Privacy policy
Last updated 11 October 2026. This policy is written to meet the UK GDPR and the EU GDPR. The controller is AI Transform Studio Ltd (company number 17376852, registered in England and Wales, registered office at 82a 82 James Carter Road, Mildenhall, IP28 7DE, United Kingdom), reachable at support@bustempo.com. You may complain to the UK Information Commissioner's Office (ICO) or your local supervisory authority.
What we store, and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address (account) | Sign-in by one-time link, plan management, service emails | Contract (Art. 6(1)(b)) | Until you delete your account |
| Alert subscriptions (email, ride/line/station, threshold) | Sending the delay alerts you asked for | Consent (Art. 6(1)(a)); double opt-in by email | Until you unsubscribe; unconfirmed alerts are deleted after 24 hours |
| Delay certificates (ride data, optional email) | Issuing and verifying certificates you requested | Contract (Art. 6(1)(b)) | Kept so the verification link keeps working; delete on request |
| Payment status (plan, customer reference) | Billing paid plans | Contract | For the duration of the plan plus statutory bookkeeping periods |
| Contact messages (name, email, message) | Answering your enquiry | Legitimate interest (Art. 6(1)(f)) | 12 months |
| Server logs (IP address, request path, time) | Security, abuse prevention, rate limiting | Legitimate interest | Rate-limit counters: minutes; logs: up to 14 days |
Cookies
We use two cookies, both first-party and both essential to the function you chose, so no consent banner is needed:
- Session: a signed, httpOnly cookie that keeps you signed in for 30 days. Set only when you sign in; cleared when you sign out.
- Theme: remembers your light or dark preference. Set only when you change the theme.
No analytics, advertising or third-party tracking cookies are set.
Vehicle and operator data
The vehicle positions and delays we collect describe vehicles, not people. We do not collect passenger data from operators.
Processors
Payments are processed by Stripe (card details never reach us). Emails are sent through our SMTP provider. Fonts are loaded from Google Fonts, which receives your IP address when the font file is requested; the basemap tiles are loaded from CARTO. Our servers are located in the EU.
Your rights
You can ask for access, rectification, erasure, restriction, portability and object to processing based on legitimate interest, and withdraw consent at any time (every alert email has an unsubscribe link). Write to support@bustempo.com. You also have the right to lodge a complaint with your data-protection authority.
Changes
We update this page when our processing changes and show the date at the top.