TabStax Privacy Policy

Effective Date: January 6, 2025
Last Updated: January 6, 2025

Introduction

TabStax DBA Flout Ltd ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our browser extension.

Information We Collect

1. Information You Provide

• Account Information: Email address and password (for optional cloud sync features)
• Tab Groups (Stax): URLs, page titles, and custom names for your saved tab groups
• Start Here! Notes: Markdown notes you create for each Stax
• Payment Information: Processed directly by Stripe; we do not store credit card details

2. Information Automatically Collected

• Usage Data: When you save, load, or share Stax (no background tracking)
• Extension Version: For compatibility and support
• Authentication Tokens: Stored locally for maintaining your session

3. Information We Do NOT Collect

• ❌ Browsing history (only tabs you explicitly save)
• ❌ Personal information beyond email
• ❌ Location data
• ❌ Cookies or tracking pixels
• ❌ Background tab activity
• ❌ Page content (only URLs and titles)

How We Use Your Information

We use your information to:

• Provide Core Functionality: Save and restore your tab groups
• Enable Cloud Sync: Sync your Stax across devices (optional, requires account)
• Process Payments: Handle Pro subscriptions via Stripe
• Provide Support: Respond to your support requests
• Improve Service: Fix bugs and enhance features

Data Storage and Security

Where Your Data Lives

• Local Storage: By default, all Stax are stored locally in your browser
• Cloud Storage: Only if you create an account and sign in
• Database: Supabase (PostgreSQL with Row Level Security)
• Infrastructure: All data transmitted via HTTPS encryption

Data Retention

• Local Data: Remains until you delete it or uninstall the extension
• Cloud Data: Retained while your account is active
• After Account Deletion: All data permanently deleted within 30 days

Data Sharing

We share your data only with:

Service Providers

• Supabase: Database and authentication (encrypted storage)
• Stripe: Payment processing (PCI compliant)
• Resend: Transactional emails (account verification only)

Other Circumstances

• Legal Requirements: If required by law or legal process
• Your Consent: With your explicit permission
• Public Shares: Stax you explicitly choose to share

We NEVER:

• ❌ Sell your personal data
• ❌ Share with advertisers
• ❌ Use for marketing without consent
• ❌ Transfer to third parties for their purposes

Your Rights and Controls

You have the right to:

Access Your Data

• View all your Stax in the extension
• Export your data via Settings → Data Management

Delete Your Data

• Local: Clear via extension settings or browser data clearing
• Account: Email support@floutlabs.com for account deletion
• Immediate: Delete individual Stax anytime via the extension

Manage Subscription

• Cancel anytime via Settings → Subscription Management
• Email billing@floutlabs.com for billing inquiries
• Cancellations processed within 24 hours

Data Portability

• Export all your Stax data in JSON format
• Download your Start Here! notes as markdown

Privacy for Specific Features

Cloud Sync (Optional)

• Requires email verification
• Data encrypted in transit and at rest
• You control what syncs

Sharing Feature

• Creates public links only when you explicitly share
• Shared links contain only the Stax data you choose
• You can't unshare once shared (advise creating copies for sharing)

Free vs Pro Users

• Free users: Full local functionality, no data collection required
• Pro users: Payment info handled by Stripe, subscription status stored

Children's Privacy

TabStax is not intended for children under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

International Users

TabStax is operated from the European Union. By using TabStax, you consent to your data being processed in the United States. EU users have additional rights under GDPR.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Updating the "Last Updated" date
• Showing a notification in the extension
• Emailing registered users for significant changes

Contact Information

For privacy concerns or questions:

Email: privacy@floutlabs.com
Support: support@floutlabs.com
Mailing Address:
Flout Labs
Suite 100, Cave, Clarinbridge, Co. Galway, Ireland

Data Protection Officer

For GDPR inquiries: dpo@floutlabs.com

California Privacy Rights

California residents have additional rights under CCPA. To exercise these rights, email privacy@floutlabs.com with "California Privacy Rights" in the subject line.

Cookie Policy

TabStax does not use cookies. The extension uses browser.storage.local API for functionality, which is not accessible to websites or other extensions.

Compliance

This privacy policy complies with:

• Chrome Web Store Developer Program Policies
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Children's Online Privacy Protection Act (COPPA)

Remember: Your privacy is our priority. We collect only what's necessary to provide the service you request, and you always maintain control over your data.