This policy explains what personal data Tango Maps collects, why, and what you can do about it. Tango Maps is operated by BeKind Software SA de CV ("we", "us"), which is responsible for the data described here. You can reach us at [email protected].
What we collect from customers
- Account details: your email address, which you use to sign in.
- Sign-in data: a session cookie (
tango_session) that keeps you signed in for up to 30 days, and single-use sign-in links that expire after 15 minutes. This cookie is strictly necessary for the dashboard to work. - API keys: the names and allowed domains you give your keys. We store keys only as a one-way hash, so we cannot see or recover them.
- Usage: how many map loads each of your keys makes per day, used for your dashboard, plan limits and billing.
- Billing: payments are handled by Stripe, which receives your card and billing details directly. We store only your Stripe customer and subscription identifiers and the status of your subscription.
- Contact requests: the email, company, expected volume and use case you send us through the contact form.
Visitors of maps built with Tango Maps
When someone views a map on a site that uses Tango Maps, their browser requests map tiles from cdn.tangomaps.com. To serve those tiles and check the site's API key, we process the request's IP address, browser user agent and the address of the page showing the map (the Origin or Referer header). We set no cookies on these requests, do not track people across sites and do not keep IP addresses in our database. Our operational logs may keep request details for a short time to run and secure the Service.
Our website
- Analytics: tangomaps.com uses Microsoft Clarity to understand how visitors use the site. Clarity uses cookies and records interactions such as clicks, scrolling and page views. See the Microsoft Privacy Statement.
- Fonts: our pages load fonts from Google Fonts, and our maps load label fonts and icons from GitHub Pages (protomaps.github.io). Your browser sends your IP address to these services when it fetches the files.
How we use data
We use this data to provide and secure the Service, sign you in, enforce plan limits, bill you, answer your requests, send essential account emails and improve the product. We do not sell personal data or use it for advertising.
Service providers
We rely on these providers to run Tango Maps:
- Cloudflare: hosting, content delivery, database and storage.
- Stripe: payments and billing.
- Resend: sending sign-in emails.
- Formspark: receiving contact form submissions.
- Microsoft Clarity: website analytics.
- Google Fonts and GitHub Pages: fonts and map icons.
These providers may process data outside your country, including in the United States. We may also disclose data when the law requires it.
How long we keep data
We keep account, key and usage data while your account is open, and billing records for as long as tax and accounting rules require. Sign-in links expire after 15 minutes and sessions after 30 days. When you ask us to delete your account, we delete your personal data except what we must keep by law.
Your rights
You can ask to access, correct or delete your personal data, object to or limit how we use it, or withdraw consent you have given. If you are in Mexico, these include your ARCO rights. To make a request, email [email protected] from the address on your account. You can also complain to your local data protection authority.
Security
All traffic is encrypted with HTTPS. API keys, sign-in links and sessions are stored only as hashes, and tile access uses signed, expiring tokens. No system is perfectly secure, but we work to protect your data and will notify you of a breach that affects it as the law requires.
Children
Tango Maps is a service for businesses and developers and is not meant for children.
Changes
We will post any changes to this policy here and update the date above. For significant changes, we will also email account holders.