Privacy Policy

What Data We Process Locally

TabFlow AI processes the following data entirely on your device:

• Tab URLs and page titles — to detect which sales tool you're using and extract entity names (deal names, company names, contact names)
• Entity metadata — type (deal/company/contact), name, and source tool, used to group related tabs together
• Saved sessions — tab groups you explicitly save for later restoration
• Workflow patterns — anonymized tool-to-tool navigation patterns used to suggest next actions
• User preferences — settings like dark mode, auto-grouping, and tier information

This data is stored using Chrome's chrome.storage.local API, encrypted at rest using AES-256-GCM with a locally generated key. None of this data is transmitted externally.

Data Sent Externally

TabFlow AI communicates with external services in two specific cases:

1. Anonymous Usage Analytics (opt-in)

Analytics are disabled by default. If you enable "Share anonymous usage data" in Settings, the following is sent once daily to our self-hosted analytics server:

• Aggregate event counts (e.g., groups created, sessions saved)
• Which sales tools were detected (e.g., "salesforce", "linkedin")
• Your plan tier (free/pro/team) and extension version
• A random installation ID (UUID, not linked to your identity)

Never sent: URLs, tab titles, entity names, email addresses, browsing history, or any personally identifiable information.

You can disable analytics at any time in Settings. When disabled, no analytics data is collected or transmitted.

2. License Validation (paid users only)

If you activate a paid license, the extension communicates with LemonSqueezy's API to:

• Validate your license key on activation
• Periodically re-validate (once every 24 hours) to confirm the license is still active
• Deactivate the license when you choose to do so

The only data sent is your license key and a device instance identifier. No browsing data, tab information, or usage patterns are included.

Data Retention

Stored data is automatically purged after a configurable retention period (default: 30 days). You can adjust this in Settings.

Active tab data (currently open tabs) is never auto-deleted — only historical sessions and patterns expire.

Your Rights

You have full control over your data at all times:

• Export — Download all your data as a JSON file from Settings
• Delete — Permanently delete all stored data from Settings
• Opt out of analytics — Disable "Share anonymous usage data" in Settings (off by default)
• Uninstall — Removing the extension deletes all associated data automatically

Permissions

The extension requests the following Chrome permissions:

• tabs — to read tab URLs and titles for grouping
• tabGroups — to create native Chrome tab groups
• storage — to persist your data locally
• sidePanel — to display the TabFlow side panel
• alarms — for periodic maintenance tasks (stale deal checks, data retention, license re-validation, analytics flush)
• activeTab — to access the current tab when you interact with the extension
• Host permissions for sales tools — Salesforce, HubSpot, LinkedIn, Gmail, Outreach domains for content scripts
• Host permissions for services — api.lemonsqueezy.com (license validation), analytics.nexasphere.io (optional analytics)

Children's Privacy

TabFlow AI is not directed at children under 13 and does not knowingly process data from children.

Changes to This Policy

We may update this policy as features evolve. The "Last updated" date at the top will reflect any changes.

Contact

Questions about this privacy policy? Email us at [email protected].