigation, quality assessment, and service improvement. Tempra presents a prominent pre-session recording notice, requires the current notice version in the application request, and records the separate consent and acknowledgment version in an audit event before requesting the browser. It separately records the application-authority notice, and checks that event before Start. The managed workflow does not currently offer an unrecorded-session option; declining the recording control prevents that workflow from opening.

Authorized Tempra personnel and providers may access diagnostics when reasonably needed for the stated purposes. We do not use these records for advertising or data brokerage.

Subscription, payment, and usage information

We process your selected plan, subscription identifiers and status, billing periods, credit balances and transactions, payment-related status, and service usage or spending counters. Checkout and payment providers process the payment details needed to charge you. Our application database does not store full card numbers or card security codes; limited transaction and customer information may also be accessible through provider account tools.

Website and technical information

Our website, hosting, authentication, and other connected providers receive technical information needed to deliver their services, such as IP addresses, browser or device information, request times, requested resources, and error or security information. Depending on the request and browser settings, external resource providers may receive a referring page or site address. Cookies and related technologies are described in Section 8.

4. Where information comes from

We obtain information directly from you; from your interaction with Tempra and the hosted browser; from authentication and billing providers; from employer websites and recruiting systems you ask us to use; and from AI-generated responses and our service records. If you use a connected sign-in provider, the account information made available depends on that provider and your choices.

Content appearing on an employer page can include information previously saved with that employer. Information about a reference or another person can come from a resume or other material supplied by a user. We do not treat the fact that information is publicly visible as unlimited permission to use it.

5. How and why we use information

We use the information described above to:

1. Create and maintain accounts, authenticate users, and provide account and security controls.
2. Store and update your profile, resume, and academic transcript, preserve the inputs used for an application, and provide application history.
3. Open the employer page you select, maintain its browser session, identify application questions, generate or choose responses, fill fields, upload your selected documents where applicable, and support your review and completion of the application or submit Jobs-tab Autopilot applications without review as separately authorized.
4. Provide paid features, administer subscriptions and credits, enforce usage limits, reconcile transactions, and investigate payment or service disputes.
5. Continuously visually record managed hosted-browser sessions and create other diagnostic records; diagnose failed, inaccurate, or unintended automation; investigate support requests; assess quality; and improve the reliability of extraction, answer generation, page interaction, and submission safeguards. This can involve reviewing browser recordings and application diagnostics containing personal or sensitive information; it is not limited to anonymous statistics.
6. Protect accounts and systems, prevent abuse, enforce our agreements, and investigate unauthorized activity.
7. Respond to privacy requests, maintain necessary compliance records, comply with legal obligations, and establish or defend legal claims.
8. Send account, security, billing, service, and support communications to the email address associated with your Tempra account. These service messages are part of operating the Service. They are not promotional, and they may continue after you withdraw a marketing opt-in.
9. If you separately opt in, send optional product updates and offers to that same account email. This is promotional email. It is not required to create an account, accept the Terms, or use application automation. Agreeing to the Terms or acknowledging this policy is not a marketing opt-in. These messages are not sent to a different job-application, resume, or employer-page email. You can turn promotional email off in Account settings or by contacting us. We will not send promotional email unless you have opted in. We do not currently send promotional email, and there is not yet an in-message unsubscribe link.

These purposes are subject to applicable legal limits. Describing a purpose does not give us permission to collect unnecessary information or use it for an incompatible purpose without the required notice, legal basis, or consent.

Purpose 8 (the list item above) is service email. Purpose 9 is optional marketing. Neither is about cookies. Cookies, advertising, and tracking are in the later section titled “Cookies, external resources, advertising, and tracking choices.”

6. AI processing, sensitive information, and your choices

What AI providers receive

We use third-party AI models to interpret application pages and help generate and enter answers. Requests can include your whole saved application profile, not just the field relevant to one question, together with questions, available options, context, and preceding questions on the same page. Image or page-processing requests can include screenshots, extracted text, or page structure containing information already filled in by you or the software.

