## TabX Privacy Policy **Last Updated: September 22, 2026** This Privacy Policy explains what TabX ("TabX", "we", "us") collects, how we use it, where it goes, and the choices you have. It covers the TabX Chrome extension, our cloud services, and **[tabx.dev](https://tabx.dev)**. Questions or requests? Email **[tabindex1@gmail.com](mailto:tabindex1@gmail.com)**. **In plain terms:** TabX builds a private, searchable memory of the pages you read. The content of those pages is stored on our servers so you can recall it by meaning and ask AI about it. We do not sell your data. You can turn capture off and ask us to delete everything at any time. We are not certified under any privacy or security standard; this policy is an honest description of what we actually do. --- ## 1. What We Collect **Account information.** When you sign in through Clerk, using either your Google account or a one-time passcode (OTP) sent to your email, we receive your email address and, where your chosen method provides them, your name and profile picture, and we create an account for you. **The pages you index (the heart of TabX).** As you browse, TabX captures the page URL, title, visible text, favicon, and the time and length of your visit, and stores this in your private cloud memory so you can search and recall it. This is a change from older versions of TabX, which kept everything only on your device. **AI and search activity.** Your recall queries, @mention chat prompts, and web searches, along with the relevant page content, are processed to produce results. **Usage and metering.** We record which features you use and how often, partly to enforce free-tier limits and partly to understand and improve the product. **Payment information.** Payments are handled by Stripe. We receive your subscription status and billing details from Stripe, but we never see or store your full card number. **Device and log data.** When your browser talks to our servers, we may log your IP address, an approximate location derived from it, and basic device and browser information for security, debugging, analytics, and localizing web-search results. --- ## 2. What We Do Not Capture - Pages on restricted or sensitive URLs, such as chrome:// pages, the Chrome Web Store, and the extension's own pages, are skipped. - Capture is a setting you control. You can pause it at any time from within TabX. - TabX runs in Incognito only if you explicitly allow it in Chrome's extension settings. --- ## 3. How We Use Your Information We use it to: - build your searchable memory and power recall, summaries, @mention chat, timelines, stacks, and web search; - authenticate you and keep your session secure; - manage trials, the free-tier daily limit, subscriptions, and billing; - send you service messages, for example about your account or trial; - keep TabX reliable, debug problems, and improve features. We do not sell or rent your personal data, and we do not use your browsing content to advertise to you. --- ## 4. AI Processing To power summaries, chat, recall, and web search, TabX sends the relevant content and queries to third-party providers: - **AI models** through OpenRouter, which routes requests to underlying model providers. - **Web search** through Bright Data, Exa, and Serper for Online mode. These providers process the data to return your result and are bound by their own terms. We send only what a feature needs, and we do not sell your data. --- ## 5. Where Your Data Lives and How We Protect It - Your account data and cloud memory are stored in our own database, on cloud servers located in the United States. - Backups are encrypted and stored with Cloudflare R2. - Traffic between the extension and our servers is encrypted with HTTPS/TLS. - Captured content is de-duplicated, so the same page is not stored twice. - We follow reasonable security practices, but no system is perfectly secure, and we cannot guarantee absolute security. --- ## 6. The Providers We Rely On We share data only with the services needed to run TabX: - **Clerk** for sign-in and account management. - **Stripe** for payments. - **OpenRouter** and its model providers for AI features. - **Bright Data, Exa, and Serper** for web search. - **Cloudflare R2** for encrypted backups. - **BigDataCloud** to turn an approximate location into local web-search results. - **Sentry** for error diagnostics and **PostHog** for product and website analytics, including session replay on our website. - **Resend** for account and service emails. We may also disclose information if required by a valid legal request, or to protect our rights, our users, or the public. --- ## 7. How Long We Keep It, and How to Delete It - We keep your data for as long as your account is active or as needed to provide the Service. - You can remove captured pages from within TabX where that option is available, or email **[tabindex1@gmail.com](mailto:tabindex1@gmail.com)** to request deletion of your account and all associated data. We will honor reasonable requests promptly. --- ## 8. Your Choices and Rights - **Pause capture** at any time from within TabX. - **Access or delete** your data by contacting us. - Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. We are not certified under any specific framework, but we will make reasonable efforts to honor these requests. Contact **[tabindex1@gmail.com](mailto:tabindex1@gmail.com)**. --- ## 9. Analytics, Diagnostics, and Cookies We use **PostHog** for analytics and **Sentry** for error diagnostics — to understand usage, fix bugs, and improve TabX. They are never used to sell your data. - **Product analytics** (in the extension and our backend): which features you use and how often, tied to your account, so we can improve them. - **Website analytics** (on **tabx.dev**): the pages you view, how you arrived (the referring site or campaign link), an approximate location (country) from your IP, your device and browser type, and basic page-performance metrics. - **Session replay** (on **tabx.dev** only): we record your interactions with the website — page navigation, clicks, and scrolling — to diagnose issues and improve the site. Password fields are masked by default, and the site does not ask you to enter sensitive information. Session replay is not used in the extension. - **Cookies and local storage:** our website uses cookies and similar browser storage to run this analytics, and the extension stores data locally in your browser to function. You can control or clear cookies in your browser settings. --- ## 10. Children's Privacy TabX is not intended for anyone under 13. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it. --- ## 11. International Users Our servers are located in the United States, and the providers listed above may process data in other countries. By using TabX, you understand that your data may be processed outside your home country. This policy is a plain description of our practices; it is not a claim of compliance with, or certification under, the laws of any particular country. --- ## 12. Changes to This Policy We may update this policy from time to time. We will post the new version at **[tabx.dev/pp](https://tabx.dev/pp)** with an updated "Last Updated" date. Significant changes take effect when posted, and we encourage you to review the policy periodically. --- ## 13. Contact 📧 **[tabindex1@gmail.com](mailto:tabindex1@gmail.com)** 🌐 **[https://tabx.dev](https://tabx.dev)**