Status: v1, in force from 2026-10-13.

Deleting your Tartan data

Version 1.0.2 · Effective 2026-10-13 · Posted 2026-10-13 · Last updated 2026-10-13

In plain English. This summary helps you read the page but is not part of it. The full text below controls.

Tartan accounts belong to organizations. Your organization's administrator adds and removes people and devices. When your organization uses Tartan's hosted service, TechSolve LLC (the maker of Tartan Networks) holds your data for your organization.

Remove a phone or computer

Ask us to delete your data

Email privacy@tartannetworks.com from any address. Include:

What happens next:

  1. We confirm the request. We check it with your organization's Owner. We don't ask you for more personal data than we need.
  2. If you're a member of an organization, your organization controls your data, so we act on its Owner's instruction. We pass your request to the Owner and tell you when we've done so.
    • If the organization no longer exists, or has no Owner, we handle your request ourselves.
  3. If you're an organization's Owner, you can ask us to delete particular people or devices, or the whole organization.
  4. We aim to finish within 30 days. We confirm by replying to your email.

We handle these requests by hand today. We are building self-service deletion in the app and the console, and this page will say when it arrives.

What's deleted, and what's kept

What a deletion does today:

Data What happens
Sign-in details: passkeys, single sign-on links, active sessions Deleted, or revoked so they can never be used again
Device records: name, keys, addresses, health Removed from the live organization
Your person record (display name and identifier) Marked as removed, and de-identified where our systems allow. Your name may stay on the person record so the security log can show who did what
Security audit log Kept. It is a tamper-evident record of administrative actions, and some entries name the person who acted
Device and certificate archives Removed devices and expired certificates are copied to archives, kept for support and security. We are adding time limits to these archives
Backups Database backups are locked and kept for up to 90 days. Point-in-time restore data is kept for 14 days. Both are then deleted automatically. We use them only to recover from an outage
Records that your organization accepted our Terms Kept for 6 years after the organization closes, as contract records
Public certificate logs If your organization's DNS name had a TLS certificate, that certificate's name is in public Certificate Transparency logs run by others. Nobody can remove it from those logs
Messages you sent us Kept as long as needed to answer them, and for up to 3 years as business records

In-app path (strings)