Legal

Privacy Policy

Last updated: 24 August 2026

Tangible is a GPU-compute marketplace. This policy explains what we collect, why, and the choices you have. We keep collection minimal and we do not sell your data.

The short version. We collect the account details you give us, basic usage analytics to run the product, and payment records for billing. We never sell your data or share it for advertising. Your files and compute workloads move directly between devices and are wiped after a session — we don't keep them.

1. Who we are

Tangible ("we", "us", "our") operates the Tangible desktop application and the website at tangible.rent. Tangible lets people rent GPU compute from, and share idle GPUs with, other users. For questions about this policy, contact us at privacy@tangible.rent.

2. Data we collect

2.1 Account information

When you create an account we collect your email address. If you sign in with Google, we receive your email address and basic profile information (name, profile picture) from Google — only what's needed to create and identify your account. We never receive or store your Google password.

2.2 Usage & product analytics

To operate and improve the service we collect limited, first-party analytics:

Pages visited on our website and in-app events (for example: a download, completing onboarding).
An anonymous visitor identifier stored in a first-party cookie (tangible_vid). It contains no personal information.
Approximate country, derived once from your IP address at the moment of a request. We do not store your IP address — it is used transiently to resolve country and then discarded.
Basic device/browser information (e.g. operating system, browser type) sent by your device.

2.3 Payment information

When you buy compute credits, payments are processed by our third-party payment provider. We receive a record of the transaction (amount, date, status, order ID) to maintain your credit balance and billing history. We do not receive or store your full card number — that is handled by the payment provider.

2.4 Your files and compute workloads

Files you transfer for a compute session (datasets, scenes, notebooks, project files) move directly between devices and do not pass through or get stored on our servers as part of normal operation. Session data on a rented machine is wiped when the session ends. We only handle metadata needed to coordinate a session (for example, session status and billing).

3. How we use data

To create and secure your account and sign you in.
To operate the marketplace — matching compute demand with supply, running sessions, and billing.
To understand product usage in aggregate and improve the service.
To detect, prevent, and investigate fraud, abuse, and security issues.
To communicate with you about your account, transactions, and important service changes.
To comply with legal obligations.

4. Google user data

If you sign in with Google, Tangible's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google account data only to authenticate you and create your Tangible account. We do not use it for advertising, do not sell it, and do not share it with third parties except as required to provide the service or by law.

5. How we share data

We do not sell your personal data. We share it only with:

Recipient	Purpose
Authentication provider (Supabase)	Account creation, sign-in, session management
Payment processor	Processing purchases and maintaining billing records
Cloud infrastructure (AWS)	Hosting the coordination service and website
Legal / safety	When required by law, or to protect users and the service

These providers process data on our behalf under their own security and privacy commitments.

6. Cookies

We use a small number of first-party cookies: one to keep you signed in, and one anonymous analytics identifier (tangible_vid). We do not use third-party advertising or tracking cookies. You can clear cookies in your browser at any time; doing so may sign you out and reset the anonymous analytics id.

7. Data retention

Account data — kept while your account is active; deleted on request (see §9).
Analytics events — raw events are automatically deleted after 45 days; only anonymized aggregate counts are kept longer.
Billing records — retained as required for financial and legal record-keeping.
Session files — not retained; wiped at session end.

8. Security

We use encryption in transit (HTTPS/TLS), scoped access controls, and short-lived credentials. Compute sessions run in isolated sandboxes and are wiped when finished. No system is perfectly secure, but we design to minimize what we hold and how long we hold it.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email privacy@tangible.rent and we will respond within a reasonable time. You can request account deletion at any time; this removes your account data subject to records we must keep by law.

10. Children

Tangible is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.

11. International transfers

We operate cloud infrastructure that may process data in regions outside your own. Where we transfer data internationally, we rely on appropriate safeguards to protect it.

12. Changes to this policy

We may update this policy as the product evolves. We'll change the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use after an update means you accept the revised policy.

13. Contact

Questions or requests: privacy@tangible.rent.