TabZen — Privacy Policy

Last updated: July 5, 2026

1. Introduction

TabZen is a browser extension ("the Extension") developed by Data4AI ("data4ai.io", "we", "us", or "our") that helps you tidy, summarize, and archive your open browser tabs, search your tab history, and chat with AI to find what you saved. This Privacy Policy explains what data the Extension collects, how it is used, and the choices you have.

By installing and using TabZen, you agree to the practices described in this policy. This policy supplements the general Data4AI Privacy Policy; where they differ, this TabZen-specific policy governs the Extension.

2. What We Do Not Collect

TabZen is designed around a simple principle: your browsing is your business. The Extension does not:

  • Track your browsing history or the websites you visit.
  • Read page content in the background or automatically.
  • Monitor what you type, click, or scroll.
  • Record audio, capture screenshots, or access your camera/microphone.
  • Sell your data to advertisers or third parties.

The only thing that runs continuously is an in-memory list of your currently open tabs (URL, open time, pinned state) that powers the local "Sort tabs" feature. This list is never saved to disk and never sent anywhere; it is rebuilt from your open tabs each time the browser restarts.

3. Information We Collect

The Extension only reads page content when you take an explicit action — clicking "Tidy Now" in the side panel. No content is processed without your click.

When you use TabZen, we collect the following:

  • Account Information: Your email address, used as the unique identifier for your Data4AI account. This links your tab archive across browsers and devices. You can also sign in with the same account on our website (data4ai.io) to manage your library and subscription.
  • Tab Metadata: When you tidy a tab, the Extension reads the page's URL, title, and favicon. These are stored in your archive so you can revisit the source.
  • Page Content (for Summarization): When you tidy a tab, the Extension extracts the readable text of the page and sends it to our AI service to generate a concise summary. The raw page content is not stored — only the AI-generated summary is saved to your archive. The full text is discarded after the summary is produced.
  • Chat Messages: When you ask the AI a question about your tabs, your question, your chat history, and the titles, summaries, and URLs of relevant saved tabs are sent to our AI provider to generate a response.
  • Domain Blocklist: Domains you add to your blocklist are stored so the Extension can skip them during tidy. The Extension checks each candidate tab's domain against your blocklist during tidy, which means the domain of a tab being considered is sent to our server to look up the blocklist — even for tabs that are ultimately skipped.
  • Usage & Diagnostics: Anonymous error reports and crash data may be collected via Sentry to help us fix bugs. These reports may include the URL of the tab where an error occurred, and are scrubbed of sensitive authentication headers before being sent. Diagnostics are disabled in development builds.

4. How We Use Your Information

  • To create and identify your Data4AI account so your tab archive is linked to you and accessible from any browser or device where you sign in.
  • To generate AI summaries of the tabs you choose to tidy and store them in your searchable archive.
  • To power full-text search across your saved tab summaries.
  • To answer your questions about your saved tabs using AI.
  • To enforce your domain blocklist and skip blocked sites during tidy.
  • To enforce subscription plan limits (such as the number of summaries or AI questions per billing cycle).
  • To diagnose errors and improve the Extension's stability.

5. Browser Permissions

The Extension requests the following permissions, each for a specific, narrow purpose:

