Privacy policy

This policy covers tandemfloor.com, the public live demo, and the emails we send about Tandem. It explains what we collect, why, where it's kept and the choices you have.

When a company uses Tandem for its own stores, the company decides what employee and store data goes into its account, and its agreement with us governs that data. In that case we process the data on the company's behalf and only to provide the service. If you work for one of our customers, contact your employer first for questions about your work data.

When you request a demo: your name, work email, company, role, number of locations, the products you're interested in and anything you write in the message box.

When you try the live demo: the email you enter, a name and company we read from that email address (for example, a company name taken from the domain), and which industry and demo seats you opened.

Automatically: standard server logs from our hosting provider (such as IP address, browser type and the pages requested), used to keep the site running and secure. We also keep a short activity log of demo sign-ins and actions inside the demo.

We don't use advertising cookies, we don't run third-party analytics or tracking scripts on this site, and we don't buy data about you from others.

We only use what the site needs to work:

• Sign-in cookie keeps you signed in. In the live demo it expires after 4 hours.
• Demo email cookie remembers the email you gave on this device for 30 days, so you don't have to type it again when you switch demo seats.
• Assistant cookie holds Ask Tandem's short-term memory (what you just looked up or asked to confirm) for up to 30 minutes.
• Single sign-on cookie is used for a few minutes while you sign in with your company's identity provider.
• Local storage in your browser keeps small display preferences, such as which menu groups are open and which notifications you've seen.

You can clear cookies and local storage in your browser at any time. The site still works; you'll just be asked to sign in or enter your email again.

• To run the live demo and the website, and keep them secure.
• To reply to your demo request and follow up about Tandem.
• To understand which industries and features visitors are interested in, so we can improve the product.

We only email you about Tandem. Every marketing email lets you unsubscribe, and you can also ask us to stop at any time. We don't sell or rent your personal information.

The companies, stores, people, schedules and records inside the live demo are made up. Please don't enter real personal information about anyone into the demo. Demo data is reset regularly and anything you change there may be deleted.

The site runs on Vercel. Data is stored in a managed PostgreSQL database run by Neon on Amazon Web Services in the United States (us-east-1). These providers process data for us under their own security and privacy commitments, and only to provide their services.

Some Tandem features can use an AI language model provider when a customer turns them on. When they do, Tandem removes people's names from the text it sends where it can. The public demo works without a model provider.

Because our providers are in the United States, your information may be stored and processed outside your country.

We keep demo requests and demo sign-ups while we're in touch with you about Tandem, and delete them when you ask us to or when they're no longer needed. Server logs are kept for a short period by our hosting provider. Customer accounts follow the retention settings in the customer's agreement and in the product.

You can ask us to show you the personal information we hold about you, correct it, delete it, or stop emailing you. Depending on where you live, you may have more rights under laws such as Canada's PIPEDA, the GDPR or California privacy law. Send us a privacy request and we'll respond within 30 days.

We use encrypted connections (HTTPS), signed sign-in cookies, role-based access, separation between customer accounts, field-level encryption for sensitive fields and an audit log. No system is perfectly secure, but we work to protect your information and will tell affected people promptly if a breach puts it at risk.

This website and the demo are for businesses and are not meant for children under 16. We don't knowingly collect information from them.

If we change this policy, we'll update the date at the top. If a change is significant, we'll make it clear on this page before it takes effect.