🔒 Privacy Policy

1. Introduction

TabZen ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how our Chrome extension and associated services collect, use, disclose, and safeguard your information.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Information Collected Locally (On Your Device)

The following information is collected and stored exclusively on your computer using Chrome's local storage:

• Tab Data: Tab titles, URLs, favicons, and metadata
• Workspace Configurations: Your saved workspace groups and organization settings
• Backup Versions: Historical snapshots of your tab states (5 versions free, 20 Pro)
• User Preferences: Extension settings, themes, memory thresholds, notification preferences
• Memory Statistics: Local memory usage calculations and performance metrics
• Extension Settings: Language, appearance, feature toggles, keyboard shortcuts

2.2 Information Collected When You Upgrade to Pro

When you choose to upgrade to TabZen Pro, we collect:

• Email Address: Required for subscription verification and account recovery
• Payment Reference: Transaction ID from Paystack for subscription tracking
• Subscription Status: Plan type (monthly/annual) and expiration date
• Device Information: Browser version and extension version (for compatibility)

2.3 Information Collected Automatically

• Browser Metrics: Number of tabs, memory usage, page load times (local analysis only)
• Extension Version: Current version of the extension installed
• Chrome Version: For compatibility and feature availability checking
• Usage Timestamps: When you create workspaces or trigger backups (stored locally)

3. How We Use Your Information

3.1 Primary Uses

• Core Functionality: Organizing, suspending, and managing your browser tabs
• Workspace Management: Saving, restoring, and displaying your custom workspaces
• Memory Optimization: Calculating and displaying memory savings from suspended tabs
• Crash Recovery: Detecting page reloads and recovering lost tabs
• Backup Management: Creating and restoring backup versions of your tab states

3.2 Pro Account Uses

• Subscription Verification: Confirming your Pro status to unlock premium features
• Feature Access: Enabling unlimited workspaces, advanced analytics, and priority support
• Subscription Renewal: Notifying you when your subscription is about to expire
• Payment Processing: Securely processing payments through Paystack

3.3 Legal Compliance

• Complying with applicable laws and regulations
• Responding to lawful government requests or court orders
• Protecting against fraud, security threats, or illegal activity

4. Third-Party Services

4.1 Paystack (Payment Processing)

When you upgrade to Pro, your payment information is processed through Paystack, a PCI-compliant payment processor.

• Data Shared: Email, payment card details, plan selection
• Purpose: Processing subscription payments
• Security: All payments use HTTPS encryption (TLS 1.2+)
• Storage: Paystack securely stores payment records separately

Paystack's Privacy Policy: https://paystack.com/privacy

4.2 Firebase / Google Cloud

We use Firebase (Google Cloud) to store Pro subscription data after payment:

• Data Stored: Email, subscription reference ID, plan type, expiration date
• Purpose: Verifying your Pro status across devices
• Security: Encryption at rest and in transit (HTTPS only)
• Access Control: Only our secure API servers can read this data (not the browser)

Google's Privacy Policy: https://policies.google.com/privacy

4.3 Vercel (API Hosting)

Our subscription verification API is hosted on Vercel:

• Data Processed: Payment reference, email (in transit only)
• Purpose: Verifying payments and managing subscriptions
• Logs: Request logs are stored for 7 days for security monitoring

Vercel's Privacy Policy: https://vercel.com/privacy

5. Data Security

5.1 Local Data Protection

• Storage Isolation: Chrome isolates extension storage from websites
• No Plain Text: Sensitive data (subscriptions) are stored encrypted
• Device Security: Protected by your operating system's file permissions

5.2 Server-Side Security

• HTTPS Encryption: All data in transit uses TLS 1.2 or higher
• Webhook Verification: Payment webhooks are cryptographically signed (HMAC-SHA512)
• Authentication: API endpoints require valid payment references
• Firestore Security Rules: Database access restricted to our secure API only

5.3 What We Do NOT Collect

• ❌ Your browsing history (except current tab URLs for your own organization)
• ❌ Passwords or login credentials
• ❌ Personal identification information beyond email (for Pro only)
• ❌ Behavioral tracking or analytics cookies
• ❌ Payment card details (Paystack handles this securely)
• ❌ Device identifiers or tracking IDs

6. Data Retention

6.1 Local Data

All locally stored data remains on your device indefinitely until you:

• Manually delete it through extension settings
• Uninstall the extension
• Clear Chrome's extension data

6.2 Server Data (Pro Subscriptions)

• Active Subscriptions: Retained for the duration of your subscription
• Expired Subscriptions: Retained for 1 year for renewal and historical tracking
• Payment Records: Retained as required by law (typically 7 years for tax purposes)
• Deleted Accounts: You can request data deletion anytime (see Section 9)

7. Sharing & Disclosure

We do not sell, rent, lease, or trade your personal information to third parties.

7.1 Limited Sharing

We only share information in these cases:

• Service Providers: Paystack (payments), Firebase (storage), Vercel (hosting) - under strict data processing agreements
• Legal Requirements: If compelled by law, court order, or government request
• Business Transfers: In case of merger or acquisition, with privacy protections
• Your Consent: If you explicitly authorize sharing

7.2 Cross-Device Sync

Pro subscribers can sync subscription status across devices:

• Only your email and subscription status are synced (via Firebase)
• Tab data and workspaces remain completely local
• You must log in on each device with the same email

8. Your Privacy Rights

8.1 Access Your Data

You have the right to request what personal data we hold about you:

• For Free Users: All data is on your device (you control it completely)
• For Pro Users: Contact us to see your subscription data stored on our servers

8.2 Delete Your Data

• Extension Settings: Clear all local data through extension preferences
• Account Deletion: Email us to delete your subscription account and all server data
• Uninstall: Uninstalling the extension removes all local data

8.3 Data Portability

Export your data in standard formats:

• Export workspaces as JSON files
• Export backups for migration to other tools
• Request subscription data export (contact support)

8.4 GDPR & CCPA Rights

If you're in the EU (GDPR) or California (CCPA), you have additional rights:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate information
• Right to Erasure: Request deletion of your data
• Right to Restrict: Limit how we use your data
• Right to Withdraw Consent: Opt-out of any non-essential processing

To exercise these rights, contact us at the address below.

9. Cookies & Tracking

TabZen does not use cookies or tracking pixels.

• We do not track you across websites
• We do not build user profiles for advertising
• We do not partner with analytics platforms (Google Analytics, Mixpanel, etc.)

The website (tab-zen.vercel.app) may use minimal analytics through Vercel for:

• Counting page visits (aggregate data only)
• Detecting errors and downtime
• Improving website performance

10. Children's Privacy

TabZen is not intended for children under 13. We do not knowingly collect information from children. If we become aware that we've collected data from a child under 13, we will delete it immediately.

Parents/guardians concerned about children's use should use parental controls in Chrome.

11. Changes to This Privacy Policy

We may update this Privacy Policy as our services evolve. We will:

• Post the updated policy on this page with a new "Last Updated" date
• Notify you of material changes via email (for Pro subscribers)
• Require your consent for changes that significantly expand data collection

Your continued use of TabZen after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: