Introduction
At NameVerse, Inc. ("NameVerse," "Tabsy," "we," "our," or "us"), the company behind Tabsy, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at tabsy.co, our mobile applications (Tabsy LPM and Tabsy Express, for iOS and Android), and our related services (collectively, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.
Information We Collect
Information You Provide Directly
- Account information: name, email address, password, business name, and role
- Company profile: business address, phone number, website, and logo
- Client and contact data: names, email addresses, phone numbers (including mobile numbers used for text messaging), and addresses of your clients and contacts
- Text-message consent records: where you send text messages through the Services, we store the mobile number, the delivery status of each message, and any opt-out ("STOP") request we receive, so that opt-outs can be honoured permanently
- Business documents: estimates, invoices, contracts, work orders, and project details
- Payment information: billing details processed through our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.
- Communications: messages you send through our support channels or contact forms
- Photos and files: images, documents, and other files you upload to projects or share through the mobile app
- App Store purchase information: if you subscribe to Tabsy Express through Apple's In-App Purchase system, we receive a signed transaction record from Apple containing the product purchased, the transaction and original transaction identifiers, the purchase and expiry dates, the renewal state, and whether the purchase was made in Apple's production or sandbox environment. We also generate an anonymous identifier (an "app account token") that we send to Apple so a purchase can be matched to your Tabsy account. We never receive your Apple Account credentials, your card number, or your billing address from Apple.
Information Collected Automatically
- Device information: device type, operating system and version, browser type, screen resolution, and unique device identifiers
- Network information: IP address and general geographic location
- Usage data: pages visited, features used, actions taken, time spent, and interaction patterns
- Cookies and similar technologies: session cookies, preference cookies, and analytics cookies
Information Collected via Mobile Applications
When you use our mobile applications, we may additionally collect:
- Push notification tokens: device tokens for sending push notifications (Firebase Cloud Messaging). You can disable push notifications in your device settings at any time.
- Camera and photo library access: only when you explicitly choose to upload photos or documents to a project. We do not access your camera or photos without your action. Tabsy LPM may use both the camera and the photo library; Tabsy Express uses the camera only and does not request photo library access.
- Device identifiers: anonymous identifiers used for crash reporting and analytics through Firebase Crashlytics and Firebase Analytics
- App performance data: crash logs, error reports, and performance metrics to improve app stability
How We Use Your Information
- Provide, operate, maintain, and improve the Services
- Process transactions and send related information (confirmations, invoices, receipts)
- Establish and maintain your subscription, including verifying App Store purchases with Apple, matching a purchase to your account, and keeping your access in step with the subscription's renewal, cancellation, refund, or expiry
- Send administrative messages, security alerts, and service updates
- Send push notifications about relevant activity (new assignments, project updates, schedule changes) when enabled
- Deliver text (SMS) messages you choose to send to your clients about their estimates and invoices, and process the resulting delivery receipts and opt-out requests
- Respond to your comments, questions, and support requests
- Monitor and analyze usage trends to improve the user experience
- Detect, prevent, and address technical issues, fraud, and security incidents
- Comply with legal obligations
Text (SMS) Messaging
Tabsy can send text messages on your behalf to the clients and contacts in your workspace — for example, to let a client know an estimate is ready to review, that an invoice has been sent, or that a payment has been received. These messages are transactional: they relate to work you are doing for that client. Text messaging is an optional feature that a business turns on; it is not enabled by default.
Who is responsible for what
When a business using Tabsy sends a text message to its own client, that business decides who is messaged and what is said. Tabsy provides the mechanism and acts as a service provider to that business; the business is responsible for obtaining the recipient's consent before messaging them. Our delivery partner for text messaging is Twilio, which transmits messages to mobile carriers on our behalf under its own privacy policy.
How mobile numbers are used
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who support the service — such as our messaging provider — is permitted solely to deliver the messages you request. Text-messaging opt-in data and consent are never shared with any third party for any other purpose, and are never sold.
Opting out
Anyone receiving a text message from a Tabsy workspace can reply STOP to stop receiving them, or HELP for assistance. Opt-out requests are honoured automatically and permanently for that mobile number. Message frequency varies with your activity; message and data rates may apply, and delivery depends on the recipient's mobile carrier. Opting out of text messages does not affect email or other communications, which have their own controls.
Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:
- Service providers: We use trusted third-party services to operate our platform, including:
- Stripe — payment processing for subscriptions purchased directly from us, and for payments your clients make to you
- Apple — billing, payment processing, and subscription management for subscriptions purchased through the App Store. Apple acts as the seller of record for those purchases and handles them under Apple's Privacy Policy.
- Firebase (Google) — push notifications, crash reporting, and analytics
- Cloud hosting providers — data storage and computing
- Email service providers — transactional and support emails
- Twilio — delivery of the text (SMS) messages you send about estimates and invoices. Twilio processes mobile numbers and message content solely to transmit those messages.
- Your clients: Information you include in estimates, invoices, and contracts is shared with the recipients of those documents
- Legal requirements: When required by law, subpoena, or legal process
- Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity
- With your consent: When you explicitly authorize sharing
Data Security
We implement industry-standard security measures to protect your information, including:
- SSL/TLS encryption for all data in transit
- Encryption at rest for sensitive data (database credentials, API keys)
- Isolated database schemas per tenant — your data is never commingled with other customers' data
- Regular security audits and vulnerability assessments
- Access controls and authentication requirements
- Automated threat detection and monitoring
Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. If you close your account, we will retain your data for up to 30 days to allow for reactivation, after which it will be permanently deleted. We may retain certain information longer as required by law or for legitimate business purposes such as fraud prevention.
Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your personal data. You can request account and data deletion by contacting us at [email protected]
- Data portability: Request an export of your data in a machine-readable format
- Opt-out of communications: Unsubscribe from marketing emails using the link in each email. You cannot opt out of essential service communications.
- Push notifications: Disable push notifications through your device settings at any time
- Cookies: Control cookies through your browser settings. Disabling cookies may affect functionality.
Your Regional Rights
Canada
If you are located in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25). In addition to the rights described above, you have the right to:
- Withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide the Services to you.
- Be informed of, and object to, any use of your personal information to render a decision based exclusively on automated processing. We do not make any decision about you based exclusively on automated processing.
- Request the portability of the computerized personal information you have provided to us, in a structured and commonly used technological format (Quebec residents).
- Request the de-indexing or cessation of dissemination of your personal information in the circumstances provided by law (Quebec residents).
- Complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information du Québec if you reside in Quebec.
Your personal information is stored and processed in the United States (see International Data Transfers below), which means it may be accessible to U.S. authorities under U.S. law. By using the Services you consent to that transfer. Our Privacy Officer can be reached at [email protected] and is responsible for our compliance with this policy.
A French-language version of this policy is available on request from [email protected].
Children's Privacy
The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.
International Data Transfers
Your information is stored and processed in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.
Third-Party Links
The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us:
