Privacy policy
Tabductor runs browser automations on your behalf. This policy explains what we collect to do that, why, who else processes it, how long we keep it, and your rights. We do not sell personal data and we do not use it for advertising.
Who we are
Fullstacktics, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India (GSTIN 09AHXPF5233C1ZA), is the controller of the personal data described here. Contact us about privacy at ammar@tabductor.com.
- EU representative: Being appointed; details will appear here
- UK representative: Being appointed; details will appear here
- Data protection officer: Not appointed, as the law does not require one for our processing
Data in your workflows. When your workflows collect personal data from the websites they visit, you decide what is collected and why, so you are its controller and we process it for you as your processor. Our Terms of service cover this, and business customers can ask for our data processing agreement.
What we collect, why, and for how long
| Data | Purpose | Lawful basis | Kept for |
|---|---|---|---|
| Account and sign-in: name, email address, sign-in identifiers (held by Clerk), and your account ID | Create your account, sign you in and keep it secure | Contract | While your account exists; erased when you delete it |
| Workflows: prompts, result schemas, schedules, compiled scripts and settings | Build and run the automations you ask for | Contract | Until you delete the workflow or your account |
| Run records: each run's status, timing, result and summary, and the events workflows emit | Show you what ran and what it returned | Contract | Until you delete the workflow or your account |
| Run detail: step-by-step traces, screenshots, page content sent to AI models, code cells and browser operations | Let you inspect and debug runs, and make repeated runs cheaper | Contract | 180 days after the run ends |
| Webhook deliveries: the URL you chose, and what we sent it (each run's result, the store rows it changed and the files it made) with your server's answer | Tell your own systems when a run ends or needs you, and show you whether each delivery arrived | Contract | 30 days after each delivery; the webhook itself until you delete it, the workflow or your account |
| Session recordings (encrypted video of the managed browser) | Replay what the browser did | Contract | 7 days after the session starts |
| Activity of browsers opened for profile setup or through the API | Show you what the browser did | Contract | 90 days after the session ends; a minimal record stays while a billing record refers to it |
| Requests for your help during a run: what the run needed (a CAPTCHA, a sign-in or a code), the agent's note, the page address without its query, and whether we emailed you | Tell you when a run needs you and let you hand the browser back | Contract | 30 days after the request is handled or expires |
| Browser profiles: cookies, local storage and other browser state, encrypted | Keep workflows signed in to the sites you use | Contract | Until you delete the profile or your account. Older snapshots are removed when a newer one replaces them |
| Files: files you upload, files your workflow runs save, and email attachments, with their names and types | Give your workflows files to work with and keep the files they produce | Contract | Until you delete the file, its workflow or your account. A deleted file's contents are removed at the next storage sweep |
| Secrets and API keys, encrypted | Use them in your workflows and API calls | Contract | Until you delete them or your account |
| Billing records: top-ups, receipts, refunds, usage charges and PayPal references | Charge for usage, handle refunds and keep accounts | Contract; legal obligation (tax and accounting) | 8 years, as Indian tax law requires. After account deletion we keep only amounts, dates, PayPal references and tax details |
| Emails you or the senders you allow send to a workflow's address: sender, subject, text and attachments | Start the run the email asks for, give it the email as input, and reply with the result | Contract | The inbox copy (sender, subject and delivery details) is deleted 30 days after the email arrives. The email as the run's input stays with that run's records, and attachments stay as files of the workflow, until you delete them, the workflow or your account |
| Payment notifications from PayPal, which can include your name, email and country | Credit your balance and process refunds | Contract; legal obligation | 30 days after we process them; the payment records derived from them are kept as above |
| Technical data: IP address, browser details, request and database logs | Operate, secure and debug the service, and prevent abuse | Legitimate interests (security and reliability) | IP addresses for rate limiting are held in memory only. Logs: 30 days |
You pay on PayPal's site, so your card and PayPal account details go to PayPal and never reach us. We receive order, payment and refund records with your name, email and country. PayPal keeps its own payment records under its privacy policy. When run detail expires, the run itself, its result and its billing records stay, and the run shows that its details expired.
Database backups are kept for 1 day, and deleted files expire from storage after 1 day, so deleted data leaves our backups within a few days.
We use aggregated, de-identified usage figures to understand and improve the product.
Deleting your account and exporting your data
You can delete your account and download a copy of your data yourself in Settings → Account.
Deletion is immediate: you are signed out at once, your API keys, share links and schedules stop working, and we then erase your workflows, runs, recordings, results, stored data, browser profiles and their saved sign-ins, secrets, model and API keys, data exports, and your sign-in account with Clerk.
Any unused balance you paid for is refunded to your original payment method through PayPal. Balance that came from coupons, discounts or welcome credit is not refundable. We keep records of your top-ups, refunds and usage charges as the table above says, with your name and anything you wrote removed.
Your export is a ZIP of machine-readable JSON with your account, workflows, runs and results, workflow store data, browser profile and session details, billing records, and the names of your API keys and secrets. For your security it never includes secret values, API key values or the cookies and sign-ins saved in browser profiles. You can request one export a day, and each download link lasts 7 days.
