Privacy Policy

1. Who We Are / Data Controller

KINTABS is operated under the Originess Lab trading name. Originess Lab is the trading name used by the operator of KINTABS. The operator is a sole trader registered in the Czech Republic, European Union, and acts as the data controller for personal data processed in connection with KINTABS.

For full operator and contact details, see our Legal Notice. For privacy questions, contact support@kintabs.com.

2. Scope

This Privacy Policy describes how we handle information when you use KINTABS. KINTABS offers a local-only Guest mode that does not require an account, and paid plans that include cloud sync and collaboration features. The way your data is handled depends on which mode you use.

This policy covers the Chrome browser extension and the KINTABS website. It does not cover the practices of third-party services such as Supabase, Stripe, or PostHog, each of which has its own privacy policy.

3. Guest / Local Mode

In Guest/local mode, your saved tab and workspace graph — workspaces, spaces, collections, and saved tab URLs and titles — remains stored locally on your device using your browser's IndexedDB and Chrome storage. This data is not uploaded to KINTABS cloud storage.

However, limited technical or product analytics may still be processed separately as described in the Product Analytics section below. You can control analytics through the extension and the analytics settings link in our website footer.

You can clear local data at any time through Chrome's site data controls or by uninstalling the extension.

4. Account / Cloud Mode

When you create an account and use a paid plan, KINTABS stores your saved content in our backend services. This may include:

• Workspace structure (workspace names)
• Space structure (space names)
• Collections (collection names)
• Saved tab URLs and tab titles
• Favicon-related information associated with saved tabs
• Profile information (display name, optional avatar image)
• Collaboration information (shared workspace memberships, roles)
• Account email address for authentication

Access to your cloud data is controlled through authentication and Row Level Security (RLS) policies on our backend. Data is scoped to your authenticated account.

KINTABS does not provide end-to-end encryption for cloud data. As the service operator, we have technical access to cloud data through our backend infrastructure. We do not access individual users' saved content except as necessary to operate, maintain, and secure the Service, or as required by law.

5. Information You Provide

• Account email: Used for authentication and account management when you create an account.
• Display name: First and last name, used for profile display.
• Avatar image: Optional profile image you choose to upload.
• Saved content: Tab URLs, titles, workspace/space/collection names you organize within the extension.

6. Saved Tabs and Workspace Data

The primary data KINTABS processes is the tab and workspace organization you create. In Guest mode, this stays on your device. In cloud mode, this is stored in our backend (Supabase) so it is available across devices and for collaboration.

Saved tab URLs and titles are stored as you provide them. KINTABS does not modify, analyze, or rank the content of the websites you save — it stores them as organizational references.

7. Device and Technical Information

KINTABS may process limited technical information such as:

• Extension version and installation/update events
• Whether you are online or offline
• Aggregated counts (e.g., tab count buckets, workspace count buckets) for usage analytics
• A pseudonymous install identifier stored in Chrome local storage

This information does not identify you personally and is used to understand usage patterns and improve the product.

8. Product Analytics

KINTABS may collect limited product and usage analytics through PostHog, a third-party analytics provider. Analytics are sent via secure HTTPS to PostHog's servers in the European Union.

What analytics may include:

• Event names (e.g., extension installed, login completed, tabs saved, subscription activated, account deleted)
• Plan or tier information (e.g., "free", "pro")
• Aggregated count buckets (e.g., tab count range, workspace count range)
• Extension version and install/update events
• A pseudonymous install identifier

What analytics does not include:

• Tab URLs or tab titles
• Workspace names, space names, or collection names
• Your email address or account password
• The content of the webpages you save
• Full user IDs or workspace IDs

Analytics properties are filtered through a privacy sanitizer that blocks forbidden keys (including URLs, titles, emails, tokens) and only permits allowlisted, non-sensitive fields. Unknown properties are dropped by default.

Analytics can be disabled by the user through the extension settings and the analytics settings link in our website footer. When disabled, analytics events are not sent to PostHog.

9. Chrome Extension Permissions

KINTABS requires the following Chrome extension permissions:

• tabs — to read and organize your open browser tabs into workspaces and collections
• storage — to store your tab organization data locally using Chrome storage and IndexedDB
• unlimitedStorage — to allow storage of larger local datasets without Chrome's default quota limits
• alarms — to schedule periodic background tasks such as sync operations

KINTABS requests host permissions for the following domains:

• supabase.co / supabase.in — to communicate with our backend services for cloud features
• eu.i.posthog.com — to send product analytics to PostHog's EU servers

KINTABS does not request broad host permissions (such as access to all websites). The extension does not read or modify the content of webpages you visit — it only reads tab metadata (URL and title) when you choose to save a tab into a collection.

10. What KINTABS Does Not Intentionally Access

• KINTABS does not read, collect, or transmit the content of webpages you visit, except for tab URLs and titles that you deliberately save into collections
• KINTABS does not monitor your browsing history
• KINTABS does not access your camera, microphone, or location
• KINTABS does not sell your personal information to third parties

11. Payment Information / Stripe

Payments for paid plans are processed by Stripe. KINTABS does not collect or store your full payment card details. Stripe processes your payment information directly.

