Privacy Policy

Tango is a research prototype in beta, developed as part of a student research assignment (HiWi) at the Chair of Software & Systems Engineering (Informatik 4) of the Technical University of Munich (TUM). Because it is experimental, this policy is intentionally strict and explicit: it lists every kind of data we process, the exact purpose, and where it is stored. Please read it carefully before you log in — your acceptance is required to use Tango.

1. Controller

The party responsible for processing your data is:

See the Imprint for full contact details.

2. What We Collect — Data, Purpose & Storage

We process the following categories of data. For each we state what it is, why we process it, and where it is stored.

• Identity & account data— your real name, email address, home organization, role (student / instructor) and a stable account identifier, received from the institutional single sign-on (Shibboleth / DFN-AAI / OneTutor) when you log in. Purpose: authentication and linking your sessions to your account. Stored:in Tango's application database (PostgreSQL) operated for the chair. Note that your real name from SSO is stored in this record even though it is never shown to other participants.
• Display name (chosen by you) — the name you type when joining a session. Purpose: to identify you to Tango and classmates within a discussion. Stored: in the session and user records in our database. This name is stored, so do not use your real name — pick a nickname.
• Discussion content — the messages, notes, shared code snippets and feedback you submit during prep and live sessions. Purpose: to run and moderate the discussion and for the associated teaching/research. Stored: in our database; the content is also transmitted to the AI providers listed in §3 to generate responses.
• Private tutor chat — messages you send to the OneTutor side chat, together with a short excerpt of the most recent live-discussion messages that is sent as context. Purpose: to answer your course questions with relevant context. Stored: by OneTutor as part of your course chat; the chat identifier is stored locally in your browser so the chat can be resumed.
• AI traces (Langfuse) — prompts sent to and responses received from the AI models are recorded as traces. Purpose: debugging and quality assurance while Tango is in beta. Stored: in Langfuse (see §3).
• Technical & log data — timestamps, request and error logs needed to operate and secure the service. Purpose: reliability and security. Stored: in server logs.

3. Third Parties & AI Processors

To operate Tango we share data with the following processors. We do not sell your data or use it for advertising.

• Anthropic (Claude models) — receives discussion and prompt content to moderate discussions and generate responses.
• OpenAI — receives content for AI generation/assistant features.
• OneTutor — provides authentication (SSO) and the course knowledge base; receives your tutor-chat messages and the discussion-context excerpt described above.
• Langfuse — receives prompts and model responses as traces for debugging during the beta.

4. Your Responsibilities — Keep It Anonymous

Because Tango is an experimental system that stores content and forwards it to third-party AI providers, you must protect your own privacy and that of others:

• Use a nickname as your display name — never your real name.
• Do not type personal, sensitive or identifying information (about yourself or anyone else) into any chat, note or code snippet — including names, contact details, IDs, health, or financial data.
• Keep contributions focused on the academic discussion topic.

5. Legal Basis

Processing is based on the performance of a task carried out in the public interest (Art. 6(1)(e) GDPR, Art. 4 BayDSG) and, where applicable, your consent (Art. 6(1)(a) GDPR), which you give before logging in and may withdraw at any time with effect for the future.

6. International Data Transfers

Some processors above (notably Anthropic, OpenAI and Langfuse) are based in or operate infrastructure in the United States. Where data is transferred outside the EU/EEA, the transfer is safeguarded by the European Commission's Standard Contractual Clauses (Art. 46 GDPR) and, where applicable, the EU–US Data Privacy Framework. You may request a copy of the relevant safeguards from the controller.

7. Retention

Session and discussion data is retained only as long as necessary for the course and associated research, after which it is deleted or anonymised. Inactive live sessions are evicted automatically. Debugging traces are kept only for the duration of the beta.

8. Your Rights

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing. To exercise these rights, contact the controller above. You also have the right to lodge a complaint with the Bavarian State Commissioner for Data Protection (BayLfD).

9. Changes

As a research prototype, Tango may update this policy. Material changes are reflected by the date and version below. The current policy version is 2026-06-26.