# Privacy Policy for Tab-Pilot

**Last updated:** February 7, 2025

## Summary

Tab-Pilot stores all data locally in your browser. Google Drive sync is optional and uses a private app folder that no other application can access. The extension includes optional AI-powered features that may send tab information to third-party AI services (Anthropic or OpenAI) when you choose to use them and provide your own API key. We do not collect, track, or sell any user data.

## Data Collection

Tab-Pilot collects the following types of data:

- **Tab Information**: Tab titles, URLs, and favicons from your open browser tabs. This data is collected only when you explicitly save tabs or use the extension's features.
- **Workspace Data**: Workspaces, folders, and saved tab collections that you create within the extension.
- **Google Account Email**: If you enable Google Drive sync, your Google account email address is accessed to confirm which account is synced.

Tab-Pilot does **not** use analytics, telemetry, cookies, or any third-party tracking services. We do not collect personal information such as your name, address, or phone number.

## How Data is Used

The data collected by Tab-Pilot is used solely for the following purposes:

- **Core Functionality**: To save, organize, and manage your browser tabs in workspaces and folders.
- **Display**: To show your saved tabs, workspaces, and folders in the extension interface.
- **Google Drive Sync**: If enabled, to synchronize your data across devices using Google Drive's private app folder.
- **AI Features**: If you choose to use AI-powered organization features and provide your own API key, tab information (titles, URLs, and workspace structure) may be sent to third-party AI services to generate organization suggestions.

## Data Storage

All data created by Tab-Pilot (workspaces, folders, saved tabs) is stored locally in your browser using Chrome's built-in storage API (`chrome.storage.local`). This data never leaves your device unless you explicitly enable Google Drive sync or use AI-powered features.

The extension also uses browser `localStorage` to store UI preferences (such as sidebar collapsed state and dashboard settings) for a better user experience. This UI preference data is separate from your saved tabs and workspaces and is only used to maintain your interface preferences.

## Data Retention

- **Local Storage**: Data stored locally in your browser (using `chrome.storage.local` and `localStorage`) persists until you manually delete it or uninstall the extension. UI preferences stored in `localStorage` are also cleared when you uninstall the extension.
- **Google Drive**: If you enable sync, data stored in Google Drive persists until you disable sync and delete it from your Google Account.
- **Third-Party AI Services**: When using AI features, data sent to Anthropic or OpenAI is subject to their respective privacy policies and data retention practices. We recommend reviewing their policies:
  - [Anthropic Privacy Policy](https://www.anthropic.com/privacy)
  - [OpenAI Privacy Policy](https://openai.com/policies/privacy-policy)

## Third-Party Services

Tab-Pilot integrates with the following third-party services:

### Google Drive (Optional)
If you choose to enable Google Drive sync:
- Tab-Pilot authenticates using Google's OAuth2 flow through Chrome's `identity` API.
- Your data is stored in Google Drive's **private application data folder** (`appDataFolder`). This folder is only accessible by Tab-Pilot — no other application or user can read it.
- The only Google account information accessed is your email address, which is displayed in the extension to confirm which account is synced.
- You can disable sync at any time, which stops all communication with Google Drive.
- Google's privacy policy applies to data stored in Google Drive: [Google Privacy Policy](https://policies.google.com/privacy)

### AI Services (Optional)
Tab-Pilot includes optional AI-powered features that can help organize your tabs. These features are **opt-in** and require you to:
- Provide your own API key from either Anthropic or OpenAI
- Explicitly choose to use AI features

When you use AI features:
- **What data is sent**: Tab titles, URLs, workspace structure, and folder organization data are sent to the AI service you choose (Anthropic or OpenAI).
- **Purpose**: This data is used solely to generate suggestions for organizing your tabs.
- **API Key**: Your API key is stored locally in your browser and sent directly to the AI service. Tab-Pilot does not have access to your API key or any responses from the AI service.
- **Data handling**: Data sent to AI services is subject to their respective privacy policies. We recommend reviewing:
  - [Anthropic Privacy Policy](https://www.anthropic.com/privacy)
  - [OpenAI Privacy Policy](https://openai.com/policies/privacy-policy)
- **Control**: You can disable AI features at any time, which stops all communication with AI services.

## Data Sharing

Tab-Pilot does **not**:

- Sell or transfer user data to third parties
- Use data for advertising or marketing purposes
- Use data to determine creditworthiness or for lending
- Transfer data for purposes unrelated to the extension's core functionality

Data is only shared with:
- **Google Drive**: Only if you explicitly enable sync, and only to Google Drive's private app folder
- **AI Services**: Only if you explicitly choose to use AI features and provide your own API key

## Permissions

Tab-Pilot requests the following browser permissions:

| Permission | Purpose |
|---|---|
| `tabs` | Read tab titles, URLs, and favicons to display and save them |
| `storage` | Store saved workspaces, folders, and tabs locally |
| `contextMenus` | Add "Add to Tab Pilot" to the right-click menu |
| `sidePanel` | Show open browser tabs in a sidebar panel |
| `identity` | Authenticate with Google for optional Drive sync |
| `alarms` | Schedule periodic sync checks (every 5 minutes) |
| `host_permissions` | Read favicons and tab information from any page, and communicate with Google Drive and AI service APIs |

## User Rights

You have the following rights regarding your data:

- **Access**: You can view all your saved data within the extension interface.
- **Deletion**: You can delete individual workspaces, folders, or tabs at any time. Uninstalling the extension removes all locally stored data.
- **Google Drive Data**: If you used Google Drive sync, you can delete the app data from your Google Account at [https://myaccount.google.com/permissions](https://myaccount.google.com/permissions).
- **AI Features**: You can disable AI features at any time, which stops all communication with AI services.
- **Sync Control**: You can enable or disable Google Drive sync at any time.

## Data Deletion

- **Local Data**: Uninstalling the extension removes all locally stored data, including workspaces, folders, saved tabs, and API keys.
- **Google Drive**: If you used Google Drive sync, you can delete the app data from your Google Account at [https://myaccount.google.com/permissions](https://myaccount.google.com/permissions).
- **AI Services**: Data sent to AI services is subject to their respective data retention policies. You can stop sending data by disabling AI features in the extension.

## Changes to This Privacy Policy

We may update this privacy policy from time to time. The "Last updated" date at the top of this policy indicates when changes were last made. We encourage you to review this policy periodically.

## Contact

If you have questions about this privacy policy or how we handle your data, please contact us:
- Open an issue on our GitHub repository: [https://github.com/tab-pilot/landing-page](https://github.com/tab-pilot/landing-page)
- Or contact us through the email provided on the Chrome Web Store listing