Privacy policy

Information we collect

We collect account and studio information, such as your name, email address, organization, role, and preferences. We also store the content your team puts into Tabi, including references, design files, style records, comments, approvals, tech packs, prompts, and generated results.

We collect technical and usage information needed to operate and protect the service. If you connect another service, such as Shopify, we receive the records and credentials needed to provide that connection. Payment details are processed by our payment provider rather than stored as card data in Tabi.

How we use information

We use information to provide the workspace, keep projects in sync, process files, run requested AI features, create exports, manage accounts and billing, send service messages, support customers, prevent abuse, and comply with legal obligations.

We do not use customer content for advertising, and we do not sell or rent customer content or personal information.

When information is shared

Your studio controls who can access its workspace and which read-only review or development-pack links it creates. We do not share one customer’s private workspace with another customer.

We share only the information needed with service providers that help us host data, process AI requests, send email, handle billing, monitor reliability, or operate an integration you enable. We may also disclose information when required by law, to protect Tabi and its users, or as part of a business transaction with appropriate safeguards.

AI features

When you ask Tabi to analyze, generate, transcribe, or embed content, the selected inputs are sent to an AI service provider so it can return the result you requested. Tabi limits that request to the context needed for the feature. AI provider handling is also governed by that provider’s applicable service terms.

Security

Tabi uses authenticated sessions, role and workspace checks, row-level database controls, private object storage, short-lived signed media URLs, encrypted integration tokens, verified webhook signatures, and HTTPS protections. Access links can be revoked. We review these controls as the product changes.

No online service can promise absolute security. If we learn of an incident that affects your information, we will investigate it and provide notice when required.

Retention and your choices

We retain information while your account is active and as needed to provide the service, meet legal obligations, resolve disputes, and maintain appropriate backups. Your team can revoke public share links and disconnect integrations from the product.

You may ask to access, correct, export, or delete personal information, subject to applicable law and legitimate record keeping needs. Contact us at studio@tabi.sh. We may need to verify your identity and authority for the workspace before completing a request.

Policy updates

We may update this policy as Tabi changes. We will post the new effective date here and provide additional notice when a change materially affects how we handle customer information.