Privacy
Draft
This is a working draft for the developer-platform preview describing current practice. It is not a legal privacy notice and will be replaced by a reviewed one before general availability. It covers the developer platform only — the developer realm, this site, the SDK and the sandbox provisioner — not the Tango Vision platform as used by building tenants, which is governed by the separate agreements with those customers.
What is stored about you
- Your developer account in the invite-only developers realm: the mail address the account was created for, your sign-in events, and the sessions Keycloak keeps for them.
- API keys you mint: a hash of the key (never the key itself), its label, scope, expiry and last-used time.
- A key audit log: issue, use and revoke events, each carrying the caller's IP address and user agent. These are the rows that make it possible to answer "was this key used after it leaked".
- Your sandboxes: the record (name, slug, parameters, status, expiry) and whatever you put into a sandbox's database yourself.
What is not
- The SDK CLI does not phone home.
loginstores your tokens in your own OS keyring (or a0600file where no keyring is available) and nowhere else. - This documentation site uses no analytics, no advertising and no third-party trackers. Its search index is built at build time and runs in your browser.
- We do not sell anything about you, and we do not use developer accounts for marketing profiling.
How long
- The key audit log is kept 18 months, then pruned automatically.
- A sandbox and its database are deleted when the sandbox expires or you delete it. Expiry is 30 days at most from creation, plus up to two 7-day extensions.
- Account records persist while the account exists.
Seed data is synthetic
A sandbox is seeded with a generated building — spaces, equipment and telemetry produced from your parameters. It is not a copy of any customer's data, and nothing you do in a sandbox reaches a customer tenant.
Asking about your data
Write to developers@tango.vision to ask what is held about your account, to correct it, or to have the account and its sandboxes deleted.