Version 1.0.3 · Effective 2026-10-13 · Posted 2026-10-13 · Last updated 2026-10-13
In plain English. This summary helps you read the policy. It is not part of the policy, and the full text below
controls.
Your traffic is end-to-end encrypted. Our relays carry it but can't read it. On the hosted service we hold your
org's network certificate authority so we can run the network. We commit never to use it to join your network or
read your traffic.
What we collect: what we need to run the network. That means device names, keys, addresses, software and health
facts, the people in your org, and security logs. Section 3 lists all of it.
What we don't do: we don't sell your data, show ads, or train AI on your data. The apps have no analytics or
crash reporters. The website sets no cookies of its own.
Your org controls its network data. On the hosted service we act on its instructions. We also make aggregated or
de-identified statistics to improve Tartan.
Deletion: ask your org's admin, or email privacy@tartannetworks.com. Today we handle requests by hand and aim to
finish within 30 days. Some security records and backups last longer, and section 7 says which.
Changes: every change goes in a dated changelog. Big ones appear in the console 30 days before they take effect.
We won't widen how we use data we already hold unless you consent.
1. Who we are
TechSolve LLC is a Kentucky limited liability company ("TechSolve", "we", "us") and the maker of Tartan
Networks ("Tartan"). Our address is 187 Pavilion Pkwy #131, Newport, KY 41071, and you can reach us at privacy@tartannetworks.com.
This policy covers:
our website, tartannetworks.com;
the hosted Tartan service: the control plane, console, lighthouses, relays, org DNS and certificates;
the Windows agent;
the Tartan Mobile app for Android.
Where we offer the hosted service. For now, we offer the hosted service to organizations outside the European
Economic Area and the United Kingdom.
2. Our role
For your org's network data on the hosted service, we are a processor. US state law calls this a "service
provider".
We act for the organization that uses Tartan, which is the controller, under our
Terms and our
Data Processing Addendum. The addendum applies to every org on the hosted
service.
If you use Tartan through your employer or another organization, that organization decides how your data is used,
and its own privacy notice applies too. Send your requests to that organization first. We will help it respond.
We are the controller for:
our website;
the record of who agreed to our terms;
security and abuse prevention;
support and business communications;
billing, once we bill;
the aggregated or de-identified statistics described in section 4.
If your org runs its own control plane (self-hosted), we receive none of its network data.
3. What we collect
3.1 People in an org (hosted service and console)
Name and identifier: a display name, plus either a short handle or, if your org uses its own sign-in provider
(such as Microsoft or Google), the email and account identifier that provider gives us.
Passkeys: the public key of each passkey, and facts about it: the authenticator model identifier, whether it is
synced or backed up, and its attestation format. We never receive or store passwords, private keys or biometrics.
Your fingerprint or face stays on your device.
Sessions: when you signed in and when you were last active.
Admin device requests: when someone asks to use a device as an admin, we record the device's name and operating
system, the person, the time and the IP address the request came from. Approvers use these to check the request.
Membership: invitations, roles and group memberships.
Agreement records: who accepted which version of our terms, for which org, and when.
3.2 Devices (Windows agent, Tartan Mobile and other software)
Device name. On Windows this is the computer name. On a phone it is the name you give it, which starts as your
phone's name. It often contains a person's name (for example "Jane's Pixel"), and you can change it.
Software facts. These are sent when a device joins and at each check-in:
the agent or app version;
the OS family ("windows" or "android"; not the OS version);
the CPU architecture;
the Nebula version;
the type of key storage used;
on Windows only, the file paths of the device's Nebula keys and the name of its network adapter.
Keys. Each device's public keys and certificates. Private keys are created on the device and never leave it.
Where the device supports it, they are kept in its hardware-backed keystore.
Addresses:
the network address each device is assigned in your org;
the public IP address and port it connects from;
its local network addresses. Devices report these so that devices on the same local network can connect directly.
Lighthouses share them with the other devices in your org.
Health and events. These are sent at each check-in: whether the tunnel is up, the result of the last
configuration change, and short technical event messages. None of them contain your traffic.
