Who handles your data
Tabula is operated by Maksim Kiselev. Contact tabulaap@gmail.com about personal data.
Information we process
You can use local workspaces without an account. When you sign in, we process your account identity and email, authentication information, and subscription status. Signed-in workspaces sync through Supabase, including workspace names, saved tile URLs, text, notes, images, drawings, and layout information. Do not place information in a synced workspace that you do not want stored with our hosting provider.
Websites opened in Tabula receive requests from your device and process data under their own privacy policies. Their cookies and browser sessions are separate from your Tabula account.
Support requests include the contact details and message you submit. Payment checkout is handled by Polar; we process subscription and transaction references, while payment details are handled by Polar and its payment providers.
Analytics, diagnostics, and voice
Optional website analytics and performance measurement use Vercel Web Analytics and Speed Insights only after you accept analytics. Your choice is stored in your browser. See our Cookie Policy for how to reset it.
The desktop app sends one usage count a day: a random identifier created on your device, the app version, your Mac's processor name and macOS version, and whether you are signed in. We record the country the request comes from, but not your IP address. It contains no browsing activity and is not linked to your account. You can turn it off in Settings → Privacy. We also count downloads from our website by platform and country, without storing IP addresses.
Desktop builds configured for Sentry error reporting send error and crash diagnostics. These may include technical information about your device and app state.
If you use voice transcription, your recording is sent through our server to the configured transcription provider, Groq or OpenAI, to return text. This processing occurs when you invoke the feature.
Why we process information
We use account, workspace, and billing information to provide the service you request; support information to respond to you; and technical diagnostics to maintain security and reliability. Optional website analytics depend on consent. We also retain information where required to meet legal obligations. We do not sell personal information or use your browsing activity to build advertising profiles.
Service providers and transfers
Providers involved in operating Tabula include Supabase for accounts and synced data, Vercel for website hosting and optional measurement, Polar for purchases, Resend for email delivery, and the diagnostic and transcription providers described above when those features are used. Processing may occur outside your country. Applicable data-protection requirements apply to international transfers. Third-party websites you visit have their own independent practices.
Retention and deletion
Local browser data remains on your device until you clear it. Account and synced workspace data are retained to operate your account; contact us to request access or deletion. Some billing, security, or legal records may need to be retained after account deletion. Deleting local data does not necessarily delete cloud copies, and deleting your account does not automatically cancel a paid subscription: manage cancellation through your Polar billing portal or contact support.
Your choices and rights
You can decline optional analytics, clear local browser data, and contact us to request access, correction, deletion, or other applicable privacy rights. We may verify your identity before acting on a request. See our GDPR notice for regional rights and complaint options. Tabula is intended for users aged 16 and over. If you believe a child under that age has provided personal information, contact us.
Changes to this policy
We will update this page when our practices change and provide notice of material changes where required.