Privacy Policy

Tandem (https://tandem.softwebhub.com) is operated by [COMPANY LEGAL NAME], trading as SoftWebHub, registered under [COMPANY NUMBER AND COUNTRY OF REGISTRATION], at [ADDRESS] (“SoftWebHub”, “we”, “us”). For the purposes of the EU and UK General Data Protection Regulation we are the controller of your account data and the data you connect.

EU representative: [EU REPRESENTATIVE — or delete if not required]. UK representative: [UK REPRESENTATIVE — or delete if not required].

Questions about this policy or your data: hello@softwebhub.com.

Account information

Your name and email address, and a password hash if you set one. If you sign in with Google or Microsoft we receive your name, email address and profile picture URL from that provider (the openid, email and profile scopes) — nothing else at sign-in.

What you tell Tandem

Your profile and preferences (role, company, working hours, tone of voice, important contacts, things agents must never do, email signature), the agents you set up, the rules (“playbooks”) you write or approve, the tasks you assign, and your approval decisions.

Data from tools you connect

Only after you press Connect and grant access on the provider’s own consent screen. Exactly what each connection reads is set out in sections 3–5 and shown in the app before you connect.

What Tandem produces

Drafts, summaries, task steps, what agents remember about your preferences (“memory”, which you can view and delete), and an activity log of every action taken on your behalf.

Technical data

IP address, browser type, timestamps and error logs, kept to run and secure the service. We do not use third-party analytics or advertising trackers.

When you connect Gmail or Google Calendar, Tandem requests only the scopes below. Google shows them to you on its consent screen, and you can revoke access at any time at myaccount.google.com/permissions or by disconnecting in Tandem.

Tandem’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Outlook, Outlook Calendar or Microsoft Teams, Tandem uses Microsoft Graph with these delegated permissions. Revoke them at any time at myapps.microsoft.com (work or school accounts) or account.live.com/consent/Manage (personal accounts), or by disconnecting in Tandem.

Data received from Microsoft is handled under the same limits as Google data (section 6) and in line with the Microsoft APIs Terms of Use.

When you add Tandem to a Slack workspace it acts as a bot that sees only the channels it is invited to and direct messages sent to it.

Remove Tandem from a channel to stop it reading that channel, or uninstall it from your Slack workspace’s app settings to revoke everything. Slack data is handled under the same limits as Google data (section 6) and the Slack API Terms of Service.

For all data we receive from Google, Microsoft, Slack or any other tool you connect (“connected data”):

1. Only for features you can see. We use connected data only to provide and improve the user-facing features of Tandem that are visible in the app — triage, summaries, drafts, scheduling, follow-ups, reminders and the activity log.
2. No transfers to anyone else except as needed to provide those features (the subprocessors in section 9, acting under contract), to comply with applicable law, for security (for example, investigating abuse), or as part of a merger, acquisition or sale of assets — and then only with notice to you and under the same commitments.
3. No advertising. We never use connected data to serve, target or measure advertising, including retargeting or personalised ads.
4. No selling. We never sell connected data, and never pass it to data brokers or information resellers.
5. No training of generalised AI models. We never use connected data to develop, improve or train generalised or non-personalised AI or machine-learning models — ours or a third party’s. Our AI provider is contractually barred from training on it (section 7). Your own playbooks and memory are personal to your workspace and never shared with other customers.
6. No human reading of connected data by anyone at SoftWebHub, unless (a) you give us explicit permission for specific messages — for example, when you ask support to look at a problem; (b) it is necessary for security purposes, such as investigating abuse or a vulnerability; (c) it is necessary to comply with applicable law; or (d) the data has been aggregated and anonymised and is used only for internal operations. Any staff access is limited to named people, logged, and reviewed.
7. No credit decisions or lending. We never use connected data to determine credit-worthiness or for lending purposes.

Tandem uses large language models from Anthropic, PBC (USA) to understand messages and write drafts and summaries. To do a task, the relevant content — for example the email thread you are replying to and your tone preferences — is sent to Anthropic’s API. Under Anthropic’s commercial terms that content is not used to train models, and we use zero data retention where Anthropic makes it available, so inputs and outputs are not stored after the response is returned (where it is not available, Anthropic keeps API data for a short period only for trust-and-safety purposes and then deletes it).

AI-written messages. Drafts, replies and summaries are generated by AI and may contain mistakes. You review them before they are sent unless you have chosen to let an agent act on its own for a specific kind of task. Messages Tandem sends on your behalf go out from your own account, and you decide whether to tell recipients that AI helped write them; where the law requires a disclosure (for example, the EU AI Act’s transparency rules for AI-generated content), Tandem lets you add one automatically.

Untrusted content stays data. Text inside emails, documents and messages is treated as information, never as instructions: it cannot change an agent’s permissions or make it act without your approval.

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing.

We use a small number of providers to run Tandem. Each acts only on our instructions, under a written data-processing agreement.

We will update this list before adding a new subprocessor. We disclose data to authorities only when legally required, and we push back on requests that are not.

Some providers (for example Anthropic) process data in the United States. Where data leaves the UK or EEA we rely on an adequacy decision (including the EU–US Data Privacy Framework and its UK extension where the provider is certified) or the European Commission’s Standard Contractual Clauses with the UK Addendum, plus supplementary measures such as encryption in transit.

• Email, chat and calendar content is fetched when a task needs it. We keep only what a task needs to show its work (for example a short excerpt, subject line, participants and the draft) for as long as the task is in your history. Full message bodies are not kept beyond 30 days.
• Access tokens are stored encrypted and deleted as soon as you disconnect the tool (we also revoke them at the provider where it allows).
• The activity log is kept for the life of your workspace so you can always see what was done on your behalf.
• Server logs are kept for up to 30 days.
• When you delete your workspace (Settings → Data & privacy → Delete everything), all workspace data — including memory, playbooks and the log — is deleted from live systems straight away and from backups within 35 days.
• Inactive free accounts may be deleted after 12 months without sign-in; we email you first.

Tokens and secrets are encrypted at rest, all traffic uses TLS, every action is written to an audit log you can see, and you can pause every agent at once. The details are on our Security page. If we ever have a personal-data breach that puts you at risk, we will tell you and the regulator as the law requires.

Wherever you live you can export your data (Settings → Data & privacy → Export) and delete it (Delete everything). Under the GDPR and UK GDPR you also have the right to:

• access the personal data we hold about you and get a copy;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to processing, including processing based on legitimate interests;
• data portability, in a machine-readable format;
• withdraw consent at any time (for connected tools: disconnect them);
• complain to a supervisory authority — in the UK the Information Commissioner’s Office (ico.org.uk), in the EU your local data-protection authority.

Email hello@softwebhub.com to use any of these. We reply within one month and may ask you to confirm your identity.

Tandem uses only strictly necessary cookies: a session cookie that keeps you signed in and a security token (XSRF-TOKEN) that protects forms against cross-site attacks. Your browser’s local storage remembers your light/dark theme and, in the demo, the sample workspace. We use no advertising or analytics cookies, so there is no cookie banner.

Tandem is a work tool for adults. It is not directed at anyone under 18 and we do not knowingly collect data from children. If you think a child has given us data, contact us and we will delete it.

If we change how we use your data we will update this page and its date, and — for anything material, or anything that touches connected data — email you before the change takes effect. We will never apply a less protective use to data we already hold without your consent.

[COMPANY LEGAL NAME] (trading as SoftWebHub), [ADDRESS]. Email hello@softwebhub.com.