Tandem Processor Privacy Notice

Effective 28 April 2025 – replaces all prior versions

1. Who We Are

Legal entity	Role	Address	Registration
Tandem App, Inc.	Main processor & service provider	490 Post St, Suite 640, San Francisco CA 94102, USA	EIN 33-2652774
Tandem SAS (Art 27 EU Representative)	EU representative & sub-processor	3 Bd de Sébastopol, 75001 Paris, France	SIRET 932 271 000 00014

Contact

Email: [email protected]

DPO: Manuel Darcemont (CTO) – [email protected] – +33 6 22 17 16 04

2. Scope

This Notice applies to all Personal Data that Tandem receives from or on behalf of a Customer through the Tandem “AI Success Agent” platform (including Recorder SDK and analytics APIs).

3. Roles & Responsibilities

Customer = Data Controller – decides the purposes and means of processing.
Tandem = Data Processor / Service Provider in the meaning of GDPR Art 4(8), UK GDPR, Swiss FADP and all U.S. state privacy laws.
Processing terms are governed by the Tandem Data Processing Agreement (“DPA”).

4. Categories of Personal Data Processed

Category	Typical data points
Identification	name, work-email, phone (if provided)
Employment	company name, role
Interaction data	page views, click streams, navigation patterns, chat transcripts with the AI agent
Technical	IP address, user-agent string, geolocation (city/region), referrer URLs
Usage analytics	feature adoption events, success metrics
Optional / Customer-supplied custom fields	any other data the Controller elects to send via the Tandem API or SDK

Tandem does not knowingly collect children’s data (< 13 US / 16 EEA)

5. Purposes of Processing (on behalf of the Controller)

Deliver contextual onboarding and in-app guidance
Measure and improve user flows and feature adoption
Generate aggregated, Customer-level performance reports