The current upload path sends selected resume and academic-transcript PDFs through the hosted browser to the employer where applicable; it does not intentionally attach those PDFs to an AI request merely to upload them. Information from a document that appears in your profile or on the employer page, including filenames or autofilled content, can still be included in AI requests or screenshots.

A single application can use more than one AI provider, including a fallback provider when another service is unavailable or rate-limited. Subscription tier does not identify every provider that may process an application. Current integrations are described in Section 7.

Generated information and review

Except for information you enter or change yourself, AI models and automated rules copy, generate, infer, or select the substantive application responses that Tempra enters. They use your profile, employer questions, page context, and model instructions. AI can copy information, infer preferences, estimate answers, create narrative details, or select among available choices. It may misunderstand context or produce factual errors, invented or embellished experience, unsupported claims, inconsistent dates, incorrect eligibility answers, unsuitable demographic responses, unwanted marketing consent, or other selections that do not reflect your intentions. AI output is probabilistic. Tempra personnel do not review and approve each response before it is entered, and a response is not independently verified merely because Tempra enters it into a form.

Whenever you are given a reasonable opportunity to review, you must review the entire application and correct any error before you approve or submit it, including identity and contact information, dates, education, experience, qualifications, salary, work authorization, sponsorship, protected-status disclosures, legal certifications, attestations, and choices about recruiter contact or future opportunities. Do not approve or submit a statement you cannot truthfully make. Tempra does not determine whether an answer is legally sufficient for you and does not provide legal, immigration, tax, medical, or employment advice.

Automated actions, review opportunities, and submission

Tempra automatically types, selects, uploads, scrolls, advances, and clicks controls for the application you instruct it to handle. Jobs-tab Autopilot intentionally submits without returning the form for your review. For applications opened through Applications, the interface may attempt to return control when it recognizes a final-submission stage, but this is a best-effort review opportunity rather than an absolute barrier. An employer may label or implement its controls unexpectedly, save information as it is entered, submit on an intermediate action, treat an “Apply,” “Continue,” Enter-key, or similar action as final, or change its page while automation is running. AI, browser automation, software defects, timing, network failures, or third-party behavior may cause an incorrect, duplicate, incomplete, premature, or unintended action.

As a result, information may be transmitted, an application may be partially saved, or an application may be submitted before you review it. When you start automation or confirm the separately acknowledged Jobs-tab queue, you direct the AI agent to act for you on the selected application or applications and acknowledge that a resulting submission is your application. A status shown by Tempra may fail to reflect what the employer received. Once an employer receives information or an application, Tempra may be unable to edit, withdraw, or delete it. Check the employer's application portal before retrying an uncertain action, and contact the employer directly to correct or withdraw an application.

Jobs-tab Autopilot records a completed run as Submitted when its screenshot check passes, or Failed when it cannot complete and confirm submission. A new Autopilot batch reserves one credit per requested application slot at confirmation. Submitted consumes that slot's credit; a failed or permanently unstartable attempt can receive a different authorized matching replacement while the same credit stays reserved. The credit returns only when the slot ends without a Submitted result under the attempt, candidate-pool, and credit-period rules in the Terms. New committed Autopilot batches have no ordinary queue-clearing or application-cancellation option, subject to applicable privacy rights, account deletion, required consent withdrawal, and security or legal stops. Earlier queues and individually selected jobs retain their separately disclosed rules. A crash or loss of the worker after clicking Submit but before checking the result can still be recorded as Failed even if the employer received the application. Manually retrying the original job can create a duplicate employer application.

For Autopilot, “Submitted” reflects an automated comparison of the starting and ending screenshots: an apparent submission acknowledgment or replacement of the original form can pass. The same form with validation errors or a CAPTCHA does not pass. This assessment is not independent verification of employer receipt, completeness, or accuracy. A Failed status and returned credit do not prove the employer received nothing; checking its portal or messages before retrying can help avoid a duplicate.

