This privacy notice applies to your use of the website, application programming interface (“API”), technology, software, and services (as further described in the Tabstack Terms of Service) (“Terms”) via any platform or device (“Services”). The Services are owned, licensed, and operated by Mozilla Corporation (referred to herein as "we," "us," "our," or "Mozilla").

This privacy notice explains what information we collect, share, and process, and why. Your use of the Service constitutes your acceptance of this privacy notice, which incorporates by reference our Terms of Service.

Things you should know

We collect the following information directly from you when you use the Services:

• Account information: We may collect personal information, such as your name, username, contact information, and any other information that you provide to us in connection with the creation or administration of your account.
• Inputs and Outputs: There are currently no LLM or similar AI-based platforms operated by or affiliated with Mozilla. However, Tabstack allows you to query selected LLMs offered by third parties (“Third-Party Models”) by inputting information, queries, documents, media, or prompts (Inputs) to these Third-Party Models through the Services. For those Services, we process your Inputs in order to run them through Third-Party Models and generate results (“Outputs”). We may offer you the ability to store history (including your content and/or Outputs) until you choose to delete it. Where we don’t offer such capability, if you abandon a query or navigate away from our site, all Inputs and Outputs will be discarded by your browser and irretrievably lost. It is your responsibility to determine what personal information you share through the Services, and should be careful about sharing confidential or sensitive information as part of your Inputs. You should also be aware that, depending on how you use the Service, Outputs may include personal information. You are responsible for ensuring you have all necessary rights and consents to include any personal information (whether the personal information is yours, your end users, or any other person) in your Inputs or processing any personal information that may be contained in Outputs.
• Communications: When you contact us in connection with the Services, we may also collect personal information, such as your username, name, email address, or phone number, as well as any other personal information you may provide to us. You may periodically receive emails, including marketing emails from us. We use third party service providers, such as Sendgrid, for email management. You may opt out at any time to our marketing communications, by clicking the unsubscribe at the bottom of the email or via account settings under “Marketing Preference.”

We also automatically receive certain information when you interact with the Services:

• Payment Information: When you select one of our paid offerings as described on the Tabstack Plan page, you will provide information and send payment through our third-party payment provider: Stripe. Tabstack receives a record of your payment and certain Stripe account details (including the amount, the stripe customer id, stripe payment intent id, payment date, url of receipt (hosted and authenticated via stripe), and invoice id) and the status of your account. We will also have access to your billing address and the last four digits of your credit card. We do not store your full payment details. Please see Stripe’s Terms of Service and Privacy Notice for more information.
• Browsing History: In order to provide the Services, we process your browsing history (including specific URLs, general browsing categories, and other website interaction data) and web form data. If you opt in to storing your history, as available, we will retain this data for 90 days.
• Technical data: We receive basic telemetry data by default, which we use to improve the performance, stability, and security of the Services, including information about your device, including hardware configuration and device operating system; browser information, such as browser type and settings; log files and usage data; and event information, such as errors or crashes. We may also receive additional information about your device, such as country, language, operator and OEM, which we use to prevent fraud and abuse, enforce our terms, and improve the security of the Services.
• Location data: Your IP address is temporarily collected as part of our server logs, and automatically deleted after 60 days. We use it to approximate your location to comply with relevant legal and regulatory requirements, as well as for fraud and abuse prevention purposes.
• Interaction data: We receive aggregate data about visits to Services websites and other aggregate insights about user interactions with the Services. We use this data to better understand usage of the Services, as well as to add, improve, or remove certain features of the Services. We may also receive HTTP referral data to understand the website or domain that referred you to our site, which we only use for purposes of addressing bugs or other technical issues with our Services. We automatically delete this data after 30 days.
• Metrics and Analytics: We may also use cookies, device information, IP addresses, clear GIFs, and third-party services to: securely operate some of the Services; understand how users engage with our Services (such as site visits and session replays); recognize your settings and preferences; and provide additional functionality. We use:
  • Sign in with Google, which places a cookie on your device to assist with sign-in and authentication to the Services. When you sign into the Services, you accept the associated Privacy Policy and Terms of Service from Google.
  • Google Analytics to obtain metrics on how users engage with our websites. This helps us to improve site content. For more information about how Google uses your personal information, please visit Google Analytics’ Privacy & Security. You can install the Google Analytics Opt-out Browser Add-on to prevent data collection about your visits to the Services and prohibit data transmission to Google Analytics.
  • Posthog, a session replay service, that records your interactions, clicks, keystrokes and scrolls in real time. We use these session replays to understand how users interact with the Service, help us diagnose Service issues, resolve customer issues, debug errors, and improve our Services. We only run session replays if you have consented to processing your information data through our cookie preferences banner. In order to opt-out of this processing and/or update your cookie preferences, please visit the Cookie Preferences link at the bottom of our webpages. This session replay information is deleted after 30 days.

