Privacy policy
Tabductor runs browser automations on your behalf. This policy explains what we collect to do that, why, who else processes it, how long we keep it, and your rights. We do not sell personal data and we do not use it for advertising.
Who we are
Fullstacktics, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India (GSTIN 09AHXPF5233C1ZA), is the controller of the personal data described here. Contact us about privacy at ammar@tabductor.com.
- EU representative: Being appointed; details will appear here
- UK representative: Being appointed; details will appear here
- Data protection officer: Not appointed, as the law does not require one for our processing
Data in your workflows. When your workflows collect personal data from the websites they visit, you decide what is collected and why, so you are its controller and we process it for you as your processor. Our Terms of service cover this, and business customers can ask for our data processing agreement.
What we collect, why, and for how long
| Data | Purpose | Lawful basis | Kept for |
|---|---|---|---|
| Account and sign-in: name, email address, sign-in identifiers (held by Clerk), and your account ID | Create your account, sign you in and keep it secure | Contract | While your account exists; erased when you delete it |
| Workflows: prompts, result schemas, schedules, compiled scripts and settings | Build and run the automations you ask for | Contract | Until you delete the workflow or your account |
| Run records: each run's status, timing, result and summary, and the events workflows emit | Show you what ran and what it returned | Contract | Until you delete the workflow or your account |
| Run detail: step-by-step traces, screenshots, page content sent to AI models, code cells and browser operations | Let you inspect and debug runs, and make repeated runs cheaper | Contract | 180 days after the run ends |
| Session recordings (encrypted video of the managed browser) | Replay what the browser did | Contract | 7 days after the session starts |
| Activity of browsers opened for profile setup or through the API | Show you what the browser did | Contract | 90 days after the session ends; a minimal record stays while a billing record refers to it |
| Browser profiles: cookies, local storage and other browser state, encrypted | Keep workflows signed in to the sites you use | Contract | Until you delete the profile or your account. Older snapshots are removed when a newer one replaces them |
| Secrets and API keys, encrypted | Use them in your workflows and API calls | Contract | Until you delete them or your account |
| Billing records: top-ups, refunds, usage charges and Paddle references | Charge for usage, handle refunds and keep accounts | Contract; legal obligation (tax and accounting) | 8 years, as Indian tax law requires. After account deletion we keep only amounts, dates, Paddle references and tax details |
| Payment notifications from Paddle, which can include your name, email and billing address | Credit your balance and process refunds | Contract; legal obligation | 30 days after we process them; the payment records derived from them are kept as above |
| Technical data: IP address, browser details, request and database logs | Operate, secure and debug the service, and prevent abuse | Legitimate interests (security and reliability) | IP addresses for rate limiting are held in memory only. Logs: 30 days |
Card and payment details go to Paddle, our merchant of record, and never reach us. Paddle keeps its own payment records under its privacy policy. When run detail expires, the run itself, its result and its billing records stay, and the run shows that its details expired.
Database backups are kept for 1 day, and deleted files expire from storage after 1 day, so deleted data leaves our backups within a few days.
We use aggregated, de-identified usage figures to understand and improve the product.
Deleting your account and exporting your data
You can delete your account and download a copy of your data yourself in Settings → Account.
Deletion is immediate: you are signed out at once, your API keys, share links and schedules stop working, and we then erase your workflows, runs, recordings, results, stored data, browser profiles and their saved sign-ins, secrets, model and API keys, data exports, and your sign-in account with Clerk.
Any unused balance you paid for is refunded to your original payment method through Paddle. Balance that came from coupons, discounts or welcome credit is not refundable. We keep records of your top-ups, refunds and usage charges as the table above says, with your name and anything you wrote removed.
Your export is a ZIP of machine-readable JSON with your account, workflows, runs and results, workflow store data, browser profile and session details, billing records, and the names of your API keys and secrets. For your security it never includes secret values, API key values or the cookies and sign-ins saved in browser profiles. You can request one export a day, and each download link lasts 7 days.
Deleting a workflow erases its runs, recordings and data. Deleting a browser profile erases its saved browser state. You can delete secrets and API keys at any time.
Who processes it
We use these subprocessors. The subprocessor list says what each one receives and where.
- Amazon Web Services: hosting: servers, managed browsers, database, file storage, encryption keys and the content delivery network.
- Clerk: sign-in, account management and session cookies.
- Paddle: merchant of record: checkout, payments, tax, invoices and refunds.
- OpenAI: aI models that plan, run and summarize workflows.
- Anthropic: aI models that plan, run and summarize workflows.
- IPRoyal: residential proxy network for browser traffic.
- Decodo: residential proxy network for browser traffic.
- CapSolver: cAPTCHA solving.
- 2Captcha: cAPTCHA solving.
- Anti-Captcha: cAPTCHA solving.
- Google Fonts: web fonts for this website.
- Cloudflare: dNS for our domain (DNS only; our web traffic does not pass through Cloudflare).
AI model providers receive the prompts, page content and screenshots needed to plan and run your workflows, through our accounts with them. Websites your workflows visit see that traffic as they would any browser's, and handle it under their own policies.
International transfers
Tabductor runs in Sydney, Australia (AWS ap-southeast-2). Some subprocessors are in the United States and other countries. Where personal data from the EU, EEA, UK or Switzerland goes to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where needed) or the provider's certification under the EU-US Data Privacy Framework. Ask us for a copy of the safeguards that apply.
Sharing you control
If you create a share link or publish a workflow to Explore, the content you chose to share is visible to anyone with the link or to the public. You can revoke links and unpublish listings at any time.
Security
Secrets, browser profiles and recordings are encrypted with per-item keys wrapped by a managed key service; the database and file storage are encrypted at rest, and data is transferred over TLS. Every request is checked against the account that owns the data, and access to production systems is restricted. No system is perfectly secure; tell us promptly if you believe your account is compromised.
Your rights
Depending on where you live, you have the right to:
- access your personal data and get a copy of it;
- correct data that is wrong;
- have your data erased;
- restrict or object to processing, including processing based on our legitimate interests;
- receive your data in a machine-readable format and have it sent to another service;
- withdraw consent at any time, where we rely on it.
Use Settings → Account to export or delete your data, or email ammar@tabductor.com. We answer within one month. If a request is complex we may extend this by up to two more months, and we will tell you why within the first month. We may ask you to confirm your identity first.
You can complain to a data protection supervisory authority, in particular in the country where you live or work or where you believe your rights were infringed. We would appreciate the chance to address your concern first.
Cookies
We use only cookies that are strictly necessary. Our sign-in provider, Clerk, sets cookies that keep you signed in and protect your session. On the checkout page, Paddle's payment form may set its own cookies to process the payment and prevent fraud. We do not use analytics, advertising or tracking cookies. Your theme and sidebar preferences are stored in your browser's local storage and never sent to us.
Pages load their fonts from Google Fonts, which receives your IP address and browser details when a page loads.
Grievance Officer
Under India's Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, our Grievance Officer is Malik Ammar Faisal, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India, ammar@tabductor.com. We resolve grievances within one month of receiving them.
Children
Tabductor is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. AI models run the workflows you configure; they do not decide anything about you.
Changes
We will post updates here and change the date above; for material changes we will notify you in the app or by email.
Contact
Questions about privacy: ammar@tabductor.com, or write to Fullstacktics, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India. See also the Terms of service.