Tempra does not guarantee accuracy, completeness, successful preparation or submission, employer review, compliance with every employer rule, an interview, an offer, a visa, or employment. Employers control their recruiting decisions. The contractual allocation of risk, disclaimer of warranties, and limits on liability are in the Terms of Service, subject to rights and responsibilities that applicable law does not allow either party to waive.

Sensitive and optional answers

You can leave optional sensitive profile fields blank or select a non-disclosure answer where available. However, the current automation can make default selections, including when profile information is absent. A blank profile field does not guarantee that the corresponding employer question remains blank. Review demographic, disability, veteran, work-authorization, certification, and consent answers carefully, along with future-opportunity or recruiter-contact choices.

Where processing depends on consent, you can withdraw it by emailing jason@usetempra.com, turning off a control in Account settings when one exists, or deleting the information from your profile. Withdrawal affects future processing and does not invalidate earlier lawful processing. It does not automatically undo information already sent to an employer. If you need processing stopped for an existing application, contact us and use cancellation controls where available; a committed Autopilot batch does not restrict a required consent withdrawal or other applicable privacy right. Simply editing your profile does not rewrite existing snapshots. We may be unable to provide the affected feature without information necessary to perform it.

AI-provider ingestion, training, retention, and human access

Tempra does not sell or license customer profiles, resumes, application content, browser recordings, or diagnostic records to AI labs for compensation or for the purpose of training their models. Tempra may use customer records for authorized human review, testing, evaluation, debugging, security, and improvement of Tempra's reliability and safety.

Using Tempra necessarily sends application information to AI providers, which ingest and process the inputs to return outputs. Current providers are DeepSeek, Google Gemini, Alibaba Cloud Qwen, and OpenAI, on the routes then in use. Depending on the provider, service tier, endpoint, account setting, and applicable terms, a provider may retain inputs and outputs, allow human review, use them to operate or improve its services or models, or use them to train AI systems. Tempra cannot promise that every enabled or fallback provider excludes those uses. Tempra personnel may access application information to operate, support, test, improve, or investigate the Service. This is not an end-to-end encrypted service in which only you can read the information.

Our data-use commitments

We use personal information for the purposes described in this policy, including providing the application service, creating and reviewing diagnostics, improving Tempra's reliability and safety, supporting users, administering accounts and payments, securing the service, and meeting legal obligations. Tempra does not use personal information to decide whether you should be hired. Tempra itself does not sell or license customer data to AI labs for compensation or model training. AI-provider uses are described immediately above and are part of the disclosed provider processing needed to offer the AI service.

We do not sell or license customer profiles, resumes, applications, recordings, or diagnostics to AI labs, data brokers, or advertisers for compensation, model training, or targeted advertising. We disclose information to AI and browser providers to perform the Service and to employers at your direction, as described in Sections 6 and 7. Some privacy laws define “sale,” “sharing,” or a provider's independent use more broadly than an exchange of money; this policy does not relabel a legally regulated disclosure. If you believe a disclosure requires an opt-out under a law that applies to you, email jason@usetempra.com.

7. Who receives information

Providers supporting Tempra

A separately maintained Subprocessors and Service Providers page lists the providers that support the implemented service. If that page and this section ever conflict, email jason@usetempra.com.

The following providers support the implemented service. The information they receive depends on the feature and the provider's role:

