Privacy Policy

1. Information stored locally by the App

TabTar may store the following information in an App-managed SQLite database on your device:

• saved Contexts, including page titles, sanitized URLs, selected Page Tags, mnemonic tags, categories, timestamps, and supported restorable state;
• textual Clipboard history, including text, timestamps, formats, and occurrence counts;
• App settings, interface language, organization history, trial timestamps, and activation state;
• model name and endpoint settings; and
• a signed activation receipt and the email address used to activate the App.

TabTar keeps no more than the 2,000 most recent Clipboard items. Clipboard text and Context data are stored locally and the SQLite database is not currently encrypted. A saved model API key is encrypted with the operating system's secure storage before its ciphertext is written to the database.

Local data remains until you delete it through TabTar or remove the App data yourself. Uninstalling the App may not automatically remove its data directory.

2. Page and Clipboard capture

TabTar observes textual Clipboard content while the App is running unless Clipboard capture is paused. It cannot recover Clipboard history created before TabTar started.

Page capture begins only when you explicitly start Create Context. TabTar attempts to remove credentials, sensitive URL parameters, and sensitive form fields before saving, but you should still review captured information before confirming it.

TabTar does not silently upload Contexts or Clipboard history to TabTar servers.

3. User-provided model endpoints

TabTar contacts a model endpoint only when you configure an OpenAI-compatible endpoint and explicitly test it or start AI Content Organization.

A connection test sends an authenticated request to the configured endpoint's /models route. AI Content Organization may send Context identifiers, display names, page titles, sanitized URL hostnames and paths, selected Page Tags, and mnemonic tags to the configured endpoint.

Clipboard text and page form values are not sent for AI organization. The API key is sent only in the authorization header to the endpoint you selected and is not included in organization content or App logs.

The endpoint operator processes these requests under its own privacy policy and terms. You are responsible for selecting and trusting that provider.

4. Website, purchase, and activation information

When you visit the website or use online features, TabTar and its infrastructure providers may process network and technical information such as IP address, browser or device information, request timestamps, security signals, rate-limit data, and error information.

When you purchase or activate TabTar, we may process:

• your email address and selected payment method;
• currency, amount, order status, and timestamps;
• provider checkout, order, payment, refund, or dispute identifiers;
• license status and activation attempts; and
• activation-email delivery status, attempts, provider message identifiers, and limited delivery errors.

The activation service processes the email address and activation code you submit. The server stores a cryptographic digest of the activation code rather than its plaintext value.

Full card details and WeChat payment credentials are entered with the payment provider and are not received or stored by TabTar.

5. Support communications

If you contact service@tabtar.com, we process your sender address, message, attachments, and related delivery metadata. Support email may be routed through Cloudflare and delivered to a separate mailbox provider used by TabTar.

6. How we use information

We use information to:

• provide downloads, purchases, activation, activation-code resend, and support;
• maintain trial and license status;
• confirm payments, handle refunds or disputes, and prevent duplicate purchases;
• protect the website and APIs against abuse, fraud, and unauthorized access;
• deliver transactional activation emails;
• diagnose failures and improve reliability; and
• comply with legal, tax, accounting, and regulatory obligations.

We do not sell personal information or use App content for advertising.

7. Service providers and disclosure

We may disclose limited information when necessary to:

• Cloudflare for website hosting, data storage, security, rate limiting, email sending, and email routing;
• Creem for international card checkout;
• ZPay and its connected payment channel for WeChat Pay;
• the model endpoint that you configure;
• email and support-service providers; and
• regulators, courts, law enforcement, or other parties when required by law or necessary to protect legal rights.

These providers process information under their own terms and privacy policies.

8. Retention

Local App content is retained on your device until you delete it, subject to the 2,000-item Clipboard limit.

Purchase, payment-event, license, activation, email-delivery, security, and support records are retained for as long as reasonably necessary to provide the license, handle support and disputes, prevent fraud, and meet legal, tax, or accounting obligations. We may keep records that applicable law requires us to retain even after a deletion request.

9. Security

We use reasonable safeguards such as HTTPS, restricted infrastructure bindings, signed payment webhooks, rate limiting, operating-system secure storage for model API keys, hashed activation codes, and signed activation receipts.

No storage or transmission method is completely secure. You are responsible for protecting your device, email account, activation code, model credentials, and local backups.

10. Your choices and rights

You can pause Clipboard capture for the current App session, delete Clipboard records, clear saved Clipboard history, edit or delete Contexts, and remove local App data.

Depending on applicable law, you may request access to, correction of, or deletion of personal information processed by TabTar, or object to or restrict certain processing. Contact service@tabtar.com to make a request. We may need to verify your request and may retain information where legally required.

11. International processing

Cloud infrastructure, payment providers, email providers, and a model endpoint selected by you may process information in countries or regions other than your own. Their processing is governed by their own policies and applicable safeguards.

12. Children

TabTar is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can take appropriate action.

13. Changes and contact

We may update this Policy to reflect changes to TabTar, our providers, or legal requirements. We will publish the updated Policy with a revised effective date.

For privacy questions or requests, email service@tabtar.com.