Privacy Policy

1 Overview

TangoText ("we", "our", or "us") is a file transformation tool operated from Ontario, Canada. We are committed to protecting your privacy and handling your data with transparency and care.

This Privacy Policy explains what personal information we collect when you use TangoText at tangotext.com, how we use it, and your rights regarding that information.

2 Information We Collect

When you create an account:

• Email address
• First and last name
• Company or organization (optional)
• Job title (optional)
• Industry (optional)
• Country (optional)
• Password (stored as a secure hash — we never see your actual password)

When you use TangoText:

• Number of transforms performed (count only — not the content of your files)
• For each file you load or generate: the number of rows and columns, the detected input format, the output format selected (e.g. CSV, JSON) and the number of output fields. Never file contents, values or file names.
• Templates you save (stored in our database linked to your account). See "Templates and settings" below.
• Messages you send through our contact form (name, email address, subject and message)
• Technical error records (for example the error message, the account involved and the affected feature) so we can fix problems

Automatically collected:

• IP address (used for security and anonymous usage tracking)
• Country (derived from IP address)
• Browser type and operating system
• Pages visited and session duration
• Referrer URL (the site that linked you to TangoText)
• An anonymous visitor identifier generated in your browser, used to enforce usage limits and prevent abuse
• Usage data collected by Google Analytics (see "Third-Party Services" and "Cookies & Tracking")

When you subscribe:

• Payment information is collected and processed directly by Stripe. We do not store your credit card number, expiry date, or CVV on our servers.
• We store your Stripe customer ID to manage your subscription.

Templates and settings: A template contains your configuration: source and output column names, static and conditional values and other text you type into settings, formatting settings, TangoCheck rule values, output options, and data-masking settings (the key name, style and options). Templates never contain rows from your files or your masking passphrase. Because you type some of this content yourself, please do not enter sensitive personal data into those fields.

Stored only in your browser: your list of masking keys (the name, an optional hint you write, and a verification value derived from your passphrase to check it was typed correctly), your view preferences, and usage counters. We do not receive these. A hint is visible to anyone who uses your browser, so never put your passphrase in it.

3 How We Use Your Information

• Providing the service — to authenticate you, maintain your account, enforce usage limits, and store your templates
• Processing payments — to manage your subscription through Stripe
• Improving TangoText — aggregate, anonymous usage analytics help us understand which features are used most
• Security — detecting and preventing abuse, fraud, and unauthorized access
• Support — responding to your messages and troubleshooting. For support and security purposes, authorized TangoText administrators may view account information and, when needed to resolve an issue, access your account, which can include seeing your saved templates
• Communication — sending account-related emails such as password resets and subscription receipts. We do not send marketing emails without your explicit consent.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4 Data Storage & Security

Your account data is stored in Supabase, a hosted database platform with servers located in the United States. Supabase employs industry-standard security measures including encryption at rest and in transit.

We implement the following security measures:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed using bcrypt and never stored in plain text
• Access to production databases is restricted to authorized personnel only
• Row-level security policies ensure users can only access their own data

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. We retain your account data for as long as your account is active, and keep usage records, contact messages and error records for as long as reasonably necessary for the purposes described in this policy. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes.

5 Your Files

Formatting, data masking and validation also run entirely in your browser. Your masking passphrase is never sent to us, which is why we cannot recover it. The only file-related data we store are:

• Templates you explicitly choose to save (column names, transformation rules, formatting and masking settings, and output settings, not the rows of your file)
• The output format you selected (e.g. "CSV") as part of usage analytics
• Row and column counts and the detected input format, for usage tracking purposes

6 Third-Party Services

TangoText uses the following third-party services:

• Supabase — database and authentication. Privacy policy →
• Stripe — payment processing. Privacy policy →
• Vercel — website hosting and serverless functions. Privacy policy →
• Google OAuth — optional sign-in with Google. Privacy policy →
• Microsoft OAuth — optional sign-in with Microsoft. Privacy policy →
• ipapi.co — used to determine your country from your IP address for analytics purposes
• Google Analytics (GA4) — website analytics (pages viewed, device and browser, approximate location). Privacy policy →
• Google Fonts — loads fonts from Google's servers, which can see your IP address
• hCaptcha — spam and abuse protection on forms. Privacy policy →
• Resend — delivery of account and support emails. Privacy policy →
• jsDelivr and cdnjs (Cloudflare) — content delivery networks that serve open-source code libraries to your browser, which can see your IP address

Each of these services has its own privacy policy governing how they handle data. We encourage you to review them.

7 Cookies & Tracking

TangoText uses minimal cookies and browser storage:

• Authentication session — a secure cookie to keep you logged in
• Usage count — stored in localStorage to track anonymous transform usage
• Dismissed notifications — stored in localStorage to remember which announcements you've closed
• Visitor fingerprint — a privacy-preserving anonymous identifier used to enforce anonymous usage limits without requiring a login
• Masking keys and preferences — your list of masking key names and hints, and your view preference, stored in localStorage on your device only
• Analytics cookies — Google Analytics sets cookies (such as _ga) to measure site traffic

We do not use advertising cookies or tracking pixels. We use Google Analytics 4 to understand how the site is used. It collects information such as pages viewed, device and browser type and approximate location, but it never receives the contents of your files. You can block analytics cookies in your browser settings or with a browser extension.

8 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your account and personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your personal data in certain circumstances

To exercise any of these rights, please contact us at info@tangotext.com. We will respond within 30 days.

TangoText is not intended for anyone under 16, and we do not knowingly collect information from them.

If you are located in the European Economic Area or the United Kingdom, you have additional rights under GDPR. If you are located in California, you have additional rights under CCPA.

9 Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: info@tangotext.com
• Website: tangotext.com
• Location: Ontario, Canada

This Privacy Policy may be updated from time to time. We will notify you of significant changes by posting a notice on TangoText or by email. Continued use of TangoText after changes constitutes acceptance of the updated policy.