• Clerk: account authentication, account management, and subscription administration; account identifiers, authentication/session information, and billing-related information. Stripe, through Clerk Billing, processes payments and associated payment/customer information.
• Neon: hosted database and object storage for account and profile information, application snapshots and history, resumes and academic transcripts, diagnostic artifacts, and associated records.
• DigitalOcean: hosting for the application API and automation processes, including information processed by those systems and their temporary working files.
• Upstash: Redis infrastructure used to dispatch automation work. Queue messages contain job identifiers and operational metadata; they are not intended to contain your whole profile or resume.
• Anchor Browser: remote employer-browser sessions, visited application pages, screen content, input, uploaded resume and academic-transcript content, session information, and continuous MP4 visual recordings of managed sessions. Tempra requests that session recording be active and uses authorized Anchor tools to view or download recordings for the purposes described above. Tempra separately retains some application screenshots and other diagnostics.
• DeepSeek: profile-based application questions and responses. DeepSeek is a China-based provider.
• Google, including Gemini: question answering, narrative generation, image and application-page interpretation, and related automation assistance.
• Alibaba Cloud, including Qwen: image-based form extraction and locating application controls on selected processing paths.
• OpenAI: application-page text or structure used to identify page content and controls.
• Website asset providers: Google Fonts and third-party image hosts used by the marketing website, including Framer, Massive, and Google-hosted image or favicon services. Jobs-board company icons are also loaded from third-party hosts, including employer sites, Ashby, Greenhouse, and Google favicon services. Those hosts receive the network and request information needed to serve an icon; the board requests icons without a referring-page header. Requests for those assets disclose network/request information to their hosts.

Provider access, permissible uses, retention, and transfers are governed by the applicable arrangement and law. Some providers also act independently for activities such as account administration, payment compliance, or fraud prevention. Their notices explain those activities; linking to a provider does not replace our responsibility for information we disclose to it.

We use providers to perform the functions described above. Tempra does not sell or license customer information to those providers for compensation, data brokerage, advertising, or model training. The provider receives the information because Tempra asks it to perform AI, browser, hosting, security, or another disclosed service. An AI provider may have its own rights to retain, review, improve, or train on content under the provider terms that govern Tempra's account.

Employers and recruiting platforms

The employer, its applicant-tracking system, and other services on its application website receive information you or Tempra enter, upload, or save there. They may receive your resume, academic transcript where uploaded, contact and career information, sensitive answers, consent selections, and technical information from the browser session. Review their privacy notices and optional enrollment settings. Contact them directly about their retention, recruiting communications, access, correction, or deletion practices; we can assist with information about the application we processed.

Other permitted disclosures

We may disclose relevant information to professional advisers, auditors, authorities, courts, or other parties when necessary and legally permitted for professional advice, legal obligations, security investigations, protection of rights and safety, or legal claims. We evaluate requests under applicable law; this is not unrestricted permission to disclose information whenever asked.

In a proposed or completed merger, acquisition, financing, reorganization, or sale of assets, relevant information may be disclosed subject to appropriate confidentiality and legal restrictions. A change in ownership does not itself authorize materially different uses of your information without required notice and other protections.

We may also disclose information at your specific direction or with valid consent. The permission to process a job application does not automatically authorize every unrelated disclosure.

8. Cookies, external resources, advertising, and tracking choices

Authentication, checkout, and connected services may use cookies, browser storage, or similar technologies for sign-in, session continuity, fraud prevention, and delivery of their features. Employer websites can set their own cookies inside the hosted application browser. Changing cookies in your personal browser does not necessarily change cookies in that remote session.

External fonts and images also cause third-party requests even when no advertising pixel is installed. Those providers may associate requests with other information they hold, depending on their own practices. We do not control tracking performed by employers and other independent websites you access through the service.

Our current marketing site and product interface do not include a first-party advertising, audience-retargeting, or analytics visitor-session-replay integration. This statement does not refer to the separately disclosed recording of the remote hosted browser used for employer applications.

You can manage cookies using your browser and the choices offered by the relevant provider. Disabling necessary cookies can prevent sign-in or other requested features. The current application does not change its behavior in response to the older "Do Not Track" browser signal or to Global Privacy Control. To stop optional promotional email after you have opted in, use Account settings or email jason@usetempra.com.

Sale, sharing, and targeted advertising: Tempra does not sell or license customer profiles, resumes, applications, recordings, or diagnostics to AI labs, data brokers, or advertisers for compensation, model training, or targeted advertising. Tempra does not use application information to build advertising profiles. We disclose information to providers that perform the Service and to employers at your direction, as described in Section 7. Because some laws define a “sale” or “sharing” more broadly than a cash transaction, email jason@usetempra.com if you want to opt out of a disclosure you believe those laws cover.

