Privacy Policy — TabFlow Organizer

Introduction

• TabFlow Organizer ("we", "us", "TabFlow") provides a browser extension that organizes your browser tabs into task-based sessions. This privacy policy explains what information we collect, why we collect it, how we use it, and the choices you have.

Data we collect

• Tab metadata (collected only with permission):
  • URL, page title, and favicon of open tabs when you request tab organization.
• Account & authentication:
  • Email (if you sign up), user ID (Supabase), and authentication tokens — used only to authenticate to our APIs. We do not store your password.
• Session & task data:
  • Session records, generated task titles, task associations and tab groupings created by you or by the AI generation flow.
• Payment & billing:
  • Stripe customer/subscription IDs and purchase metadata. We do not store full card data — Stripe processes payment info.
• Logs and diagnostics:
  • Non-identifying usage logs and error reports to debug and improve the product. May include timestamps, client version, and API error messages.

How we use the data

• Provide core features:
  • Organize tabs into sessions and tasks; persist sessions and tasks to allow cross-device recovery (if signed in).
• Authenticate & secure:
  • Validate users and authorize actions via Supabase and server-side verification.
• Billing:
  • Create and manage subscriptions / one-time purchases via Stripe; update entitlements in our database on webhook events.
• Improve the service:
  • Aggregate and anonymized usage metrics to improve models and UX.
• Support & troubleshooting:
  • Use logs to investigate user-reported issues.

Data sharing and third parties

• Service providers:
  • Supabase (database/auth), Stripe (payments), OpenAI or other LLM provider (optional — for AI generation). We share only the minimal data required to provide the service.
• No sale of personal data:
  • We do not sell personal data.
• Legal requests:
  • We may disclose information to comply with applicable law or respond to lawful requests by public authorities.

Retention