We receive limited subscription status information from Stripe (such as subscription plan, billing status, and renewal dates) to manage your account. We do not receive your full card number.

For details, see the Stripe Privacy Policy.

12. How We Use Information

We use the information we process to:

• Provide, operate, and maintain KINTABS
• Authenticate your account and manage your subscription
• Sync your data across devices (paid plans)
• Enable collaboration through shared workspaces
• Understand usage patterns and improve the product
• Diagnose and fix technical issues
• Comply with legal obligations

13. Legal Bases

For users in the European Union and European Economic Area, we process personal data on the following legal bases:

• Contract: Processing necessary to provide the Service you requested (account, cloud sync, subscription management)
• Legitimate interests: Product analytics, security, and service improvement, where those interests are not overridden by your rights
• Consent: Where you provide optional information (such as an avatar) or enable analytics
• Legal obligation: Where we are required to retain certain records by law

14. Service Providers

We use the following third-party service providers to operate KINTABS:

• Supabase — backend database and authentication. Supabase Privacy Policy
• Stripe — payment processing. Stripe Privacy Policy
• PostHog — product analytics (EU-hosted). PostHog Privacy Policy

These providers process data on our behalf as subprocessors. We do not sell your personal information to any third party.

15. Shared Workspaces and Other Users

If you use shared workspace features, other invited KINTABS users in that workspace may see content you share within the workspace (workspace names, spaces, collections, saved tab URLs and titles). You control who you invite to shared workspaces.

Content in shared workspaces is visible to workspace members according to their assigned roles. Be mindful of what you share and with whom.

16. International Transfers

Your data may be processed by our service providers in jurisdictions outside your country of residence. Supabase, Stripe, and PostHog may process data in the United States or other regions. Where required, we rely on appropriate safeguards for international transfers.

[SPECIFIC TRANSFER MECHANISMS SUCH AS STANDARD CONTRACTUAL CLAUSES TO BE CONFIRMED.]

17. Data Retention

Local data in Guest mode is retained on your device until you clear it or uninstall the extension.

Cloud data is retained for as long as your account is active. If you cancel a paid subscription, your cloud data is handled according to our Refund and Cancellation Policy.

When you delete your account, your cloud data is deleted according to our account-deletion process. Some records may be retained for a limited period as required by law or for legitimate business records.

[SPECIFIC RETENTION PERIODS FOR DIFFERENT DATA CATEGORIES TO BE CONFIRMED.]

18. Security

We take reasonable measures to protect your data, including:

• Authentication controls to protect account access
• Row Level Security (RLS) policies on our backend to scope data access to authorized users
• Data transmitted between KINTABS and supported cloud services is transmitted over HTTPS/TLS
• Privacy-filtered analytics that strip sensitive fields before transmission

No method of transmission or storage is completely secure. KINTABS does not provide end-to-end encryption for cloud data. We do not claim that cloud data is inaccessible to the service operator.

19. Account Deletion

You can delete your KINTABS account through the extension's account settings. Deleting your account permanently deletes the KINTABS account and the KINTABS cloud content owned by that account according to our backend account-deletion process.

Certain limited records may be retained where necessary and permitted by applicable law for billing, accounting, legal compliance, security, fraud prevention, dispute handling, or other legitimate operational requirements. Such retention may include records held by our service providers (such as Stripe or PostHog) in accordance with their own obligations and retention policies.

Account deletion is irreversible. We do not promise that data can be restored after deletion.

For details about the difference between cancelling a subscription and deleting an account, see our Terms of Service.

20. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate personal data
• Request deletion of your personal data
• Object to or restrict certain processing of your data
• Request data portability
• Withdraw consent where processing relies on consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact support@kintabs.com.

21. EEA and EU Users

If you are located in the European Economic Area or European Union, you have rights under the General Data Protection Regulation (GDPR). We process your personal data on the legal bases described in section 13.

You have the right to lodge a complaint with your local data protection authority. However, we encourage you to contact us first so we can address your concerns.

22. United States Users

If you are located in the United States, you may have additional rights under state privacy laws, such as the California Consumer Privacy Act (CCPA) if applicable. These rights may include knowing what personal information is collected, requesting deletion, and opting out of the sale of personal information.

KINTABS does not sell personal information as defined by applicable US state privacy laws.

23. Children

KINTABS is not intended for children under 16. Users under 16 should not create an account or provide personal information. We do not knowingly collect personal information from children under 16.

If you believe a child under 16 has provided us with personal information, contact support@kintabs.com and we will take steps to delete such information.

24. Changes to This Policy

We may update this Privacy Policy from time to time. We will post changes on this page with an updated effective date. For material changes, we will provide notice through the extension or by other reasonable means where required by applicable law.

25. Contact and Legal Notice

For questions about this Privacy Policy or your personal data, please contact:

• Email: support@kintabs.com
• Website: https://kintabs.com
• Full operator details: Legal Notice