Privacy Policy

Introduction

At Tabsy Corp ("Tabsy," "we," "our," or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at tabsy.co, our mobile applications (Tabsy LPM for iOS and Android), and our related services (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.

Information We Collect

Information You Provide Directly

• Account information: name, email address, password, business name, and role
• Company profile: business address, phone number, website, and logo
• Client and contact data: names, email addresses, phone numbers, and addresses of your clients and contacts
• Business documents: estimates, invoices, contracts, work orders, and project details
• Payment information: billing details processed through our third-party payment processor (Stripe). We do not store full credit card numbers on our servers.
• Communications: messages you send through our support channels or contact forms
• Photos and files: images, documents, and other files you upload to projects or share through the mobile app

Information Collected Automatically

• Device information: device type, operating system and version, browser type, screen resolution, and unique device identifiers
• Network information: IP address and general geographic location
• Usage data: pages visited, features used, actions taken, time spent, and interaction patterns
• Cookies and similar technologies: session cookies, preference cookies, and analytics cookies

Information Collected via Mobile Applications

When you use our mobile applications, we may additionally collect:

• Push notification tokens: device tokens for sending push notifications (Firebase Cloud Messaging). You can disable push notifications in your device settings at any time.
• Camera and photo library access: only when you explicitly choose to upload photos or documents to a project. We do not access your camera or photos without your action.
• Device identifiers: anonymous identifiers used for crash reporting and analytics through Firebase Crashlytics and Firebase Analytics
• App performance data: crash logs, error reports, and performance metrics to improve app stability

How We Use Your Information

• Provide, operate, maintain, and improve the Services
• Process transactions and send related information (confirmations, invoices, receipts)
• Send administrative messages, security alerts, and service updates
• Send push notifications about relevant activity (new assignments, project updates, schedule changes) when enabled
• Respond to your comments, questions, and support requests
• Monitor and analyze usage trends to improve the user experience
• Detect, prevent, and address technical issues, fraud, and security incidents
• Comply with legal obligations

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

• Service providers: We use trusted third-party services to operate our platform, including:
  • Stripe — payment processing
  • Firebase (Google) — push notifications, crash reporting, and analytics
  • Cloud hosting providers — data storage and computing
  • Email service providers — transactional and support emails
• Your clients: Information you include in estimates, invoices, and contracts is shared with the recipients of those documents
• Legal requirements: When required by law, subpoena, or legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity
• With your consent: When you explicitly authorize sharing

Data Security

We implement industry-standard security measures to protect your information, including:

• SSL/TLS encryption for all data in transit
• Encryption at rest for sensitive data (database credentials, API keys)
• Isolated database schemas per tenant — your data is never commingled with other customers' data
• Regular security audits and vulnerability assessments
• Access controls and authentication requirements
• Automated threat detection and monitoring

Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Services. If you close your account, we will retain your data for up to 30 days to allow for reactivation, after which it will be permanently deleted. We may retain certain information longer as required by law or for legitimate business purposes such as fraud prevention.

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal data. You can request account and data deletion by contacting us at [email protected]
• Data portability: Request an export of your data in a machine-readable format
• Opt-out of communications: Unsubscribe from marketing emails using the link in each email. You cannot opt out of essential service communications.
• Push notifications: Disable push notifications through your device settings at any time
• Cookies: Control cookies through your browser settings. Disabling cookies may affect functionality.

Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will promptly delete it.

International Data Transfers

Your information is stored and processed in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: privacy@tabsy.co
• Phone: (650) 942-1791
• Address: 425 Page Mill Rd., Suite 200, Palo Alto, CA 94306