  • activeTab / scripting: To read the content of a tab only when you click "Tidy Now". When you click tidy, TabZen injects open-source content-extraction libraries (Readability.js by Mozilla and Turndown.js) into the target tabs to extract readable text. This includes tabs you opened before installing TabZen — without this, you would have to manually refresh every pre-existing tab before tidying, which defeats the purpose of the extension (most users install TabZen precisely because they already have too many open tabs). The injected script does nothing until you click tidy; it does not run on page load or monitor anything in the background.
  • tabs: To list, sort, and (only when you opt in) close your open tabs. This also powers the local in-memory tab tracking for the Sort feature.
  • sidePanel: To display the TabZen side panel where you manage your archive, search, and chat.
  • storage: To cache your session token, language preference, and settings locally in the browser.
  • identity / identity.email: To read your Chrome profile's email address so we can sign you in to your Data4AI account automatically. Your email is used only as the account identifier — we do not access your Google account data, post on your behalf, or share your email with advertisers.
  • Host permissions (all websites): TabZen requests host access to all websites (<all_urls>) for two reasons: (1) to communicate with our API server at data4ai.io for authentication, syncing your archive, and AI features; and (2) to inject the content-extraction script into any tab when you tidy — including tabs you opened before installing TabZen, and tabs on any website you happen to have open. Chrome restricts chrome.scripting.executeScript to URLs covered by host permissions, so the tidy feature would fail on arbitrary pages without this. This permission is exercised only at the moment you click tidy — TabZen never reads page content passively, never monitors browsing history, and never sends page content to any server other than data4ai.io (for AI summarization). Internal browser pages (chrome://, about:, settings) are never injected.

Note on content scripts: The Extension injects a content script into tabs in two ways. For pages loaded after TabZen was installed, the script is registered at load time via the manifest. For tabs you opened before installing, TabZen proactively injects the script when you click tidy. In both cases, the script does nothing until it receives an "extract" message triggered by your click. It does not monitor page loads, observe DOM changes, or transmit data on its own.

6. Information Sharing & Third Parties

We do not sell your personal information. To provide the Extension's features, data is shared with these service providers only as necessary:

  • AI service providers (including OpenAI via Azure and other LLM providers): To generate summaries of the pages you tidy and to answer your questions about your saved tabs. Only the content needed for the specific task is sent.
  • Sentry: To receive de-identified error and crash reports that help us fix bugs.
  • Email provider: To deliver your sign-in verification code.
  • Payment provider (PayPal): To process optional subscription upgrades. Payment details are handled entirely by PayPal and never touch our servers.

Google Analytics runs only on our marketing website (data4ai.io), not inside the Extension itself. Your browsing and tab content are never reported to analytics.

We may also disclose information when required by law or to protect the rights, property, or safety of Data4AI, our users, or the public.

7. Data Storage & Retention

Your account information and tab archive are stored on our servers, protected by TLS encryption in transit and access controls at rest. Each user's tab data is stored in a separate, isolated database — your archive is not mixed with anyone else's.

  • Saved tab summaries remain in your archive until you delete them.
  • Raw page content sent for summarization is processed by the AI and then discarded — it is not retained on our servers.
  • Chat history is stored so you can continue conversations across sessions; you can delete chat sessions at any time.
  • Domain blocklist is stored per account and deleted when you remove it or delete your account.

You can delete individual tabs, chat sessions, or your entire account at any time. Account deletion removes your personal information and all associated data within a reasonable period.

8. Your Controls & Choices

  • Nothing without your click: TabZen never reads or archives a tab unless you click "Tidy Now". There is no automatic background archiving.
  • Close-after-save is opt-in: Even when tidying, TabZen only closes a tab if you explicitly check the "close after saving" box — and only after the archive succeeds, so your data is never lost. This choice resets every time.
  • Block sensitive sites: Add your email, banking, or internal company domains to the blocklist. Blocked domains are never summarized, never archived, and never closed — they are skipped entirely during tidy.
  • Export & delete: Browse, search, and delete any saved tab at any time. Export is available from your archive.
  • Account deletion: You can delete your entire account from the Extension or website settings, which permanently removes your data.
  • Uninstall: Remove the Extension at any time via your browser's extension management page. This stops all data collection immediately.

9. Data Security

We take reasonable measures to protect your data, including TLS/HTTPS encryption for all data transmission, per-user database isolation, strict access controls, and regular security reviews. Authentication headers are stripped from error reports. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

TabZen is not directed at children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

11. Policy Updates

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, notifying you through the Extension or by email. Continued use after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this policy or wish to exercise your data rights, contact us at:

We will respond to your request within 15 business days.