Privacy Policy

1. Introduction

Welcome to Tabenspace. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our Chrome extension, website, and related services.

By using Tabenspace, you agree to this Privacy Policy. If you do not agree, please do not use our service.

2. Who We Are

3. Age Restrictions

4. Chrome Extension

Tabenspaceis primarily delivered as a Chrome extension that replaces your browser's New Tab page with a personal dashboard of tiles (shortcuts) and categories.

• Local storage: When signed in, auth tokens are stored in chrome.storage.localso your session persists across browser restarts. UI preferences may be stored in the browser's local storage.
• IndexedDB cache: Tiles and categories are cached on your device (IndexedDB) so your dashboard loads quickly and can show recently synced data offline.
• Guest / trial mode: Without an account, tiles may be stored locally on your device only until you sign in and choose to sync.
• Network access: The extension communicates with *.tabenspace.com (including our API) to authenticate you and sync your tiles and categories. We do not load or execute remote code in the extension.
• Permissions: We request the storage permission for auth tokens and host access to Tabenspace domains required for API sync. We do not read your browsing history or access unrelated websites.

5. Information We Collect

5.1 Information You Provide

• Account Information: Email address, name, profile picture/avatar
• Authentication Data: Email and password (passwords are handled by our auth provider; we do not store plain-text passwords). Session access and refresh tokens are issued for API authentication.
• User-Generated Content: Tiles (bookmarks/shortcuts), categories, and optional custom tile icons you upload
• Communication Data: Support requests, feedback you send us

5.2 Information Collected Automatically

• Usage Data: Basic server logs when you use our API (e.g. request timestamps, endpoints accessed) for reliability and security
• Device Information: IP address, browser type, and operating system may be recorded in standard server or auth logs
• Cookies & local storage: Our API may set session cookies during authentication. The extension stores tokens in chrome.storage.local. Theme and app preferences may use browser local storage. See our Cookie Policy.

5.3 Information from Third Parties

• Currently, we do not receive sign-in data from social OAuth or payment providers. Third-party data is limited to infrastructure providers listed in Section 7.

6. How We Use Your Information

We use your personal data for the following purposes:

• Service Delivery: Create and maintain your account, authenticate your identity, and provide core functionality (tiles and categories on your New Tab dashboard)
• Sync & storage: Store and sync your tiles and categories between your devices via our API, and cache data locally in the extension for performance
• Communication: Send transactional emails (account verification, password resets, important updates), provide customer support
• Security: Detect and prevent unauthorized access, abuse, spam, and security threats
• Legal Compliance: Comply with legal obligations, enforce our Terms of Service

7. How We Share Your Information

We share personal information with the following third-party service providers only as needed to operate Tabenspace:

We may also disclose information when required by law (subpoenas, court orders) or to protect our rights and prevent fraud.

8. Data Retention & Deletion

We retain your personal information only as long as necessary:

• Active Accounts: For the duration of your use of Tabenspace
• Deleted Accounts: When you delete your account, we remove your profile, tiles, and categories from our servers promptly. Deletion is permanent — there is no grace-period recovery.
• Local extension data: Cached tiles and tokens on your device remain until you clear extension storage, uninstall the extension, or sign out (which clears auth tokens).
• Legal Requirements: We may retain minimal records if required by law

9. Data Security

We implement appropriate security measures to protect your personal information:

• Encryption in Transit: All data transmitted is encrypted using HTTPS/TLS
• Encryption at Rest: Passwords and sensitive data are handled by our auth and database providers using industry-standard protection
• Access Controls: Access to production data is limited to authorized personnel only

10. Your Privacy Rights

10.1 For EU/EEA Users (GDPR)

If you are in the European Economic Area, you have the following rights:

• Right to Access: Request a copy of your personal information
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Limit how we use your information
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

10.2 For California Users (CCPA/CPRA)

If you are a California resident, you have the following rights:

• Right to Know: Request information about data we've collected in the past 12 months
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out: We do NOT sell your personal information
• Right to Non-Discrimination: We won't discriminate for exercising your rights

11. Cookies & Local Storage

We use cookies, browser local storage, and extension storage to provide Tabenspace:

• Authentication: Session cookies on our API and/or tokens in chrome.storage.local for signed-in extension users
• Preferences: Theme and UI settings stored locally in your browser
• Offline cache: IndexedDB in the extension for tiles and categories

For more detail, see our Cookie Policy.

12. Third-Party Links & Services

Tabenspace may contain links to third-party websites (e.g. sites you save as tiles). Opening a tile navigates you to that site under its own privacy policy.

13. International Data Transfers

Tabenspace is operated from India, but we use service providers located in the United States and other countries. Your information may be transferred to and processed in countries with different data protection laws.

For EU users, we use Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate protection during international transfers where applicable.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements (including when we add features such as social sign-in or paid plans).

We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last updated" date
• Sending an email notification for significant changes
• Displaying a prominent notice on the website

Your continued use of Tabenspace after changes are posted constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have questions about this Privacy Policy, want to exercise your privacy rights, or have concerns about how we handle your data, please contact us: