Privacy Policy

Last updated: October 13, 2026

Introduction

At NameVerse, Inc. ("NameVerse," "Tabsy," "we," "our," or "us"), the company behind Tabsy, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at tabsy.co, our mobile applications (Tabsy LPM and Tabsy Express, for iOS and Android), and our related services (collectively, the "Services").

Tabsy is offered as two products: Tabsy LPM, for teams, and Tabsy Express, for solo contractors. Most of this policy applies to both. Where the two products work differently, this policy says which one it is describing.

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

Information We Collect

Information You Provide Directly

Account information: name, email address, password, business name, and role
Company profile: business address, phone number, website, and logo
Client and contact data: names, email addresses, phone numbers, and addresses of your clients and contacts (in Tabsy LPM, this includes mobile numbers used for text messaging). How we handle this information on your behalf is described in Information Businesses Store About Their Clients.
Text-message consent records (Tabsy LPM): where you send text messages through Tabsy LPM, we store the mobile number, the delivery status of each message, and any opt-out ("STOP") request we receive, so that opt-outs can be honoured permanently
Business documents: estimates, invoices, contracts, work orders, project details, notes, and templates
Payment information: billing details processed through our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.
Accepting payments from your clients (Tabsy Express): if you set up card payments, Stripe collects the identity, business, and bank account details it needs to verify you and pay you out, under its own terms and privacy policy. We receive the identifier and status of your Stripe account and records of the payments your clients make to you.
Communications: messages you send through our support channels or contact forms
Photos and files: images, documents, and other files you upload to projects or share through the mobile app. In Tabsy Express, photos keep the information your camera stored in them, including where and when they were taken; see Location Data (Tabsy Express).
App Store purchase information: if you subscribe to Tabsy Express through Apple's In-App Purchase system, we receive a signed transaction record from Apple containing the product purchased, the transaction and original transaction identifiers, the purchase and expiry dates, the renewal state, and whether the purchase was made in Apple's production or sandbox environment. We also generate an anonymous identifier (an "app account token") that we send to Apple so a purchase can be matched to your Tabsy account. We never receive your Apple Account credentials, your card number, or your billing address from Apple.
Connected bank and credit card data: if you choose to connect a bank or credit card account through Plaid, we receive account details and transaction history for that account, as described in Bank and Credit Card Connections (Plaid) below. We never receive or store your online banking username or password.
AI Assist requests: if your workspace uses the optional AI Assist add-on, the requests you make, the details sent with them, the answers returned, and the business profile, writing style, and instructions you save for AI Assist, as described in AI Assist below.
Joist login details: if you use the optional Joist Import add-on, the email address and password for your Joist account. We use them once, to sign in to your Joist account and retrieve your data, and we do not store your Joist password.

Information Collected Automatically

Device information: device type, operating system and version, browser type, screen resolution, and unique device identifiers
Network information: IP address and general geographic location
Signup details: when you sign up on our website or in the Tabsy Express app, we record with your account the IP address the signup came from, your browser's user-agent and language setting, your time zone and screen size, the address of the signup page (including any campaign or discount code in it), and the page that referred you to it. We look that IP address up in an IP-geolocation database (MaxMind GeoIP2 data, run on NameVerse's own servers) for its approximate location (country, region, city and postal area), its network operator, and whether it belongs to a VPN, proxy, Tor or hosting service, and we compare that location with the billing country and state you give at checkout. We use these details to verify signups and to prevent fraud.
Usage data: pages visited, features used, actions taken, time spent, and interaction patterns
Cookies and similar technologies: session cookies and preference cookies (our website analytics, below, uses no cookies)
Website analytics and session replay (tabsy.co only): our public website uses a self-hosted instance of Umami, a privacy-focused analytics tool, to count page views, button clicks and the path visitors take through the site. It also records how visitors interact with website pages (scrolling, mouse movement and clicks) so we can find and fix confusing pages. This runs only on the marketing website, never inside the Tabsy application, and the data stays on infrastructure we control and is not sold or shared. Umami does not use cookies, and what you type into forms is masked and not recorded.

Information Collected via Mobile Applications

When you use Tabsy LPM, we may additionally collect:

Push notification tokens: device tokens for sending push notifications (Firebase Cloud Messaging). You can disable push notifications in your device settings at any time.
Camera and photo library access: only when you explicitly choose to upload photos or documents to a project. We do not access your camera or photos without your action.
Device identifiers: anonymous identifiers used for crash reporting and analytics through Firebase Crashlytics and Firebase Analytics
Device details: your device's model, operating system version, the app version, and an identifier the app creates for that installation (and, on Android, the device name set in your phone's settings). We use them to show you and your company's admins which devices are signed in to your account, and which device recorded a time-clock punch.
Location at clock in and clock out: when you clock in or out on the time clock and your device allows location access, the app records your precise location at that moment, its accuracy, and how far it was from the job site. Clocking in and out works without it. See Location Data (Tabsy LPM).
Location tracking, only if your employer turns it on and you agree: the app records your precise location during the days and hours your employer sets, including when the app is closed or not in use. See Location Data (Tabsy LPM).
App performance data: crash logs, error reports, and performance metrics to improve app stability

When you use Tabsy Express:

Camera: used only when you choose to take a photo in the app, such as of a receipt, a job site, or a line item. Photos from your library are chosen one by one with your device's own photo picker, and Tabsy Express reads only the photos you pick.
Location in photos: photos you attach to your records keep the location, time, and device information your camera stored in them, and we record it with the photo. On Android, keeping that location requires permission to read the location stored in your photos, which Android presents as a request to access your photos and videos; the app still reads only the photos you pick, and if you decline, photos upload without their location. See Location Data (Tabsy Express).
Location when you take a photo in the app: if you allow location access while using the app, the app reads your device's precise location once, at the moment you take a photo, and adds it to that photo. It never reads your location in the background or at any other time, and taking photos works without it.
Face ID: if you turn on biometric unlock, your device checks your face or fingerprint itself. We never receive biometric data.
No push notifications or third-party analytics: Tabsy Express does not send push notifications and does not include third-party analytics or crash-reporting tools. If you have chosen in your device settings to share analytics with app developers, Apple or Google may provide us with crash reports and aggregate app statistics under their own policies.

Bank and credit card connections in the apps: if you connect a bank or credit card account from one of our mobile apps, the connection runs through Plaid's own software built into the app, and we receive the same account and transaction data as when you connect on the website. Plaid collects information about the connection, and may collect information about your device, under the Plaid End User Privacy Policy. See Bank and Credit Card Connections (Plaid).

How We Use Your Information

Provide, operate, maintain, and improve the Services
Process transactions and send related information (confirmations, invoices, receipts)
Establish and maintain your subscription, including verifying App Store purchases with Apple, matching a purchase to your account, and keeping your access in step with the subscription's renewal, cancellation, refund, or expiry
Process the payments your clients make to you through Stripe (Tabsy Express)
Send administrative messages, security alerts, and service updates
Deliver the documents, messages, and reminders you choose to send to your clients by email
Send push notifications about relevant activity (new assignments, project updates, schedule changes) when enabled (Tabsy LPM)
Record where a time-clock punch was made and, where your employer has turned on location tracking and you have agreed, where you were during work hours, for the purposes your employer states (Tabsy LPM)
Look up map coordinates for the client addresses you enter, so they can be shown on a map (Tabsy Express)
Keep the location, time, and device information stored in the photos you attach to your records, and show it with those photos, so they can document when and where they were taken (Tabsy Express)
Import the transactions and balances of bank and credit card accounts you connect, so you can reconcile them against your books
Write suggested text with AI Assist when you ask for it, and import your data from Joist when you ask us to
Deliver text (SMS) messages you choose to send to your clients about their estimates and invoices, and process the resulting delivery receipts and opt-out requests (Tabsy LPM)
Respond to your comments, questions, and support requests
Monitor and analyze usage trends to improve the user experience
Detect, prevent, and address technical issues, fraud, and security incidents
Comply with legal obligations

Location Data (Tabsy LPM)

This section applies to the Tabsy LPM mobile apps. For Tabsy Express, see Location Data (Tabsy Express) below. On the web, apart from the location stored in photos you upload to Tabsy Express, we only infer a general location from your IP address.

Clock-in and clock-out location

When you clock in or out, the app asks your device for its current location once, if you have allowed location access while using the app. We store the latitude and longitude, how accurate the reading was, the device that recorded it, and the distance to the job site. The punch is saved either way; if location is unavailable or not allowed, it is saved without one.

Location tracking during work hours

Location tracking is off unless the company you work for turns it on, and even then it does not start on your phone until you read what it does and agree. Before turning it on, the company must state why it tracks (for example, verifying timesheets or confirming arrival at job sites), choose the days and hours, and acknowledge that it is responsible for giving you any notice the law requires. The company can also narrow tracking further: to only the times you are clocked in on the time clock, and to only phones it has marked as company-issued (a personal phone is then never tracked and never asks you to agree). When it is on and you have agreed:

What is recorded: your precise location at regular intervals the company chooses (every 15 minutes to every 4 hours) and, on iPhone, when you arrive at or leave a place or move a significant distance, together with the time, the accuracy of the reading, the device, and the nearest job site. This happens even when the app is closed or not in use, but only on the days and between the hours the company set, and, if the company chose these limits, only while you are clocked in and only on a company-issued phone. Your phone discards anything outside those limits before it is sent, and our servers reject anything outside them again.
Who can see it: you, and the admins and managers at your company who have permission to view it. Every time someone at your company views your history, it is logged.
How long it is kept: for the period your company chooses, between 7 days and 2 years (90 days unless it chooses otherwise), after which it is deleted automatically.
Your choices: you can decline, or opt out at any time in the app under Settings › Privacy › Location Tracking. On the same screen you can pause tracking for the rest of the day (for example on a day off or an unpaid break); nothing is recorded while it is paused, your company's admins see that it is paused but not why, and it resumes on its own the next day. Opting out stops tracking on your phone immediately and tells your company's admins. You can also turn off location access for the app in your device's settings. If your company later widens what it tracks (more days or hours, more frequent readings, keeping data longer, or a new purpose), tracking pauses until you agree again.
A visible indicator: while tracking is recording, your phone shows it: a notification on Android, and the location indicator in the status bar on iPhone.

Who controls location data, and how to make a request

Your employer decides whether to use these features and why, and is responsible for your location data as the "business" or "controller" under privacy laws. We process it on your employer's behalf as its service provider, as described in Information Businesses Store About Their Clients. We do not sell location data, share it for advertising, or use it for any purpose other than providing these features to your employer. To get a copy of your location data or ask for it to be deleted, contact your employer, who can export or delete it in Tabsy; you can also email privacy@tabsy.co and we will pass your request to your employer and help it respond. Your employer may need to keep time-clock records, including where a punch was made, to meet its own legal obligations.

Location Data (Tabsy Express)

Tabsy Express does not track where you are. It keeps location only in photos, so that the photos you attach to your records can show where and when they were taken: for example, to document the condition of a job site for a client or an insurer, or in a dispute.

Photos you upload: when you attach a photo to a contact, an estimate or one of its line items, an invoice, an expense, or a contract, from the app or the website, we store the photo with the information your camera or phone saved in it: where it was taken (latitude, longitude, altitude, the accuracy of the reading, and the direction the camera faced, when these were recorded), the date and time it was taken, and the make, model, lens, and software of the device. We also record this information, together with a fingerprint (hash) of the stored file, alongside the photo, so it can be shown with the photo and a later copy can be matched to the file you uploaded. Whether a photo contains a location depends on your camera's settings. The mobile apps shrink photos before uploading them and keep this information when they do.
Photos you take in the app: if you allow location access while using the app, the app reads your device's precise location once, at the moment you take the photo, and adds it to that photo. It does not read your location in the background or at any other time. You can take photos without allowing it.
Photos that do not keep a location: your profile picture, your company logo, cover images on estimates and invoices, and pictures in your product and service catalog are stored with their location and camera information removed. Photos you attach to an AI Assist request are sent to Anthropic with that information removed.
Who can see it: you and the people in your workspace. Anyone you share a photo with, such as a client who opens an estimate or invoice link that includes it, receives the photo file with the information stored in it, and a PDF you send may include it too. To share a photo without its location, remove the location before you upload it (most phones offer this when sharing a photo) or turn off location for your camera.
Your choices: you can turn off location for your camera, decline location access for Tabsy Express, exclude location in your phone's photo picker where it offers that option, or delete a photo at any time. The recorded information is kept for as long as the photo is and is deleted with it, or with your account, as described in Data Retention.

We do not sell location data, share it for advertising, or use it for any purpose other than keeping it with your photos and showing it to you and the people you share them with. Where a photo shows a client's property, the business that took it decides how it is used, as described in Information Businesses Store About Their Clients.

Text (SMS) Messaging

This section applies to Tabsy LPM. Tabsy Express does not send text messages through a messaging provider: where it offers to text a client, it opens a messaging app on your own device, and the message is sent from your own phone.

Tabsy LPM can send text messages on your behalf to the clients and contacts in your workspace — for example, to let a client know an estimate is ready to review, that an invoice has been sent, or that a payment has been received. These messages are transactional: they relate to work you are doing for that client. Text messaging is an optional feature that a business turns on; it is not enabled by default.

Who is responsible for what

When a business using Tabsy sends a text message to its own client, that business decides who is messaged and what is said. Tabsy provides the mechanism and acts as a service provider to that business; the business is responsible for obtaining the recipient's consent before messaging them. Our delivery partner for text messaging is Twilio, which transmits messages to mobile carriers on our behalf under its own privacy policy.

How mobile numbers are used

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with subcontractors who support the service — such as our messaging provider — is permitted solely to deliver the messages you request. Text-messaging opt-in data and consent are never shared with any third party for any other purpose, and are never sold.

Opting out

Anyone receiving a text message from a Tabsy workspace can reply STOP to stop receiving them, or HELP for assistance. Opt-out requests are honoured automatically and permanently for that mobile number. Message frequency varies with your activity; message and data rates may apply, and delivery depends on the recipient's mobile carrier. Opting out of text messages does not affect email or other communications, which have their own controls.

Bank and Credit Card Connections (Plaid)

The Bank & Cards feature lets you connect a bank or credit card account so that its transactions arrive in Tabsy automatically instead of being uploaded as statement files. Connecting an account is optional, is available only for financial institutions in the United States, and happens only when a user in your workspace starts it, on the website or in one of our mobile apps.

How the connection works

We use Plaid Inc. ("Plaid") to connect to your financial institution. When you connect an account, you sign in to your institution inside Plaid's own secure window on the website, or Plaid's own screens in the mobile app; some institutions instead open their own website or app for you to sign in, then return you to Tabsy. Your banking username, password, and any security codes go to Plaid and your institution, never to Tabsy. Plaid then gives us a token that lets us retrieve data from the accounts you selected. Plaid collects and processes your information under the Plaid End User Privacy Policy, and by connecting an account you acknowledge that policy. You can review and revoke the connections Plaid holds for you at my.plaid.com.

What we receive and store

Connection details: the institution's name, Plaid's identifiers for the connection and its accounts, the connection's status, and the history window you chose (up to 24 months)
Account details: the account's name, type, and the last four digits of its number, together with its current and available balance and, for credit cards, its credit limit
Posted transactions: for each posted transaction, the details Plaid provides about it: the date, the date it was authorized, the amount, the description as your institution shows it and Plaid's cleaned-up version, the merchant or payee and its logo and website, the spending category, how the payment was made (for example online, in store, or by check), check and reference numbers, the merchant's location where your institution reports one, and the other parties to the payment that Plaid identifies. For a payment to or from an individual, those details can include that person's name. Pending transactions are not stored.
Recurring payments: where Plaid identifies a transaction as part of a recurring series, such as a monthly subscription, the series' description, merchant, and frequency
The access token Plaid issues, which we store encrypted (see below)

We do not request full account numbers or routing numbers, the name, address, email, or phone number your institution holds for the account holder, or investment or loan details.

How we use it

We use connected-account data only to provide the import features you turned on: bringing transactions into your workspace, keeping them up to date, showing account balances, and letting you reconcile transactions with your expenses and payments, including suggesting a match based on how your workspace matched the same payee before. We refresh a connection once a day and whenever Plaid tells us new transactions are available. We do not sell this data, use it for advertising or marketing, use it to assess creditworthiness, use it to train artificial intelligence models, or share it with anyone other than Plaid and the service providers that host the Services. Individual transactions are not included in the aggregate usage statistics described above.

How we protect it

The Plaid access token is encrypted with AES-256-GCM before it is stored, is never sent to your browser or to the mobile apps, and is never written to our logs. Connected-account data is stored with the rest of your workspace's data, kept separate from other workspaces as described in Data Security, is visible only to users in your workspace with permission to use the import features, and travels only over encrypted connections. Messages Plaid sends to us are cryptographically verified before we act on them.

How long we keep it and how it is deleted

While connected: we keep connected-account data for as long as the connection is active and your account is open.
When you disconnect an account: we instruct Plaid to remove the connection, which ends our access to that account, and we delete the stored access token. No further data is retrieved. Transactions and account details already imported stay in your workspace as part of your business records until you delete them or close your account, as the disconnect screen explains.
When you revoke access through Plaid or your institution: we stop retrieving data from that connection and delete the stored access token. If you revoke access to a single account, we stop retrieving data for that account only.
When your institution withdraws a transaction: we delete it from Tabsy, unless you have already reconciled it against an expense or payment, in which case it remains part of your records.
When you close your account: connected-account data is deleted together with the rest of your workspace data, as described in Data Retention below. If you delete a Tabsy Express account in the app, we instruct Plaid to remove its connections at the time of deletion rather than at the end of the 30 days.
On request: you can ask us to delete connected-account data, including transactions already imported, without closing your account, by emailing privacy@tabsy.co. We will confirm once it is deleted.

We may retain connected-account data for longer only where the law requires it or to establish, exercise, or defend legal claims, and only for as long as that obligation lasts.

AI Assist

AI Assist is an optional add-on that writes suggested text for you, such as the description of an estimate line, when you ask for it. It works only if your workspace has turned it on, and only when you make a request. The details below describe AI Assist in Tabsy Express.

What is sent: when you make a request, we send what you asked, details from the form you are working in (which can include information you have entered about a client or a job), and the business profile, writing style, and instructions saved in your AI Assist settings, and any photos you attach to the request (with their location and camera information removed), to Anthropic, which provides the AI model. The suggestion comes back to you to review; nothing is added to your records unless you apply it.
Spoken requests: if you speak a request, your web browser's built-in speech recognition turns it into text before it is sent to us. Depending on your browser, that conversion may be carried out by the browser's provider under its own privacy policy. We receive the text, not a recording.
What we keep: a record of each request — what was asked, the details sent, the answer, whether you applied it, and usage and cost figures — stored with your workspace's data so we can operate the feature, enforce its monthly limit, show you your usage, and improve the quality of its answers. These records are deleted with the rest of your workspace data.

Information Businesses Store About Their Clients

Businesses that use Tabsy enter and store information about their own clients and contacts: names, contact details, addresses, job details, documents, signatures, and payments. For that information:

The business is in control. The business using Tabsy decides what information it collects about its clients and why, and it is responsible for that information as the "business" or "controller" under privacy laws. It is responsible for giving its clients any notices, and obtaining any consents, that the law requires.
We act as its service provider. We process client information on the business's behalf and on its instructions, to provide the Services to that business and to maintain, secure, and improve them. For that information we act as a "service provider" or "processor."
We do not sell or share it. We do not sell client information, share it for cross-context behavioral advertising, or use it to build profiles for anyone else. We disclose it only to the business, to the people the business chooses to send documents to, and to the service providers described in Data Sharing and Disclosure that help us run the Services.
We help with requests. If a client contacts us about their information, we refer them to the business, and we help the business respond to requests to access, correct, or delete it.

If You Receive a Document Through Tabsy

Businesses use Tabsy to send estimates, invoices, and contracts to their own clients. If a business has sent you a link to view, accept, pay, or sign a document, this section explains what is recorded when you use it. It describes Tabsy Express.

What is recorded

Opening a document: when you open an estimate or invoice link, we record that it was opened, how many times, and when it was last opened, and the business can see this. The first time you open a link to sign a contract, the time, your IP address, and your browser's user agent (a description of your browser and device) are added to the contract's audit trail.
Responding to an estimate: whether you accepted or declined it and when. If you accept, we also record the name you enter, your IP address, and your browser's user agent.
Signing a contract: your signature and initials (drawn, uploaded, or typed), the fields you complete, your consent to sign electronically together with the exact wording you agreed to and its version, the time, your IP address, your browser's user agent, a fingerprint (hash) of the document you signed, and a verification code. This record is kept with the contract as evidence that you signed it.
Declining to sign: that you declined, when, and any reason you give.
Paying an invoice: card payments are taken on a payment page hosted by Stripe for the business you are paying. Your card details go to Stripe, not to Tabsy, and Stripe handles them under its own privacy policy. We receive confirmation of the payment, including the amount and whether it succeeded.
Emails: when a business sends you a document or a reminder, we process your email address and the message to deliver it.

Who controls this information

The business that sent you the document decides what it contains, who receives it, and what happens to the record afterwards, and it is responsible for this information. Tabsy processes it on that business's behalf, as described in Information Businesses Store About Their Clients. The business keeps these records as part of its own business records.

Making a request

To ask to access, correct, or delete this information, contact the business that sent you the document. You can also email privacy@tabsy.co and tell us the name of the business; we will pass your request to that business and help it respond. The business may need to keep some records, such as the evidence that a contract was signed, to meet its own legal obligations.

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

Service providers: We use trusted third-party services to operate our platform. Which ones are involved depends on the product and on the features you use.
- Both products:
  - Stripe — payment processing for subscriptions purchased directly from us, and for payments your clients make to you
  - Plaid — connecting the bank and credit card accounts you choose to link, and retrieving their balances and transactions. Plaid handles your banking credentials under the Plaid End User Privacy Policy.
  - Anthropic — writing suggested text for the optional AI Assist add-on, when you use it (see AI Assist)
  - Cloud hosting providers — data storage and computing
  - Email service providers — transactional and support emails
- Our website (tabsy.co):
  - Cloudflare — the network that delivers our website and, where it is switched on, a bot check on our website forms
  - jsDelivr, the jQuery CDN and Google Fonts — our pages load scripts and fonts from them, so they receive your browser's IP address and user-agent when a page loads
- Tabsy Express:
  - Apple — billing, payment processing, and subscription management for subscriptions purchased through the App Store. Apple acts as the seller of record for those purchases and handles them under Apple's Privacy Policy.
  - Stripe Connect — if you accept card payments, Stripe verifies your identity and business, processes your clients' payments, and pays you out, under the Stripe Connected Account Agreement and Stripe's privacy policy
  - Cloudflare — storage of the photos, documents, and other files you upload (Cloudflare R2), and the network that delivers the Services
  - Resend — delivery of the emails the Services send, including the documents and reminders you send to your clients
  - OpenStreetMap Nominatim (operated by the OpenStreetMap Foundation) — when you save a client's address, we send that address, without the client's name or other details, to look up its map coordinates
- Tabsy LPM:
  - Firebase (Google) — push notifications, crash reporting, and analytics
  - OpenStreetMap Foundation — map images on the team location map. The viewer's browser loads them directly from OpenStreetMap, which sees the viewer's IP address and the map area shown, not the people on it.
  - Twilio — delivery of the text (SMS) messages you send about estimates and invoices. Twilio processes mobile numbers and message content solely to transmit those messages.
At your direction: when you use Joist Import, we use the Joist login details you enter to sign in to your Joist account and retrieve your data; Joist handles that sign-in under its own terms and privacy policy
Your clients: Information you include in estimates, invoices, and contracts is shared with the recipients of those documents
Legal requirements: When required by law, subpoena, or legal process
Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity
With your consent: When you explicitly authorize sharing

Data Security

We implement industry-standard security measures to protect your information, including:

SSL/TLS encryption for all data in transit
Encryption at rest for sensitive data (database credentials, API keys)
Separation between workspaces. In Tabsy LPM, each workspace has its own isolated database. In Tabsy Express, workspaces share one database: every record carries the identifier of the workspace it belongs to, and PostgreSQL row-level security limits every request to the records of the workspace that is signed in.
Regular security audits and vulnerability assessments
Access controls and authentication requirements
Automated threat detection and monitoring

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services.

Deleting a Tabsy Express account in the app: deletion takes effect immediately. You are signed out on every device, the account can no longer be accessed, and the deletion cannot be undone. The account's data is permanently deleted from our production systems 30 days after deletion.
Other account closures: if you cancel a subscription purchased from us or ask us to close your account, we will retain your data for up to 30 days to allow for reactivation, after which it is deleted from our production systems.
Backups: copies may remain in our backups, which are used only to recover from data loss and are deleted on a rolling schedule within 12 months of your data's deletion, after which it cannot be recovered.

We may retain certain information longer as required by law or for legitimate business purposes such as fraud prevention.

Your Rights and Choices

You have the following rights regarding your personal information:

Access: Request a copy of the personal data we hold about you
Correction: Update or correct inaccurate information
Deletion: Request deletion of your personal data. In Tabsy Express, you can delete your account yourself in the app (on iPhone and iPad: More › Settings › Delete account). You can also request account and data deletion by contacting us at [email protected]
Data portability: Request an export of your data in a machine-readable format
Opt-out of communications: Unsubscribe from marketing emails using the link in each email. You cannot opt out of essential service communications.
Push notifications (Tabsy LPM): Disable push notifications through your device settings at any time
Location (Tabsy LPM): Opt out of location tracking in the app under Settings › Privacy › Location Tracking, or turn off location access for the app in your device settings. See Location Data (Tabsy LPM).
Location in photos (Tabsy Express): Turn off location for your camera or for Tabsy Express in your device settings, exclude location when you pick a photo, or delete a photo. See Location Data (Tabsy Express).
Cookies: Control cookies through your browser settings. Disabling cookies may affect functionality.

If you live in California or another U.S. state with a consumer privacy law, see Your U.S. State Privacy Rights below.

Your U.S. State Privacy Rights

This section applies to residents of California and of other U.S. states with comprehensive consumer privacy laws, such as Colorado, Connecticut, Oregon, Texas, Utah, and Virginia, to the extent those laws apply to us. It supplements the rest of this policy and uses the terms those laws define, such as "personal information," "sell," and "share." It does not cover information we process for a business about that business's own clients; for that information, see Information Businesses Store About Their Clients and If You Receive a Document Through Tabsy.

Categories of personal information we collect

In the past 12 months we have collected the following categories of personal information, from the sources and for the purposes described earlier in this policy:

Identifiers: name, email address, phone number, postal address, account and device identifiers, and IP address
Customer records: billing and business details, and, for bank or card accounts you connect, the account's name, type, last four digits, balances, and transactions
Commercial information: subscription and purchase records, and the estimates, invoices, payments, and other business records in your account
Internet or other electronic network activity: how you use the Services and our website, and information about your device and browser
Audio, electronic, and visual information: photos, documents, and signatures you upload or create. We do not keep recordings of spoken AI Assist requests.
Professional or employment-related information: your business name and role
Geolocation data: general location inferred from your IP address; in the Tabsy LPM mobile apps, precise location when you clock in or out and, if your employer turns on location tracking and you agree, during the work hours it sets; in Tabsy Express, the precise location stored in photos you attach to your records, and your device's location at the moment you take a photo in the app, if you allow it.
Sensitive personal information: your account login (email address and password); precise geolocation, as described in Location Data (Tabsy LPM) and Location Data (Tabsy Express); and, if you use Joist Import, your Joist login, which we use once to sign in to Joist (we do not store the Joist password)

Disclosure, sale, and sharing

We disclose the categories above to the service providers described in Data Sharing and Disclosure, for the business purposes described in this policy, and to the recipients you direct. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We have not done either in the past 12 months, and we have no actual knowledge of selling or sharing the personal information of consumers under 16. We do not use personal information for targeted advertising, or for profiling that produces legal or similarly significant effects.

We use and disclose sensitive personal information only as needed to provide the Services you request, to keep them secure, and for other purposes the law permits without offering a right to limit its use. We do not use it to infer characteristics about you.

Retention

We keep each category of personal information for as long as your account is open and as needed to provide the Services, and then delete it as described in Data Retention: 30 days after an account is deleted or closed, with backup copies deleted within a further 12 months. We keep some records longer where the law requires it or to establish, exercise, or defend legal claims.

Your rights

Subject to the conditions and exceptions in the law that applies to you, you have the right to:

Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, our purposes, and the categories of third parties we disclose it to, and receive a copy in a portable format
Delete personal information we have collected from you
Correct inaccurate personal information
Opt out of the sale or sharing of personal information, of targeted advertising, and of certain profiling. We do none of these.
Limit the use of sensitive personal information. We use it only for purposes that do not require offering this right.
Not be discriminated against for exercising these rights. We will not deny you the Services, charge you a different price, or provide a different quality of service because you exercised them.

How to make a request

Delete your account: in Tabsy Express, delete your account in the app (on iPhone and iPad: More › Settings › Delete account).
Any request: email privacy@tabsy.co or call (650) 942-1791, and tell us which right you want to exercise.

Verification. To protect your information, we verify requests before acting on them. We will ask you to make the request from, or confirm it through, the email address on your account, and we may ask for information that matches what we already hold. Deleting your account in the app is confirmed with your password. We use information provided for verification only for that purpose.

Authorized agents. You may use an authorized agent to make a request for you. We will ask the agent for your signed permission and may ask you to verify your identity directly with us, unless the agent holds a valid power of attorney.

Response times. We will confirm that we received your request within 10 business days and respond within 45 days. If we need more time, we will tell you why, and we may take up to a further 45 days where the law allows.

Appeals. If we decline to act on your request, we will explain why. You may appeal by replying to our decision or by emailing privacy@tabsy.co with the subject "Privacy request appeal." We will respond to your appeal in writing within the time your state's law requires. If we deny your appeal, you may contact your state's Attorney General.

Do Not Track and Global Privacy Control

We do not track visitors across third-party websites over time, and we do not sell or share personal information, so the Services do not change their behaviour in response to a browser's "Do Not Track" signal. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out of the sale and sharing of personal information associated with that browser, which we already do not do.

California "Shine the Light"

We do not disclose personal information to third parties for their own direct marketing purposes.

Your Regional Rights

Canada

If you are located in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation, including Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25). In addition to the rights described above, you have the right to:

Withdraw your consent to our collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions and reasonable notice. Withdrawing consent may mean we can no longer provide the Services to you.
Be informed of, and object to, any use of your personal information to render a decision based exclusively on automated processing. We do not make any decision about you based exclusively on automated processing.
Request the portability of the computerized personal information you have provided to us, in a structured and commonly used technological format (Quebec residents).
Request the de-indexing or cessation of dissemination of your personal information in the circumstances provided by law (Quebec residents).
Complain to the Office of the Privacy Commissioner of Canada, or to the Commission d'accès à l'information du Québec if you reside in Quebec.

Your personal information is stored and processed in the United States (see International Data Transfers below), which means it may be accessible to U.S. authorities under U.S. law. By using the Services you consent to that transfer. Our Privacy Officer can be reached at privacy@tabsy.co and is responsible for our compliance with this policy.

A French-language version of this policy is available on request from privacy@tabsy.co.

Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

International Data Transfers

Your information is stored and processed in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: privacy@tabsy.co
Phone: (650) 942-1791
Address: 425 Page Mill Rd., Suite 200, Palo Alto, CA 94306