The fine print, in plain sight

Legal

Privacy Policy

  • 14 sections
On this page
  • We collect what we need to run your account and the service.
  • We do not sell or rent your personal information for money. If you accept advertising cookies, advertising partners receive limited identifiers. You can say no at any time.
  • What other users see (public workspaces, shared tabs, messages) depends on what you choose to share.
  • We share data only with providers that help us run Tabmydata, when the law requires it, or to protect rights and safety.
  • You can ask us to access, update or delete your data. Write to support@tabmydata.com.

1. Introduction

Tabmydata ("we", "our", "us" or "the Platform") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store and protect your data when you use our website and services.

Who is responsible. Tabmydata is a service owned and operated by Shining Dawn FZ-LLC (licence no. 47024036, Ras Al Khaimah Economic Zone, RAKEZ), VUPR1291, Compass Building – Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Shining Dawn FZ-LLC is the data controller. Contact: support@tabmydata.com. See also the Terms.

By using Tabmydata you confirm that you have read this Privacy Policy. Where we need your consent, such as for marketing emails or non-essential cookies, we ask for it separately.

2. Information we collect

We may collect these types of information:

  • Personal information. Your name, email address, payment details (only if you buy a paid plan, handled by our payment processor) and account credentials, when you register or subscribe. If you sign in with Google, we receive from Google the basic profile details you allow, such as your name and email address.
  • Usage data. How you use the Platform, including your IP address, browser type, device information and the pages you visit.
  • Profile information. A display name and an avatar, if you add them.
  • Content and communications. Workspace names, descriptions and cover images, saved lists, messages you send and receive, your friend connections and the members you block.
  • Alert and notification settings. How you choose to receive alerts, including a Discord webhook URL or a push notification subscription if you add one, and the email address alerts go to.
  • Cookies and tracking. We use cookies and similar technologies to make the Platform work and, only if you accept them, to analyze usage and to personalize your experience. Our analytics providers are Google (Google Analytics through Google Tag Manager; data processed in the USA among other places) and PostHog (product analytics, US region). They receive identifiers such as a cookie ID, your IP address and the pages and events you use, so we can measure usage. See our Cookie Policy.

3. How we use your information

We use the information we collect to:

  • Provide and improve our services.
  • Manage user accounts and authentication.
  • Process payments and subscriptions.
  • Send updates, notifications and marketing communications, if you opt in.
  • Detect, prevent and address security or technical issues.

Legal bases (for users in the EU, UK and similar regions).

  • Running your account and the service: to perform our contract with you.
  • Security, fraud prevention and improving the service: our legitimate interests.
  • Marketing emails: your consent. You can withdraw it at any time.
  • Non-essential cookies (analytics, advertising): your consent, given through the cookie banner.
  • Meeting legal obligations: legal obligation.

Do Not Track and Global Privacy Control. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a request not to use non-essential tracking: we load no analytics or advertising tags for you.

DataSourcePurposeLegal basisKept
Account (email, credentials, name)You, or Google if you use itRun your account, sign you inContractWhile the account is open, then 30 days
Usage and device (IP, browser, pages)Your deviceSecurity, fix errors, improve the serviceLegitimate interests (analytics: consent)Up to 90 days for logs
Profile (display name, avatar)YouShow you to others where you chooseContractWhile the account is open
Messages, friends, blocksYou and other usersRun these featuresContractDeleted with the account
Workspaces, lists, alert settingsYouRun the serviceContractWhile the account is open
Cookie choiceYour deviceRemember your choiceStrictly necessaryUp to 12 months
Analytics and advertising identifiers (Google Analytics, PostHog, Google advertising features)Your device, only if you acceptMeasure usage, show and measure adsConsentSee the Cookie Policy
Marketing emailsYou (opt-in)Send updatesConsentUntil you unsubscribe

We do not make decisions about you based solely on automated processing that have a legal or similarly significant effect. You do not have to give us personal data, but you need an account to use most features.

