Teem

Privacy Policy

Last updated: 17 October 2026

This policy explains what personal information Teem Services Limited collects, why, and what you can do about it. It covers teem.cloud, our sign-in service at auth.teem.cloud, and every software product we run, including Teem Ops, Teemtape and Morse Key, and products we launch later. A product can add its own privacy notice where it handles information differently. Where it does, that notice applies alongside this one.

1. Who we are

Teem Services Limited ("Teem", "we", "us") is a company registered in New Zealand. We follow the New Zealand Privacy Act 2020. Where the EU or UK General Data Protection Regulation applies to you, we are the controller of the personal information described here, except for data you put into our products, covered in section 4.

2. What we collect

When you visit teem.cloud

  • Analytics. We use Cloudflare Web Analytics, which counts page views without cookies and without building a profile of you.
  • Server logs. Cloudflare processes your IP address, browser details and the pages you request to deliver the site and protect it from attacks.
  • Contact form. Your name, email address, company and message. Cloudflare Turnstile checks that a person is sending the form, using signals from your browser.
  • Booking a call. If you book through our Microsoft booking page, Microsoft collects the details you enter and shares them with us.

When you create a Teem account

Accounts are managed by auth.teem.cloud. We store your email address, name, a unique user identifier, your password and details of your login sessions, such as when you signed in. Passwords are encrypted separately from the rest of your account data.

When you use our hosted products

  • Usage and telemetry. Which features are used, errors, performance data and login session data, linked to your user identifier or kept anonymous.
  • Teem Ops (SaaS). Information about the AWS accounts you connect, such as account IDs, resource configuration and the findings Teem Ops produces. This can include names of IAM users and roles in those accounts.
  • Other products. Whatever you choose to store in them, such as the portfolio positions and notes you keep in Teemtape.

When you pay

Stripe processes payments. We receive your name, billing email and address, the type and last four digits of your card, and your payment history. We never see or store your full card number.

Self-hosted Teem Ops

The self-hosted version runs inside your own AWS account. Its findings and your account configuration stay there, and we receive none of it unless you send it to us, for example when asking for support.

3. How we use it

  • To provide, secure and support our products and your account.
  • To take payments and keep financial records.
  • To reply to enquiries and arrange calls you have booked.
  • To find and fix problems and understand which features are used, so we can improve them.
  • To send you service messages, such as security alerts, billing notices and changes to our terms. We only send marketing emails if you have agreed, and every one has an unsubscribe link.
  • To meet legal obligations and protect our rights.

Under GDPR our legal bases are: performing our contract with you (accounts, products, billing), our legitimate interests in running and securing our business (analytics, logs, enquiries), legal obligation (tax and accounting records), and your consent (marketing). We don't sell personal information, and we don't use your data in our products to train AI models.

4. Data you put into our products

If you use our products for your organisation, the data you store in them belongs to you, and for GDPR purposes you are the controller and we are your processor. We process it only to provide the product to you, as set out in our Terms of Service. If someone whose information is in your account contacts us, we will refer them to you.

5. Who we share it with

We use these providers to run our business. Each handles data only to provide its service to us.

  • Cloudflare: website hosting, sign-in (auth.teem.cloud), analytics, Turnstile and email delivery.
  • Amazon Web Services: hosting for our products, including Teem Ops SaaS.
  • Stripe: payments and billing.
  • Microsoft: email and call booking.

We may also share information with professional advisers, with a buyer if our business or a product is sold (who must then honour this policy), or where the law requires it. We don't share it with anyone else.

6. Where it is stored and how we protect it

Our providers store data in New Zealand, Australia, the United States, the EU, the UK and other countries where they operate. When we transfer personal information outside New Zealand, the EU or the UK, we rely on our providers' contractual safeguards, such as the European Commission's standard contractual clauses, so it stays protected to a comparable standard.

All data is encrypted at rest using keys managed by our cloud providers, and encrypted in transit. Access is limited to the people who need it to run the service. If a privacy breach is likely to cause serious harm, we will tell the people affected and the relevant regulator, as the law requires.

7. How long we keep it

  • Account and product data: while your account is open, then deleted within 90 days of closure.
  • Billing records: 7 years, as New Zealand tax law requires.
  • Enquiries: up to 2 years after our last contact, unless they lead to work together.
  • Logs and telemetry: up to 12 months, unless we need them longer to investigate a security issue.

8. Your rights

You can ask to see the personal information we hold about you and to correct it. Depending on where you live, you may also be able to ask us to delete it, restrict or object to how we use it, receive a copy in a portable format, or withdraw consent you have given. Email hello@teem.cloud and we will reply within 20 working days. We may need to confirm your identity first.

9. Cookies and analytics

Our analytics don't use cookies. Signing in sets cookies that keep you logged in, and Turnstile may set cookies needed to protect our forms. See our Cookie Policy for details.

10. Children

Our products are for people aged 18 and over, and we don't knowingly collect information from children. If you think a child has given us information, contact us and we will delete it.

11. Changes to this policy

We will post any update here with a new date. If a change materially affects how we use information you have already given us, we will email account holders before it takes effect.

12. Contact and complaints

For privacy questions or requests, email hello@teem.cloud. If you are not happy with our response, you can complain to the Office of the Privacy Commissioner in New Zealand, the Information Commissioner's Office in the UK, or your local data protection authority in the EU.