9. How long we keep information and what deletion means

We consider the information's purpose and sensitivity, whether your account or an application is active, what is needed to provide account history and support, legal obligations, disputes, and applicable deletion rights. We do not apply one retention period to every system or type of record.

• Current profile, resume, and academic transcript: ordinarily retained while needed for your account and chosen applications, until you replace or delete them or request account erasure. A resume or transcript used by unfinished work may be unavailable for replacement or deletion until that work stops.
• Application history and profile snapshots: stored with your account to preserve the inputs and outcome of each application. Updating your profile does not update earlier copies. Current application history and snapshots do not expire automatically merely because they reach a particular age.
• Screenshots, extracted content, and application telemetry stored by Tempra: diagnostic records depend on the stage reached and include Autopilot start and end screenshots and their AI verdicts when private artifact storage succeeds. These materials are used for operation, quality assessment, investigation, support, security, and platform improvement and can contain personal or sensitive information. Registered active-service diagnostics are kept until account erasure unless we delete them sooner, subject to the limited legal and security exceptions below. There is no separate automatic day-count expiration today.
• Provider-hosted browser recordings: Anchor stores the requested MP4 when it honors the recording configuration. Its retention depends on the applicable service arrangement and provider practices. Tempra’s active-account erasure process does not by itself establish that an Anchor recording has been deleted. We remain responsible for required provider deletion requests, as described below and in the Account Deletion Guide.
• Temporary execution files and live browser state: used during preparation, automation, and review. Ordinary job cleanup removes temporary working files; a live review browser can continue after automation ends until closed or its session deadline is reached. Browser expiration does not erase application records or screenshots already stored elsewhere.
• Billing, security, support, incident, usage, and privacy-request records: retained as needed for the service, accounting, security, investigation, remediation, compliance, and disputes, including after an ordinary account is closed when a specific legal or security need remains.
• Backups, database branches, recovery copies, and provider records: may persist beyond deletion from active account systems.

Account deletion first disables the account and requests cancellation of unfinished work. Erasure of registered profile, resume, transcript, application, and diagnostic records then runs as a separate maintenance process that waits for active work and remote-browser access to end safely. A grace period or eligibility timestamp is not a guarantee that deletion has completed. Tempra does not currently publish a fixed number of days for completion.

The Account Deletion Guide gives the current self-service steps, explains what we request from Clerk versus what we can prove, and identifies the records and provider copies the implemented lifecycle does not by itself erase.

We retain a limited deletion record, including the account identifier and deletion/erasure status, to prevent old sessions or delayed events from recreating a deleted account. We may also retain information when legally required or permitted for a specific obligation, security need, or claim, subject to applicable limits. We will explain a relevant exception when responding to a deletion request.

Deleting a file from active storage does not necessarily immediately destroy underlying provider recovery copies. We remain responsible for required deletion actions with providers acting on our behalf; these limitations do not override statutory rights. Employers and independently responsible providers may retain their own records under their policies and legal obligations.

Deleting your Tempra account does not recall submitted or saved applications. The current one-click path requests that Clerk end paid subscription items and delete the sign-in identity. Acceptance of the deletion request is not a billing receipt. If a charge still appears, contact jason@usetempra.com before the next renewal. Use the subscription-management controls if you want to keep the account and only stop paid renewal.

10. Your controls and privacy requests

You can update your profile, manage your resume and academic transcript, cancel eligible applications, and use account-management controls to request account deletion. New committed Autopilot batches have no ordinary cancellation or queue-clearing option. This does not restrict an applicable privacy right, required consent withdrawal, account deletion, or a security or legal request to stop processing; contact us promptly through the methods below. Stopping work may take time and cannot undo an employer's receipt of information. Correcting a saved profile affects newly confirmed queues and applications, not an existing queue or application snapshot or its authorized replacements; contact us about a retained application copy and contact the employer about its copy.

You can turn optional product updates and offers on or off in Account settings. That control does not stop account, security, billing, or support emails needed to operate the Service. We do not currently send promotional email.

