Service Overview
TabTabTab is a web-based productivity application with AI-powered assistance for documents, spreadsheets, and files. This page explains exactly how we handle your data.
Data We Collect
- Email Address: Collected via Google OAuth or email/password registration for account management
- Usage Analytics: High-level interaction events via PostHog (see Analytics section)
- Files & Documents: Content you create or upload (see Storage section)
- Observability Logs: Prompts, tool calls, and AI responses for debugging/support (90-day retention)
How We Handle Your Data
What We Store (Backend)
Stored on our servers to enable AI workflows and cross-browser access:
- Files: Private GCS bucket
- Documents: TipTap backend
- Spreadsheets: Database storage
This works like Google Drive—your files are accessible from any browser/device and can be processed by our AI.
What Stays Local (Browser)
Never sent to our servers—stays only in your browser:
- Chat Message History
- Conversation Threads
- File Snapshots
- File Change Staging
⚠️ If you switch browsers or clear data, this is lost.
Observability & Retention
90-Day Chat Log Retention
- What: Observability logs that may include your prompts, the agent’s tool calls (and outcomes), and AI responses
- Retention: Automatically deleted after 90 days
- Purpose: Debugging issues, providing support, and ensuring service reliability
- Not used for: AI training, marketing, or sharing with third parties
- Access: Only authorized team members (e.g. via support/observability tools such as Langfuse) when investigating issues
These logs do not include raw file contents (for example: PDFs, images, spreadsheets, or other uploaded file data).
AI Training Policy
Your Data Is Not Used for Training
- ✅ Our AI providers are contractually instructed not to train on your data
- ✅ TabTabTab does not train AI models using your data
Analytics Collection
We use PostHog for analytics to understand usage patterns, improve the experience, and identify issues:
- Navigation events: How you move through the app (to improve UX)
- File upload events: When you upload a file (not the file content itself)
- Agentic request lifecycle: Start, stop, abort, and completion events
- Error tracking: To identify and fix bugs
Session replay is disabled. We track usage events—never the content of your files.
Security Measures
- All communications use secure HTTPS encryption
- Files stored in private, encrypted GCS buckets
- OAuth authentication through secure providers
- Regular security audits and updates
- We do not look at your files, except to provide support at your request
Your Control Over Your Data
- Request deletion of your account and all associated data
- Export your files and documents at any time
- Manage notification and email preferences
Questions About Data Usage?
We're committed to transparency. If you have any questions about how we handle your data, please contact us at:
Email: privacy@tabtabtab.ai
Last updated: January 22, 2026