1. Scope
TabTonic is operated by Unbound Innovations LLC. This Privacy Policy applies to the TabTonic browser extension, the public TabTonic website, account services, optional paid cloud sync, billing support, and reliability diagnostics.
TabTonic is local first. Core workspace features work without an account and do not require cloud sync.
2. Public website
The public website is a static product and help site. It does not provide account sign-in, set marketing cookies, process checkout, or receive workspace content. Install destinations are selected from the visitor's browser type without creating a user profile.
The interactive product demo uses synthetic data in the browser. It does not connect to browser-extension data, Supabase, Polar, or a real TabTonic account.
3. Information we collect
3.1 Account information
If you create an account inside the extension, we process the email address, Supabase user identifier, authentication session, and account-security metadata needed for authentication and account management.
3.2 Workspace and tab data
The extension stores local workspace information such as:
- Workspace names, folders, and structure
- Tab URLs, titles, and favicons
- Tab-group membership, names, colors, order, and collapsed state
- Tab order, pinned state, locked state, and open-window state
- Local recovery backups and timestamps
This information stays in the browser profile for Signed-out and Free users. For an eligible Pro, trialing, or payment-grace account, the extension also sends the workspace data needed for cloud sync to Supabase. Signed-out, Free, expired, and revoked accounts do not receive cloud-workspace access.
3.3 Billing and subscription information
Polar processes checkout and paid subscriptions as merchant of record. We receive and store the customer, subscription, approved product, status, period, entitlement cutoff, and verification metadata needed to provide and enforce Pro access.
Payment-card details are entered with Polar and its payment partners. TabTonic does not store full payment-card details.
3.4 Technical and diagnostic information
Sentry may receive sanitized error and reliability telemetry, including stack traces, extension version, runtime surface, operation category, retry count, and coarse sync or entitlement state.
TabTonic's diagnostic sanitizer is designed to remove email addresses, URLs, tab titles, workspace names, tokens, workspace or tab content, payment details, and raw identifiers before transmission. Identifiers needed to correlate a reliability invariant are transformed.
4. How we use information
We use information only as needed to:
- Provide local workspace, import, export, and recovery features
- Authenticate users and protect accounts
- Synchronize eligible workspaces across devices
- Create Polar checkout and customer-portal sessions
- Reconcile and enforce subscription entitlements
- Diagnose failures and protect service reliability
- Process account-deletion requests
- Meet legal, security, fraud-prevention, and accounting obligations
Depending on location and context, the legal bases may include performance of a contract, legitimate interests in security and reliability, consent where required, and compliance with legal obligations.
5. Providers and sharing
We share information only as needed to operate TabTonic. We do not sell personal data.
- Supabase for Authentication, account management, and optional Pro cloud sync. Provider privacy policy
- Polar for Checkout, subscription management, and payment processing as merchant of record. Provider privacy policy
- Sentry for Sanitized error and reliability diagnostics. Provider privacy policy
We may also disclose information when required by law, to investigate abuse or security incidents, to protect rights and safety, or as part of a business transfer subject to applicable safeguards.
6. Retention and deletion
Local workspaces and recovery backups remain in the browser profile until you remove them, remove the extension or profile, or the browser clears extension storage. Recovery backups are normally kept for the last 10 days, with at most one backup per workspace per local calendar day.
Cloud workspace data is retained while the TabTonic account exists, including while a subscription is paused, past due, canceled, or expired, so it can resume after a valid resubscription.
When you delete the TabTonic account inside the extension:
- TabTonic first asks Polar to anonymize or delete the customer so future billing stops.
- After Polar succeeds or reports the customer already deleted, TabTonic deletes Supabase Auth and the database cascade removes the subscription and cloud workspace data.
- If Polar fails, the Supabase account remains intact so deletion can be retried. If Supabase cleanup fails after Polar succeeds, billing has stopped and cloud cleanup can be retried.
Account deletion does not erase local browser storage and does not automatically create a refund. Supabase, Polar, or Sentry may retain limited records where required by law, fraud prevention, security, or their applicable policies.
7. Security
TabTonic uses local-first storage, authenticated cloud operations, row-level ownership checks, paid-access enforcement, restricted database grants, webhook signature verification, source-time ordering, and diagnostic privacy filtering. No method of storage or transmission is completely secure.
8. International transfers
Service providers may process information in countries other than yours. Where required, we and our providers use safeguards for cross-border transfers.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information, and to withdraw consent where processing relies on consent.
To make a request, email support@tabtonic.app. We may need to verify the request and may retain information where applicable law permits or requires it.
10. Children
TabTonic is not directed to children under 13 or the minimum age required by local law. We do not knowingly collect their personal information. Contact us if you believe a child provided information to TabTonic.
11. Changes to this policy
We may update this Privacy Policy when the product, providers, or legal requirements change. We will update the date above and take additional notice steps where required by law.
12. Contact
Service: TabTonic
Operator: Unbound Innovations LLC
Privacy and support: support@tabtonic.app