Two different relationships
This matters more than anything else here, because it decides who is responsible for what.
- When you use Tangent — you sign in, we bill you — we are the controller of your account data.
- When Tangent records behaviour in your product, those end users are your users, not ours. You are the controller; we are the processor, acting on your instructions. Our obligations there are set out in the data processing agreement.
What we collect about you, our customer
- Account data — name, work email, workspace name, and the password hash. Never the password itself.
- Billing data — plan, invoices and payment status. Card details are handled by our payment provider and never reach our servers.
- Usage data — which features you use and how much, so we can bill correctly and decide what to build.
- Support correspondence — what you write to us, and our replies.
What we process on your behalf
The behavioural events your product sends us: an event name, a user identifier you choose, timestamps, device and browser information, coarse location derived from an anonymised IP address, and whatever properties you decide to attach. Session recordings, where you have enabled them, with all text input masked in the browser before it is transmitted.
We do not ask for, need, or want special category data. What ends up in custom properties is under your control — please do not send us health, biometric, political or similar data.
How long it is kept
- Events — for the retention window of your plan, then deleted.
- Session recordings — a shorter window than events, set by your plan.
- Account and billing records — for as long as you are a customer, then for the period tax law requires.
- Backups — recent copies expire on a rolling schedule, so deletion propagates rather than lingering indefinitely.
Who else touches it
Our infrastructure providers, listed on the subprocessors page. We do not sell data and we do not share it for advertising. When you use a bring-your-own-model tier, your chosen AI provider receives your schema and your question — never your raw events.
Your rights
Access, correction, deletion, portability, objection, and the right to complain to your data protection authority. Write to [email protected]. If you are an end user of a product that uses Tangent, contact that company first — they decide what is collected about you, and we act on their instruction.
Changes
Material changes will be notified by email before they take effect, not quietly published with a new date at the top.