Last Updated: October 2025

1. Information We Collect

1.1 Account Information

When you create an account with TabSmart, we collect:

• Email address - Required for account creation and communication
• Password - Securely hashed and stored for authentication
• User ID - Unique identifier generated for your account
• Extension ID - Chrome extension identifier for device linking

1.2 Tab Data (Core Service)

To provide our AI-powered tab organization service, we collect:

• Tab URLs - Web page addresses for content analysis
• Tab titles - Page titles for grouping context
• Tab content - Text content from web pages (can be customized in the BYOK subscription tier
• Browser information - Browser type and version
• Grouping preferences - Your custom grouping instructions and settings

1.3 Usage Analytics

We track usage patterns to improve our service:

• Request timestamps - When grouping requests are made
• Response times - Service performance metrics
• Model preferences - Which AI models you choose to use (BYOK users only)
• Error logs - Technical issues for debugging (no personal data included)

1.4 Subscription Information

For paid subscriptions, we collect:

• Subscription tier - Your chosen plan (BYOK or Full Service)
• Billing information - Processed securely through Stripe
• Payment history - Transaction records for billing purposes
• Trial status - Free trial expiration and usage

2. How We Use Your Information

2.1 Core Service Delivery

• AI Analysis - Process tab content to create intelligent groupings
• Tab Organization - Group your tabs based on content similarity and context
• Customization - Apply your personal grouping preferences and instructions
• Performance Optimization - Improve grouping accuracy and response times

2.2 Account Management

• Authentication - Verify your identity and secure your account
• Subscription Management - Process payments and manage your plan
• Customer Support - Respond to your inquiries and provide assistance

2.3 Service Improvement

• Analytics - Understand usage patterns to enhance our AI models
• Quality Assurance - Evaluate grouping accuracy and user satisfaction
• Feature Development - Build new capabilities based on user needs
• Performance Monitoring - Ensure reliable service delivery

3. Data Storage and Security

3.1 Data Storage

Your data is stored securely using industry-standard practices:

• Database - PostgreSQL database with encrypted connections
• Authentication - Supabase Auth with secure password hashing
• Payments - Stripe handles all payment data (we never store card details)
• Backups - Regular encrypted backups for data protection

3.2 Security Measures

• Encryption - All data transmitted using HTTPS/TLS encryption
• Access Controls - Strict access controls and authentication
• API Security - Secure API endpoints with proper authentication
• Regular Audits - Ongoing security assessments and updates

4. Data Sharing and Third Parties

4.1 AI Service Providers

We work with AI providers to process your tab data:

• OpenAI - For GPT models (if you choose to use them)
• Anthropic - For Claude models (if you choose to use them)
• Google - For Gemini models (if you choose to use them)

Important: When you use BYOK (Bring Your Own Key), your data is sent directly to your chosen AI provider using your API key. We do not store or access your API keys.

4.2 Service Providers

• Stripe - Payment processing (we don't store payment details)
• Supabase - Database and authentication services
• Render - Cloud hosting infrastructure

4.3 No Data Sales

We never sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

5.1 Account Data

• Account Information - Retained while your account is active
• Tab Data - Stored temporarily for processing, then deleted
• Usage Analytics - Aggregated data retained for service improvement
• Subscription Data - Retained as required by law and for billing

5.2 Deletion

You can request deletion of your data at any time. We will:

• Delete your account and personal information
• Remove all stored tab data
• Cancel your subscription (if applicable)
• Retain only anonymized usage data for service improvement

6. Your Rights and Choices

6.1 Access and Control

• View Your Data - Access your account information and settings
• Update Information - Modify your account details and preferences
• Delete Account - Request complete account deletion
• Export Data - Download your data in a portable format

6.2 Privacy Settings

• Content Extraction - Choose between title-only or full content analysis
• AI Model Selection - Use your own API keys or our managed service
• Custom Prompts - Control how AI processes your tab data
• Auto-clustering - Enable or disable automatic tab organization

7. Chrome Extension Permissions

Our Chrome extension requires specific permissions to function:

• tabs - Read tab information for organization
• tabGroups - Create and manage tab groups
• storage - Save your preferences and settings
• activeTab - Access current tab for analysis
• notifications - Alert you about trial status and updates
• scripting - Extract content from web pages
• webRequest - Monitor API communication

8. International Data Transfers

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Other appropriate safeguards as required by law

9. Children's Privacy

TabSmart is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification (for significant changes)
• Displaying a notice in the Chrome extension

11. Contact Us

12. Compliance

This Privacy Policy complies with:

• Chrome Web Store Developer Program Policies
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable privacy laws and regulations

---