Status: v1, in force from 2026-10-13.
In plain English. This summary helps you read the page but is not part of it. The full text below controls.
- To take your phone off the network, use Leave this network in the app. On a computer, ask your administrator.
- Your organization controls its data, much as an employer controls its email system. Its Owners decide what is deleted, and delete it themselves in the Tartan console or command-line tool. Ask your administrator.
- Some records outlast a deletion: security records, agreement records and backups. The table below says which ones, and for how long.
Tartan accounts belong to organizations. Your organization's administrator adds and removes people and devices. When your organization uses Tartan's hosted service, TechSolve LLC (the maker of Tartan Networks) holds your data for your organization.
If you're a member of an organization, ask your administrator. Your organization controls your data, so only its Owners can delete it. We don't act on deletion requests sent to us by email; if you write to us, we tell you to ask your organization.
If you're an organization's Owner, sign in to the Tartan console or command-line tool and delete particular people or devices, or the whole organization. A deletion is complete in our live systems within 30 days. An organization being deleted is switched off at once.
If no Owner can sign in, we don't delete on anyone's request; the organization is deleted once it is no longer used.
We may also delete an organization that none of its own devices has connected to for 60 days, or whose fees are unpaid 45 days after they were due, after telling its Owners in the console.
Each period below is the longest we keep the data. We may delete it sooner.
| Data | What happens |
|---|---|
| Sign-in details: passkeys, single sign-on links, active sessions | Deleted, or revoked so they can never be used again |
| Device records: name, keys, addresses, health | Removed from the live organization |
| Your person record (display name and identifier) | Marked as removed, and de-identified where our systems allow. Your name may stay on the person record so the security log can show who did what |
| Security audit log | Kept while your organization exists, and for up to 12 months after it is deleted. It is a tamper-evident record of administrative actions, and some entries name the person who acted |
| The record that your organization was deleted | Kept with no end date, as a security record: the organization's ID and name, who requested the deletion, and when |
| Device and certificate archives | Removed devices and expired certificates are copied to archives, kept for support and security. When an organization is deleted, its device archive goes with it and its certificate records are kept for up to 12 months. We are adding time limits to these archives |
| Backups | Database backups are locked and kept for up to 90 days. Point-in-time restore data is kept for up to 14 days. Both are then deleted automatically. We use them only to recover from an outage |
| Records that your organization accepted our Terms | Kept for up to 6 years after the organization closes, as contract records, with the name and email (if any) of the person who accepted |
| The organization's name | It may later be given to another organization. A registered organization's entries in our public transparency registry are permanent |
| Public certificate logs | If your organization's DNS name had a TLS certificate, that certificate's name is in public Certificate Transparency logs run by others. Nobody can remove it from those logs |
| Messages you sent us | Kept as long as needed to answer them, and for up to 3 years as business records |
We may keep data longer where we need it to meet a legal obligation, resolve a dispute, enforce our agreements or keep the service secure, for as long as that need lasts. Aggregated or de-identified statistics are not personal data, and a deletion does not remove them.