What the software does not collect:
the contents of your traffic;
your browsing;
the names you look up in DNS;
your location, contacts or files;
your Windows username, serial number or hardware MAC address.
The software contains no analytics, advertising or crash-reporting code.
Optional RMM hook (Windows). If your org turns this on, the Windows agent writes the computer's overlay address
into your org's own remote-management (RMM) tool. That tool belongs to your org, not to us, and the hook is off by
default.
Android permissions. The app uses:
network access and network state, to connect and to find the Wi-Fi or mobile network's DNS servers;
a foreground service and notifications, to keep the tunnel running and show its status;
the camera, only while you scan a join QR code. The image is processed on the phone and never sent anywhere.
DNS on Android. While Tartan Mobile is connected, Android sends the phone's DNS lookups to a resolver inside the
app, on the phone.
The resolver answers names in your org's own zone itself.
It forwards every other lookup, unchanged, to the DNS servers of the Wi-Fi or mobile network you are using. Those
forwarded lookups go over that network and are not encrypted.
Lookups never reach us. The app does not log or keep the names it looks up.
We plan to encrypt forwarded lookups in a later version.
If you set Android's Private DNS to a specific provider, Android may send lookups to that provider instead.
3.3 Org configuration
We hold your org's:
name and zone;
devices and groups;
access rules;
grants it makes to other orgs or receives from them;
the DNS names it publishes.
Some of this is public by nature:
Your org's DNS zone is served by public DNS.
Certificates we obtain for your zone from Let's Encrypt are recorded in public Certificate Transparency logs,
permanently, as every public certificate is.
Our public transparency registry lists organization-level records: an org identifier, its type, timestamps and signed
metadata. It does not list people.
3.4 Security and operations logs
Audit log: a tamper-evident record of administrative actions. It records who did what, to what, and when, and it
names the person who acted.
Certificate records: each certificate issued to a device, kept in a certificate archive after it expires.
Web server logs: each request to the control plane records the time, the IP address and the result. We do not
log request headers or bodies.
Network edge logs: lighthouses and relays see the public IP addresses of the devices that connect to them, and
may log connection events.
Splash pages: we log the time, the requested hostname (SNI) and the result.
Alerts: operational alerts about our own systems.
Rate limits: we use IP addresses in memory to limit abuse of sign-up and enrolment.
3.5 Website
Our website sets no cookies of its own. It has no analytics, advertising or forms.
It is hosted by Cloudflare, which processes request data such as your IP address and browser type in order to serve
and protect the site.
3.6 When you contact us
If you email us, we use your email address and message to reply, and we keep them as business records.
4. How we use data
We use data to:
provide the Service: run your network, sign certificates, answer DNS, show your console and deliver updates;
keep it secure: authenticate people and devices, approve admins, detect and stop abuse, and keep audit records;
support you: answer requests and fix problems;
meet legal obligations and enforce our terms;
improve Tartan. In addition to running the service, we create aggregated or de-identified statistics, such as
counts of devices, versions in use, error rates and performance figures. They are designed not to identify any
person, device or org.
We keep and use de-identified information only in de-identified form.
We will not attempt to re-identify it, except to test that our de-identification works.
We contractually require anyone we share it with to make the same commitments.
What we do not do.
We do not sell personal data.
We do not "share" it for cross-context behavioural advertising.
We do not use it for advertising or profiling.
We do not use it to train AI models, whether ours or anyone else's.
We do not make decisions about you based solely on automated processing that have legal or similarly significant
effects.
<!-- /data-use -->
Legal bases (EEA and UK, where they apply).
For our controller processing we rely on:
our legitimate interests in running, securing and improving a service your organization chose;
performance of our contract with your organization;
compliance with law.
Where we act as processor, your organization's legal basis applies.
5. Who we share data with
Your org. Your org's Owners and Admins can see its people, devices, addresses and audit log in the console.
Other devices in your org learn the addresses they need to connect to yours.
Orgs you share with. If your org grants another org access, that org can see the granted devices and resources,
as configured.
Your org's sign-in provider, if your org uses one. Your org chooses it, and it handles your sign-in under its own
terms.
Your org's RMM tool, if your org turns on the optional hook (section 3.2).
