Privacy

Draft

This is a working draft for the developer-platform preview describing current practice. It is not a legal privacy notice and will be replaced by a reviewed one before general availability. It covers the developer platform only — the developer realm, this site, the SDK and the sandbox provisioner — not the Tango Vision platform as used by building tenants, which is governed by the separate agreements with those customers.

Who holds it, and where

The developer platform is operated by Tango Vision LLC (OOO TANGO VIZHEN), INN 9705135839, Moscow; its full details are under Who we are in the terms.

Everything listed below under "What is stored about you" is held in the Russian Federation, on Cloud.ru: your account by the sign-in service, your keys and the key audit log by the sandbox API; your sandboxes and their databases run there too. This site and the @tv package registry are hosted there as well.

What is stored about you

• Your developer account in the invite-only developers realm: the mail address the account was created for, your sign-in events, and the sessions Keycloak keeps for them.
• API keys you mint: a hash of the key (never the key itself), its label, scope, expiry and last-used time.
• A key audit log: issue, use and revoke events, each carrying the caller's IP address and user agent. These are the rows that make it possible to answer "was this key used after it leaked".
• Your sandboxes: the record (name, slug, parameters, status, expiry) and whatever you put into a sandbox's database yourself.

What is not

• The SDK CLI does not phone home. login stores your tokens in your own OS keyring (or a 0600 file where no keyring is available) and nowhere else.
• This documentation site uses no analytics, no advertising and no third-party trackers. Its search index is built at build time and runs in your browser.
• We do not sell anything about you, and we do not use developer accounts for marketing profiling.

How long

• The key audit log is kept 18 months, then pruned automatically.
• A sandbox and its database are deleted when the sandbox expires or you delete it. Expiry is 30 days at most from creation, plus up to two 7-day extensions.
• Account records persist while the account exists.

Seed data is synthetic

A sandbox is seeded with a generated building — spaces, equipment and telemetry produced from your parameters. It is not a copy of any customer's data, and nothing you do in a sandbox reaches a customer tenant.

Keep it synthetic. A sandbox is a development environment, not a place for a company's real tenant data or personal data: put none in unless we have agreed otherwise with you in writing. Sign-in is not yet separated between sandboxes; see What is isolated, and what is shared.

Asking about your data

Write to the contact named in your welcome message, by email or Telegram, to ask what is held about your account, to correct it, or to have the account and its sandboxes deleted. developers@tango.vision reaches the same people. We answer the same business day, Moscow time.