Legal

Privacy Policy

Last updated: [DATE]

1. Who we are

This Privacy Policy explains how [LEGAL ENTITY NAME] (“TabHangar,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the TabHangar browser extension, website, account services, and related services (the “Service”).

Privacy contact: [PRIVACY EMAIL].
Registered address: [REGISTERED ADDRESS].

2. Information we collect

2.1 Account and authentication information

When you create or use an account, we may collect your email address, authentication identifiers, account status, login and security events, and information needed to provide account support.

2.2 Extension and workspace information

TabHangar is designed to save and organize browser tabs. Depending on the features you use, this may include tab URLs, page titles, window and workspace structure, snapshot timestamps, settings, and labels.

By default, snapshots are intended to be stored locally in your browser. [CONFIRM WHETHER ANY TAB OR WORKSPACE DATA IS SENT TO OUR SERVERS, AND DESCRIBE EXACTLY WHAT IS SENT.]

2.3 Payment and purchase information

Payments are processed by Stripe. We may receive purchase, subscription, invoice, refund, payment-status, and Stripe customer identifiers. We do not receive or store your full payment-card number. Stripe processes payment details under its own privacy terms.

2.4 Device and technical information

We may receive technical information needed to operate and secure the Service, such as browser and extension version, operating system, approximate location derived from an IP address, IP address, timestamps, diagnostic logs, and security or abuse-prevention signals.

[CONFIRM WHICH OF THESE SIGNALS ARE CURRENTLY COLLECTED, HOW LONG THEY ARE RETAINED, AND WHETHER DEVICE OR INSTALLATION IDENTIFIERS ARE USED.]

2.5 Support communications

If you contact us, we collect the information you choose to provide, such as your email address, message, attachments, and relevant account or technical details.

2.6 AI and third-party feature data

If you use an AI-assisted or other third-party feature, the feature may transmit the minimum information needed to provide that feature to the relevant provider. We will describe the applicable data flow in the feature and update this Policy when necessary.

[LIST EACH AI PROVIDER, THE DATA SENT, THE PURPOSE, AND WHETHER USERS CAN OPT OUT.]

3. How we use information

We use information to:

• provide, maintain, and personalize the Service;
• authenticate accounts and determine Free, trial, and Pro access;
• process purchases, subscriptions, cancellations, and refunds;
• send service, security, billing, and support communications;
• prevent fraud, trial abuse, unauthorized access, and misuse;
• diagnose errors, protect security, and improve reliability; and
• comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use browser data for behavioral advertising. We do not use information received from browser APIs for purposes unrelated to the disclosed functionality of the extension.

4. Legal bases for processing

Where applicable law requires a legal basis, we rely on one or more of the following: performing a contract with you, complying with legal obligations, pursuing legitimate interests such as security and service improvement, and your consent where consent is required.

5. How we share information

We may share information with:

• Supabase or our hosting/database provider for authentication, account data, and server-side records;
• Stripe for payment processing, subscriptions, invoices, and refunds;
• [AI PROVIDER NAMES] only when you use an AI feature that requires the transfer;
• service providers that help with hosting, security, email, support, analytics, or error monitoring, if used;
• professional advisers, authorities, or other parties where required by law or necessary to protect rights and safety; and
• a successor in a merger, acquisition, financing, or sale of assets, subject to applicable law.

We require service providers to process information only for permitted purposes and to protect it appropriately.

6. International transfers

We and our service providers may process information in countries outside your country of residence. Where required, we use legally recognized safeguards for international transfers, such as an adequacy decision or standard contractual clauses.

[CONFIRM THE COUNTRIES OR REGIONS USED BY SUPABASE, STRIPE, EMAIL, ANALYTICS, AND AI PROVIDERS.]

7. Data retention

We retain information for as long as reasonably necessary for the purposes described in this Policy, including providing the Service, maintaining financial and legal records, resolving disputes, and preventing abuse.

Account, payment, security, and support records are retained for [RETENTION PERIOD OR RETENTION CRITERIA]. Locally stored browser snapshots remain under your control and can be deleted through the extension or browser controls.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data-protection authority.

To make a request, contact [PRIVACY EMAIL]. We may need to verify your identity before completing a request. We will respond within the time required by applicable law.

You may stop receiving non-essential marketing messages by using the unsubscribe option in the message. Transactional, security, and service notices may still be sent when necessary.

9. Security

We use reasonable technical and organizational measures designed to protect information. No online service, browser storage system, or transmission method is completely secure. You are responsible for protecting your account credentials and device.

10. Children

The Service is not directed to children under [MINIMUM AGE]. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information to us, contact [PRIVACY EMAIL].

11. Cookies and similar technologies

We use essential technologies needed to operate the website, account, security, and checkout flows. [CONFIRM WHETHER NON-ESSENTIAL ANALYTICS OR ADVERTISING TECHNOLOGIES ARE USED.] If we use non-essential technologies that require consent, we will request consent where required by law.

12. Third-party services and links

The Service may link to or integrate with third-party services. Their privacy practices are governed by their own policies. Review the policies of Stripe, Supabase, browser stores, and any AI or analytics provider before using the relevant feature.

13. Changes to this Policy

We may update this Policy when our data practices, the Service, or applicable law changes. We will post the updated version and revise the “Last updated” date. If required, we will provide additional notice or obtain consent.

14. Contact

Privacy questions and rights requests should be sent to [PRIVACY EMAIL].