App stores. Google Play handles app downloads and updates under its own privacy policy.
The law. We share data when the law requires it, or to protect people from serious harm. Where we lawfully can,
we tell the affected org first.
Business transfers. If TechSolve is sold, merged or reorganized, data may pass to the successor. The successor
remains bound by this policy.
6. Where data is stored
The hosted service runs in Microsoft Azure data centres in the United States, and backups are kept in a second US
region.
If you are outside the United States, your data is transferred there.
Our DPA sets out the safeguards, including the European Commission's Standard Contractual Clauses, that apply if
EEA, UK or Swiss data reaches us.
7. How long we keep data
This table describes what our systems do today. Where we are building something shorter, the row says so.
Data
Kept for
Endpoint and mobile device records
The record stays while the device is in use. A device unseen for 60 days is marked dormant, then forgotten about 90 days later. It is not forgotten if it still has a live certificate or holds DNS or configuration. An admin can also remove it at any time. Forgotten and removed devices are copied to a device archive, which is not yet purged automatically. We are building a 12-month limit.
Infrastructure devices (edge, lighthouse, relay)
Until an operator removes them.
Device events
30 days.
People and roles
While the person belongs to an org. When a person is removed, their record is marked removed and their passkeys and sign-in identities are deleted. Their display name and identifier stay on the record, because the audit log refers to it.
Sessions
Revoked when they end or the person is removed. Revoked sessions are not yet purged. We are building that.
Admin device requests
Pending requests expire after 24 hours. Approved requests, including the requester's IP address, are kept while the device is an admin device and are not yet purged after that. We are building a 12-month limit.
Certificate records
Kept in a certificate archive as security records.
Audit log
Append-only. Entries are not deleted, and an export is kept unalterable for 365 days.
Agreement records
While the org exists, and 6 years after it is deleted.
Web server and edge logs
No fixed limit is set yet. We are setting a 30-day limit.
Operational alerts
30 days.
Database backups
Point-in-time recovery for 14 days and nightly backups for 90 days. Backups are write-once, so deleted data persists in them until they expire.
Transparency registry
3 years.
Certificate Transparency entries
Permanent and public. We don't control them.
Emails with us
As long as the request needs, and up to 3 years.
8. Your choices and rights
Remove a device.
In Tartan Mobile, leave the network.
On Windows, uninstall the agent with the purge option.
Or ask your admin to remove the device.
Uninstalling the app or agent deletes the data on the device. Your org's record of the device stays until an admin
removes it or it ages out (section 7).
If you use Tartan through an organization, we pass your request to that organization's Owner and act on the
Owner's instruction.
If the organization no longer exists or has no Owner, we handle your request ourselves.
Your legal rights. Depending on where you live (for example California or another US state with a privacy law),
you may have the right to:
access your personal data or get a copy of it;
correct it;
delete it;
restrict or object to processing;
port it to another service;
not be discriminated against for using these rights.
Email privacy@tartannetworks.com to use these rights. We will verify your request and answer within the time the law
requires. You may use an authorized agent where the law allows.
We do not sell or share personal data for advertising, so there is nothing to opt out of.
9. Security
We protect data with:
end-to-end encryption between devices;
passkey-only sign-in;
hardware-backed keys where available;
per-org isolation in our database;
encryption in transit;
a tamper-evident audit log;
write-once backups;
limited, logged staff access.
On the hosted service, we keep your org's network certificate authority in managed key stores. We use it only to issue
your org's certificates and configuration.
Tartan is for organizations and for people aged 18 and over. We do not knowingly collect personal data from children.
If you believe a child's data has reached us, email privacy@tartannetworks.com and we will delete it.
Material changes are shown in the console to each org's Owners and Admins at least 30 days before they take effect.
We will not use personal data in a materially broader way than this policy describes without consent. That
includes any sale, advertising or AI training. Any such change:
applies to an org only after one of its Owners accepts it explicitly in the console;
applies only to data collected after it takes effect;
reaches data we already hold only with the consent of the people concerned, or of their organization where the law
allows.
Continued use of Tartan never counts as that consent.
<!-- /data-use -->