Privacy Policy

1 Overview

TangoText ("we", "our", or "us") is a file transformation tool operated from Ontario, Canada. We are committed to protecting your privacy and handling your data with transparency and care.

This Privacy Policy explains what personal information we collect when you use TangoText at tangotext.com, how we use it, and your rights regarding that information.

2 Information We Collect

When you create an account:

• Email address
• First and last name
• Company or organization (optional)
• Job title (optional)
• Industry (optional)
• Country (optional)
• Password (stored as a secure hash — we never see your actual password)

When you use TangoText:

• Number of transforms performed (count only — not the content of your files)
• Output format selected (e.g. CSV, JSON)
• Templates you save (stored in our database linked to your account)

Automatically collected:

• IP address (used for security and anonymous usage tracking)
• Country (derived from IP address)
• Browser type and operating system
• Pages visited and session duration
• Referrer URL (the site that linked you to TangoText)

When you subscribe:

• Payment information is collected and processed directly by Stripe. We do not store your credit card number, expiry date, or CVV on our servers.
• We store your Stripe customer ID to manage your subscription.

3 How We Use Your Information

• Providing the service — to authenticate you, maintain your account, enforce usage limits, and store your templates
• Processing payments — to manage your subscription through Stripe
• Improving TangoText — aggregate, anonymous usage analytics help us understand which features are used most
• Security — detecting and preventing abuse, fraud, and unauthorized access
• Communication — sending account-related emails such as password resets and subscription receipts. We do not send marketing emails without your explicit consent.

We do not sell your personal information to third parties. We do not use your data for advertising purposes.

4 Data Storage & Security

Your account data is stored in Supabase, a hosted database platform with servers located in the United States. Supabase employs industry-standard security measures including encryption at rest and in transit.

We implement the following security measures:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Passwords are hashed using bcrypt and never stored in plain text
• Access to production databases is restricted to authorized personnel only
• Row-level security policies ensure users can only access their own data

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes.

5 Your Files

The only file-related data we store are:

• Templates you explicitly choose to save (column names, transformation rules, and output settings — not the data itself)
• The output format you selected (e.g. "CSV") as part of usage analytics
• Row counts, for usage tracking purposes

6 Third-Party Services

TangoText uses the following third-party services:

• Supabase — database and authentication. Privacy policy →
• Stripe — payment processing. Privacy policy →
• Vercel — website hosting and serverless functions. Privacy policy →
• Google OAuth — optional sign-in with Google. Privacy policy →
• Microsoft OAuth — optional sign-in with Microsoft. Privacy policy →
• ipapi.co — used to determine your country from your IP address for analytics purposes

Each of these services has its own privacy policy governing how they handle data. We encourage you to review them.

7 Cookies & Tracking

TangoText uses minimal cookies and browser storage:

• Authentication session — a secure cookie to keep you logged in
• Usage count — stored in localStorage to track anonymous transform usage
• Dismissed notifications — stored in localStorage to remember which announcements you've closed
• Visitor fingerprint — a privacy-preserving anonymous identifier used to enforce anonymous usage limits without requiring a login

We do not use advertising cookies, tracking pixels, or third-party analytics platforms like Google Analytics.

8 Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate personal data
• Deletion — request deletion of your account and personal data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your personal data in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

If you are located in the European Economic Area or the United Kingdom, you have additional rights under GDPR. If you are located in California, you have additional rights under CCPA.

9 Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: [email protected]
• Website: tangotext.com
• Location: Ontario, Canada

This Privacy Policy may be updated from time to time. We will notify you of significant changes by posting a notice on TangoText or by email. Continued use of TangoText after changes constitutes acceptance o