4. Data sharing and disclosure

We do not sell or rent your personal information to third parties for money. We share data only in these cases:

Advertising cookies and "sharing". If you choose Accept (or switch Advertising on in Cookie preferences), Google's advertising features (our Google Analytics property is linked to a Google Ads account) can set cookies and receive limited identifiers and browsing activity from our site, to show and measure ads. Under some laws, such as California's, this can count as "sharing" personal information for cross-context behavioural advertising, or as a "sale". You can opt out at any time: choose Decline in the cookie banner, switch Advertising off in Cookie preferences (footer link), or use a Global Privacy Control or Do Not Track signal, which we treat as an opt-out of all non-essential tracking (analytics and advertising). We do not knowingly share the personal information of anyone under 18.

  • With trusted service providers that help us operate the Platform. These include hosting, sign-in (including Google), email delivery, analytics (Google Analytics and Google Tag Manager, PostHog), Google's advertising features, payment processing and alert delivery services (Discord, email and push). The company that builds and supports the website and platform (Kapara) also acts as our technical service provider.
  • If we are involved in a merger, acquisition or sale of assets. We will tell you before your data becomes subject to a different policy.
  • When required by law, regulation or legal process.
  • To protect the rights, property or safety of Tabmydata, our users or the public.

What other users can see is controlled by what you choose to share:

  • Public workspaces. If you make a workspace public, its card (name, description, cover image, number of tabs and last-updated date) can be seen by other users in the workspace gallery. Viewing the full workspace requires a login. You can switch it back to private at any time.
  • Shared tabs and workspaces. People who have your sharing link can view what you shared.
  • Profile. Your display name and avatar are visible to other users where you share or message.
  • Messages and friends. Your messages are visible to the people you send them to. Friends and blocked members are used to run these features.
  • Discord webhook, email and push. Personal alerts you ask us to send leave our systems and are handled by those services under their own terms. For the Discord webhook, keep the URL private. Our public Telegram channel is a broadcast channel for market-wide alerts. It does not carry personal alerts and we send it no personal data.

5. Data security

We use measures appropriate to the risk to protect your data, such as encryption in transit and access controls. No system is completely secure, and we cannot guarantee absolute security.

6. Data retention

We keep your personal information only as long as needed to provide our services or meet legal obligations. When we no longer need it, we securely delete or anonymize it. When you delete your account, we delete or anonymize your profile, workspaces and messages within 30 days, except what we must keep by law. Backups are kept for up to 90 days, and server logs for up to 90 days. Records the law requires us to keep are kept for the period the law requires.

7. Your rights

Depending on where you live, you may have the right to:

  • Access, update or delete your personal data.
  • Restrict or object to certain processing of your data.
  • Ask for your data in a portable format (data portability).
  • Withdraw your consent to marketing communications, and to non-essential cookies, at any time.
  • Object to processing that is based on our legitimate interests.
  • Complain to the supervisory authority in your country, or in the UK to the Information Commissioner's Office.

To use these rights, write to support@tabmydata.com. We reply within one month (up to 45 days for California residents), or within the time the law requires. We may extend by up to two further months where a request is complex. We may need to confirm your identity first.

California residents may ask what personal information we collect, and may ask us to delete or correct it. They may also opt out of the "sharing" or "sale" of personal information for advertising: choose Decline in the cookie banner, switch Advertising off in Cookie preferences, or use Global Privacy Control or Do Not Track. We will not treat you differently for using these rights. An authorized agent can send a request for you. We respond within 45 days. We use your sign-in credentials only to provide the Services.

8. International data transfers

We operate globally, so your information may be processed and stored in countries outside your own. Our analytics and advertising providers (Google, PostHog) process data in the USA. Where we transfer personal data from the EEA or the UK to a country without an adequacy decision, we use safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum. You can ask us for a copy.

The Platform may link to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.

10. Children's privacy

Our services are not directed to anyone under 18. We do not knowingly collect personal information from minors. If we learn that we hold such data, we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post changes on this page with a new "Last updated" date. If you keep using the Platform after a change, you accept the revised policy. For significant changes, we will also notify you by email or in the app.

12. Contact us

For questions or concerns about this Privacy Policy, or to reach the data controller (Shining Dawn FZ-LLC, operating Tabmydata), write to support@tabmydata.com.