Account settings do not include a download or export button. To request a copy of information Tempra holds about you, email jason@usetempra.com. Your legal access and portability rights are not limited by the absence of that button.

Depending on the law that applies, you may request:

• Confirmation of processing and access to information, including relevant sources, purposes, recipients, and disclosures.
• Correction of inaccurate information and deletion, subject to applicable exceptions.
• A portable copy of information where required.
• Restriction of processing or an objection to processing, including qualifying profiling; withdrawal of consent where consent is the basis.
• Applicable limits on sensitive-information processing and opt-outs of sale, advertising sharing, targeted advertising, or certain automated decisions.
• Review or appeal of a denied request and a complaint to the appropriate regulator.

Send requests to jason@usetempra.com. Tell us what you want to do and how to contact you. You do not need to use legal terminology. We may request information reasonably necessary to verify identity and authority, proportional to the request; do not send passwords, full government IDs, or unnecessary sensitive documents. Authorized agents may act where permitted, subject to verification of their authority. We do not require account creation solely to submit a privacy request.

We will respond within the deadline the applicable law requires, explain any permitted extension, denial, or lawful fee, and tell you about an available appeal or regulator route. Requests are ordinarily free. A feature may nevertheless require information genuinely necessary to provide it.

11. Additional information for California and other U.S. residents

If a U.S. state privacy law covers our processing, the rights in Section 10 include the rights that law grants. Requirements and exceptions vary. Email jason@usetempra.com to ask about your rights or to use them.

For California disclosures, the categories in Section 3 include identifiers and contact/customer records; commercial and transaction information; internet or other electronic activity; professional/employment information; education information; visual information in documents/screenshots; inferences; protected-classification information; and sensitive personal information, where applicable. Approximate location may be apparent from technical information; you can also provide an address or work-location preferences. We do not operate a feature that collects device GPS location or creates biometric identification templates.

Section 4 describes sources, Section 5 describes purposes, Section 7 identifies recipient categories and associated data, and Section 9 describes retention. Business-purpose disclosures can include the listed categories to hosting/storage providers, the application content needed by AI/browser providers, billing data to payment providers, and your chosen disclosures to employers. Section 8 addresses sale, sharing, and signals.

Where the CCPA applies, access, correction, and deletion requests generally require a response within 45 days, with a permitted extension and notice when applicable. Other request types and states may have different deadlines. We do not sell your personal information and do not share it for cross-context behavioral advertising. California residents can also email us about disclosures for another organization's direct marketing under California's Shine the Light law. Tempra does not make those disclosures.

Health-related information can receive additional protection under some state laws even outside a health-care setting. This Privacy Policy is the customer notice for disability and other health-related answers you choose to provide. If a law where you live requires extra steps, email jason@usetempra.com.

12. Additional information for the EEA, United Kingdom, and Switzerland

This section applies only if the relevant data-protection law governs our processing. If you are in the EEA, United Kingdom, or Switzerland and that law applies to you, you may have rights of access, correction, erasure, restriction, portability, objection, consent withdrawal, and complaint to a supervisory authority, including the UK Information Commissioner's Office or the Swiss Federal Data Protection and Information Commissioner. Email jason@usetempra.com to use those rights. When European law requires a response within one month, we follow that period and give notice of any legally permitted extension.

Where required, our purpose-specific legal bases are:

• Contract necessity: account administration, requested application assistance, and administering the service you purchase, to the extent objectively necessary for that contract.
• Legitimate interests: proportionate security, abuse prevention, troubleshooting, and legal-claim activities, after balancing those interests against your rights. This is not a blanket basis for all diagnostics or model improvement.
• Legal obligations: required accounting, regulatory, and privacy-request compliance, where an applicable obligation requires the processing.
• Consent: optional uses where required, such as certain cookies or promotional email after a separate opt-in. Processing special-category information also requires a separate valid legal condition, such as explicit consent when appropriate; a service contract alone does not supply it.

