Privacy Policy

Last updated: March 9, 2026

Tabbit ("we", "our", or "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. What We Collect

When you use the Tabbit Chrome extension and Mac app, we may collect:

• Account information: Your name and email address obtained via Google Sign-In.
• Page content: A structured snapshot of the DOM on pages where you trigger a form fill or workflow. This includes visible field labels, input names, and the URL of the active page. We do not record your full browsing history.
• Context documents: Documents or text you explicitly provide as context for fill predictions. These are processed in real time and not stored on our servers.
• Google Sheets data: Cell values in the specific spreadsheet rows you ask Tabbit to fill, accessed only when you initiate a fill action. This data is not stored on our servers.
• Usage events: Basic telemetry (e.g., feature used, error type) to help us improve the product. No page content is included in these events.

2. How We Use Your Data

• To generate AI-powered form-fill predictions in response to your explicit requests.
• To authenticate you and manage your subscription.
• To improve Tabbit's accuracy and reliability.

We do not sell your data, use it for advertising, or share it with third parties except as described below.

3. Third-Party Services

• Google OAuth: Used for sign-in and, when you fill Google Sheets, to read and write spreadsheet data via the Google Sheets API. Governed by Google's Privacy Policy.
• OpenAI: DOM snapshots and context documents are sent to the OpenAI API to generate fill predictions. Data is processed under OpenAI's Privacy Policy. If you use the "Own Key" plan, your own OpenAI API key is used.
• Lemon Squeezy: Payment processing. We do not store your payment card details. Governed by Lemon Squeezy's Privacy Policy.

4. Data Retention

DOM snapshots, page content, and form data sent for processing are used only to generate the immediate prediction and are never stored on our servers. The only data we retain is your account information (name, email) and subscription status, which are kept while your account is active and deleted upon request.

5. Data Security

Your authentication tokens are stored in Chrome's local extension storage and are never transmitted to third parties. Your OpenAI API key (if provided) is encrypted at rest using AES-256 encryption before storage.

6. Children's Privacy

Tabbit is not directed at children under 13. We do not knowingly collect personal information from children.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by emailing hello@thetabbit.com. We will respond within 30 days.

8. Changes to This Policy

We may update this policy from time to time. We will post the revised policy on this page with an updated date. Continued use of Tabbit after changes constitutes acceptance.

9. Contact

Questions or concerns? Email us at hello@thetabbit.com.