Deleting a workflow erases its runs, recordings and data. Deleting a browser profile erases its saved browser state. You can delete secrets and API keys at any time.
Who processes it
We use these subprocessors. The subprocessor list says what each one receives and where.
- Amazon Web Services: hosting: servers, managed browsers, database, file storage, encryption keys and the content delivery network.
- Clerk: sign-in, account management and session cookies.
- PayPal: payment processing, refunds and fraud screening.
- OpenAI: aI models that plan, run and summarize workflows.
- Anthropic: aI models that plan, run and summarize workflows.
- IPRoyal: residential proxy network for browser traffic.
- Decodo: residential proxy network for browser traffic.
- CapSolver: cAPTCHA solving.
- 2Captcha: cAPTCHA solving.
- Anti-Captcha: cAPTCHA solving.
- Google Fonts: web fonts for this website.
- Google Analytics: website analytics, and the amount of each top-up, to see how people find and use Tabductor.
- Google Ads: measures whether our ads lead to top-ups (conversion tracking only; no ad targeting or remarketing).
- Cloudflare: dNS for our domain (DNS only; our web traffic does not pass through Cloudflare).
- Resend: sends the email after each scheduled run of your workflows, receives email sent to a workflow's address, sends the reply with the run's result, and sends the email when a run needs you.
AI model providers receive the prompts, page content and screenshots needed to plan and run your workflows, through our accounts with them. Websites your workflows visit see that traffic as they would any browser's, and handle it under their own policies.
International transfers
Tabductor runs in Sydney, Australia (AWS ap-southeast-2). Some subprocessors are in the United States and other countries. Where personal data from the EU, EEA, UK or Switzerland goes to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where needed) or the provider's certification under the EU-US Data Privacy Framework. Ask us for a copy of the safeguards that apply.
Sharing you control
If you create a share link or publish a workflow to Explore, the content you chose to share is visible to anyone with the link or to the public. You can revoke links and unpublish listings at any time.
Security
Secrets, browser profiles and recordings are encrypted with per-item keys wrapped by a managed key service; the database and file storage are encrypted at rest, and data is transferred over TLS. Every request is checked against the account that owns the data, and access to production systems is restricted. No system is perfectly secure; tell us promptly if you believe your account is compromised.
Your rights
Depending on where you live, you have the right to:
- access your personal data and get a copy of it;
- correct data that is wrong;
- have your data erased;
- restrict or object to processing, including processing based on our legitimate interests;
- receive your data in a machine-readable format and have it sent to another service;
- withdraw consent at any time, where we rely on it.
Use Settings → Account to export or delete your data, or email ammar@tabductor.com. We answer within one month. If a request is complex we may extend this by up to two more months, and we will tell you why within the first month. We may ask you to confirm your identity first.
You can complain to a data protection supervisory authority, in particular in the country where you live or work or where you believe your rights were infringed. We would appreciate the chance to address your concern first.
Cookies and analytics
Our sign-in provider, Clerk, sets cookies that keep you signed in and protect your session; these are strictly necessary. When you add funds you pay on PayPal's site, which sets its own cookies there under its own policy to process the payment and prevent fraud. Your theme and sidebar preferences are stored in your browser's local storage and never sent to us. A tabductor_consent cookie remembers your analytics choice for a year.
We use Google Analytics to understand how people find and use Tabductor. It sets _ga cookies with a random identifier and records the pages you visit (with private links and payment references removed from the address), your device and browser type, and your approximate location. When you add funds, we also tell Google Analytics the amount and our purchase reference, linked to that random identifier; never your name, email or account. We turn off Google signals and ad personalization.
We also use Google Ads conversion tracking to see whether our ads lead to top-ups. If you arrive from one of our ads, Google Ads sets _gcl cookies, and when you add funds we tell Google Ads the amount, our purchase reference and whether it is your first top-up. We never use this for ad targeting, remarketing or personalized ads.
If you visit from the EU, the EEA, the UK or Switzerland, Google Analytics and Google Ads stay off until you allow them, on the basis of your consent. Elsewhere it is on, based on our legitimate interest in improving the service, and you can turn it off. Either way, use Cookie settings in the site footer to change your choice at any time; turning it off deletes the analytics and ad cookies.
Pages load their fonts from Google Fonts, which receives your IP address and browser details when a page loads.
Grievance Officer
Under India's Information Technology Act, 2000 and Digital Personal Data Protection Act, 2023, our Grievance Officer is Malik Ammar Faisal, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India, ammar@tabductor.com. We resolve grievances within one month of receiving them.
Children
Tabductor is not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.
Automated decision-making
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects. AI models run the workflows you configure; they do not decide anything about you.
Changes
We will post updates here and change the date above; for material changes we will notify you in the app or by email.
Contact
Questions about privacy: ammar@tabductor.com, or write to Fullstacktics, 301, 3rd Floor, Green Heights, Sapna Clarks Inn Road, Vikas Nagar, Lucknow 226022, Uttar Pradesh, India. See also the Terms of service.