Tabi

Privacy policy

Last updated: October 19, 2026

Tabi is a Chrome extension and website that fixes grammar, spelling and wording when you press Tab. It is operated by Gal Winter ("Tabi", "we"). You can reach us at support@usetabi.app. This policy explains what data Tabi handles and why.

The short version

  • Your text is sent only when you press Tab, and only to produce the fix. Tabi never stores or logs it, and our AI provider doesn't use it to train models.
  • We store your email address, how many fixes you made each day, and your Polar customer ID and subscription status.
  • We don't sell your data or show ads.

The text you fix

When you press Tab in a text field, the extension sends the text you selected, or the text from the start of the paragraph to your cursor, over an encrypted connection to our server. Our server sends it to Anthropic's Claude API, which returns the corrected text, and the extension puts it back in your text box. Nothing is sent while you type, paste or click: only when you press Tab.

We use your text only to produce that fix. Tabi does not store it in a database, write it to logs, or use it for analytics. Our logs record only counts and error codes, such as the length of the text and whether the fix succeeded.

Anthropic processes the text as our service provider under its Commercial Terms, which do not allow it to train models on it. Anthropic automatically deletes API inputs and outputs within 30 days. It keeps them longer only if a request is flagged for violating its Usage Policy (inputs and outputs for up to 2 years, and safety classification scores for up to 7 years) or if the law requires it. See Anthropic's data retention terms.

Tabi never reads text unless you press Tab in a text field. It does not run on Google Docs, and it never sends text from password, email, URL, phone or number fields.

What we store

  • Account: your email address and a user ID, from signing in with Google. We don't get your Google password or access to your Gmail.
  • Plan: when your free trial ends, your subscription status, when your current billing period ends, and whether you cancelled.
  • Usage counts: the number of fixes you made each day (a number per day, not the text), to apply daily limits.
  • Payments: your Polar customer ID and subscription ID, and a log of billing events from Polar (event type, Polar IDs, and the result). We never see or store your card details.

Stored in your browser

The extension keeps your sign-in session in Chrome's local extension storage on your device, and your settings (Tabi on or off, and sites where you turned it off) in Chrome's sync storage, which Chrome may sync across your signed-in browsers. The website keeps your sign-in session in your browser's local storage. We don't use advertising or tracking cookies.

Payments

Subscriptions are sold by Polar (polar.sh), which acts as merchant of record: Polar processes your payment, handles tax, and sends you receipts. Polar handles your payment details under Polar's privacy policy. Polar tells us your subscription status so we can turn Pro on or off.

Service providers and where your data is

  • Supabase: our server, database and sign-in, hosted on AWS in the United States (us-east-1, N. Virginia).
  • Anthropic: the AI model that produces the fix, in the United States.
  • Polar: payments and subscriptions.
  • Google: sign-in with your Google account.
  • Vercel: hosting for this website, served from Vercel's global network. Vercel is based in the United States.

If you are in the EU, EEA, UK or Switzerland, your data is transferred to and processed in the United States. These transfers rely on the Standard Contractual Clauses (and, for the UK, the UK Addendum) in our providers' data processing agreements.

How long we keep data

We keep your account, plan and usage counts while you have an account. If you ask us to delete your account, we delete your profile and usage counts within 30 days. Polar keeps payment records as long as tax law requires.

Your rights

Wherever you live, you can ask us to access the personal data we hold about you, correct it, or delete it. If you are in the EU, EEA or UK (GDPR) or in California (CCPA), you also have the right to receive your data in a portable format and to object to or restrict how we use it. Email support@usetabi.app and we will respond within 30 days. We don't sell or share your personal information for advertising, and using your rights won't affect the service you get. EU, EEA and UK users can also complain to their local data protection authority.

We use your data to provide the service you signed up for (GDPR: performance of a contract), to keep Tabi secure and prevent abuse (legitimate interests), and to keep payment records (legal obligation).

You can also turn Tabi off for a site or everywhere from the extension menu, and cancel your subscription anytime from your account page.

Children

Tabi is not meant for children under 13 (under 16 in the EU and UK), and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll update the date above and tell you in the extension or by email.

Contact

Gal Winter · support@usetabi.app