The current managed workflow requires the recording notice to be accepted before the hosted browser opens. If that is not acceptable under a law that applies to you, do not open that workflow and email us. Providing information necessary for account access or a requested application enables those features. You can decline optional information. Withdrawal of required consent may mean we cannot continue the affected processing; it does not waive your remaining rights.

Our AI assists in preparing your application, as explained in Section 6. We do not make an employer's hiring decision. This does not remove protections that may apply to our own automated processing. Where applicable law grants safeguards for a qualifying automated decision, you can request information, express your view, contest the decision, and seek human intervention through jason@usetempra.com.

13. International processing and transfers

Tempra and its providers may process information in countries other than where you live, including the United States and other countries where our providers operate. DeepSeek is a China-based provider, so answering requests can involve processing or access in China. Provider headquarters or a regional API endpoint alone does not establish every processing, support-access, or retention location.

Other countries may have different privacy laws and public-authority access rules. We are responsible for complying with transfer requirements applicable to our disclosures. Reading or accepting this policy is not blanket consent to international transfers and does not make an otherwise prohibited transfer lawful. If a transfer law that applies to you requires more detail, email jason@usetempra.com.

14. Security and access

We use measures designed to protect personal information, including authenticated access, checks that application records belong to the requesting account, restrictions on access to uploaded files, and controls on remote-browser access. Hosted operation depends on secure configuration and operation of our systems and providers.

No network, software, or storage system can be guaranteed completely secure. We do not promise absolute security or that information is inaccessible to authorized personnel or providers. If a security incident triggers a legal notification obligation, we will notify affected people and authorities as required by applicable law. This section does not limit rights or remedies that cannot legally be limited.

Protect your account credentials, use available authentication safeguards, and contact jason@usetempra.com if you believe your account or information has been exposed. Do not send passwords or sensitive authentication information in your report.

If you believe you found a security issue, email jason@usetempra.com. Do not probe, scan, or test Tempra systems without written permission.

15. Software limitations and responsibility

Tempra is an automated software service. AI output and automated browser actions are not reviewed by Tempra personnel before each response or action. To the maximum extent permitted by applicable law and subject to the Terms of Service, Tempra does not guarantee the truth, completeness, suitability, or outcome of AI-generated or automatically selected content, an employer's systems or hiring decision, or independent conduct by an employer or third-party website that Tempra did not cause or contribute to and could not reasonably control. You are responsible for information you knowingly provide, retain after a reasonable opportunity to review, approve, or submit.

Software disclaimers cannot eliminate every responsibility. Tempra remains responsible for its express privacy commitments and for duties, conduct, liabilities, and remedies that applicable law does not permit it to waive. This policy does not excuse unlawful data processing, deceptive statements, fraud, willful misconduct, or a failure to use required safeguards. Claims involving Tempra's own software, or the models and providers Tempra selects to deliver it—including an unintended submission—are governed by the Terms' warranty disclaimer and liability limits only to the extent those provisions are lawful and enforceable.

16. Age restrictions

Tempra is intended for people 18 or older and is not offered to children. Do not create an account or provide information if you are under 18. If you believe a child has provided personal information, contact us so we can investigate, restrict inappropriate processing, and take the deletion or other steps required by law.

17. Changes to this policy

We may update this policy as our service and legal obligations change. We will post the revised policy and update its date. For material changes, we will provide an appropriate prominent notice, such as in the service or by email, before the change takes effect where required. We will obtain additional consent when required rather than treating continued use as consent to every new purpose. Changes do not retroactively remove rights or justify an undisclosed incompatible use of information already collected.

18. Contact and accessibility

For privacy questions, requests, complaints, or an accessible copy of this policy, contact:

• Operator: Jason Chan, doing business as Tempra
• Privacy, legal, support, and billing email: jason@usetempra.com

Our AI Disclosure provides a shorter explanation of AI inputs, providers, outputs, recordings, and automated-action risk. Our Terms of Service separately address payment, cancellation, authorized use, and software limitations. Nothing in this policy waives statutory privacy or consumer rights.