We also receive the following information from third parties when you use the Services:

• Account data: You may need a Google Account in order to create an account and access the Services. When you log in with your Google Account to access the Services, we receive your name, email address, language preference, and profile picture from Google, and use this information to assist with your account administration and to contact you in relation to the Services, as well as to enforce our Tabstack Terms of Services and Acceptable Use Policy. Use of a Google Account is governed by Google's Privacy Policy and Terms of Service.
• Fraud Prevention: We may use third-party technology, Google’s Invisible reCAPTCHA, in the background of our website in order to identify fraudulent activity. Use of the Invisible reCAPTCHA is governed by Google's Privacy Policy and Terms of Service.
• Model query data: When you use any of the Services that enable you to query Third-Party Models, we may automatically receive a payload back that contains the contents of your query; information about the model queried (such as the name and version number); information about technical problems with processing the query, if any; the number of tokens required to process the query; and the model Outputs in response to the query.

We may also use information about you to find and address violations of our terms of Tabstack Terms of Services or Acceptable Use Policy; investigate suspicious activity; detect, prevent, and combat harmful or unlawful behavior; and otherwise maintain the integrity of our Service.

Information We Share

We use third parties to provide the Services to you, and have contracted with these companies requiring them to protect your information (Third-Party Services):

• Google Cloud Platform: Google Cloud Provider (GCP) is a cloud-computing platform. We use GCP to facilitate account creation, authenticate users, host content, and provide access to certain Third-Party Models available through the Google Vertex service.
• OpenAI: OpenAI is an AI research and deployment company that offers certain LLMs for individual and enterprise use, APIs, and other services. For applicable Services, we use OpenAI to provide access to certain Third-Party Models, including ChatGPT, via our Service.

Third-Party Services, including any Outputs generated by the use of Third-Party Services and Third-Party Models, are subject to their own terms, and we are not responsible for them.

We may also share or transfer your personal information to another entity in connection with or during negotiations of, any merger, sale, acquisition, or financing of any one of the Services.

Children

The Services are not directed to children under 18 years of age, and we do not knowingly collect or solicit personal information from children. If we obtain actual knowledge that we’ve collected personal information from a child under the age of 18, we will delete that information as soon as possible, unless we have a legal obligation to keep it. If you are a parent or guardian and believe your child has uploaded personal information to our site without your consent, you may contact us as described in “How to Contact Us” below.

Account Information

If you would at any time like to review or change the information in your account or terminate your account with the Service, you can:

• Contact us at support@tabstack.ai
• Log in to your account settings and update your user account.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information in our files to prevent fraud, assist with any investigations, enforce our legal terms, and/or comply with applicable recordkeeping and other legal requirements.

Note: Changing or terminating your account with the Service will not change or terminate your Google Account.

How to Contact Us

To make requests regarding your personal information, please contact us through our Data Subject Access Request Portal. If you have any other questions regarding personal information or our privacy practices, please contact us at compliance@mozilla.com. We respond to all requests we receive from individuals wishing to exercise their rights in accordance with applicable laws.

International Transfers

We (and our servers) are based in the United States. Because we are a global company, in order to provide the services outlined in this Privacy Notice, the information we collect may be accessed from locations where our people are located and data may also be transferred to other jurisdictions as a result of sharing data with our partners. Where applicable, we ensure we have appropriate mechanisms in place (such as standard contractual clauses approved by the European Commission and other relevant authorities) to protect your personal data. You can contact dpo@mozilla.com for information on the safeguards implemented for international transfers, or for copies of the relevant standard contractual clauses.

Supplemental Information for users in Specific Regions

Some regions have data protection laws that require us to specify the following:

Our Privacy Notice describes the purposes for which we process information about you and the categories of information we process. We do not sell personal data.

Our lawful bases for collecting and processing personal information include:

• Performing our contract with you: Creating an account with the Service requires your agreement to the Tabstack Terms of Service. To provide the services described, such as querying Third-Party Models, we need your account information, the content of your queries, and certain technical and interaction data, as further described in this Privacy Notice.
• Legitimate interests: As described in this Privacy Notice, we also receive technical and interaction data of users, which may include IP addresses, and certain metrics to improve the security and reliability of our services, prevent fraud and abuse, log and address technical problems, and enforce our Tabstack Terms of Service and Acceptable Use Policy.
• Consent: Where we ask for your consent to process your information, you can always withdraw this consent.

The following rights are granted by certain laws such as the General Data Protection Regulation (“GDPR”) in the EU and the California Consumer Privacy Act (“CCPA”) in California:

• The right to know what personal data is collected
• The right to know if personal data is being shared, and with whom
• The right to access your personal data
• The right to exercise your privacy rights without being discriminated against

In many cases, you can access, update, or delete your personal information directly from our product settings.

To make requests regarding your personal data, please contact us through our Data Subject Access Request Portal. If you have any other questions regarding personal data or our privacy practices, please contact us at dpo@mozilla.com, or you can contact our DPO by mail at:

Bird & Bird DPO Services SRL
Avenue Louise 235 b 1
1050 Brussels
Belgium

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. You also have the right to lodge a complaint with your local data protection authority.