1. Introduction
TabHR (“we,” “our,” or “us”) provides a platform for creating and managing AI-powered virtual employees. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services, website, and related products (collectively, the “Service”). By using the Service, you agree to the practices described in this policy.
2. Information We Collect
We collect information you provide directly and information generated through use of the Service.
- Account information. When you sign in (e.g., via Google), we receive and store your email address, name, and profile image from the provider. We use this to identify you and manage your account.
- Company and profile data. You may provide company name, industry, website, location, size, description, mission, values, and notes. This is used to configure your workspace and, where applicable, to tailor AI-generated content for your virtual employees.
- Virtual employee data. For each virtual employee you create, we store job descriptions, personas, titles, names, contact methods, chat sessions and messages, task data, deployment and console logs, and related configuration. Some sensitive fields (e.g., credentials) may be encrypted at rest.
- Communications and chat. Messages you send to virtual employees and their replies are stored to maintain conversation history and to improve and operate the Service.
- Integrations and credentials. If you connect third-party services (e.g., email, SMS, calendar), we store configuration and, where necessary, encrypted credentials to enable those integrations.
- Billing information. Payment processing is handled by Stripe. We store Stripe customer identifiers and subscription state; we do not store your full payment card details.
- Usage and technical data. We collect session data, log data (e.g., IP, user agent, timestamps), and information about how you use the Service (e.g., pages visited, actions taken) to operate, secure, and improve the Service.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Authenticate you and manage your account and companies.
- Run, deploy, and monitor virtual employees (including processing chat, tasks, and integrations).
- Process payments and manage subscriptions.
- Send you service-related notices and, where you have agreed, marketing or product updates.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations and enforce our terms.
- Analyze usage in an aggregated or de-identified way to improve our product and experience.
4. Data Storage and Security
We store your data on infrastructure chosen for reliability and security. We use industry-standard measures (including encryption in transit and, where applicable, at rest) to protect your information. Access to personal and sensitive data is limited to those who need it to operate and support the Service. We do not sell your personal information.
5. Third-Party Services
We use and integrate with third parties who may process your data:
- Authentication. Sign-in may be provided by Google or other identity providers; their privacy policies apply to the data they collect and share with us.
- Payments. Stripe processes payments. Their privacy policy applies to payment data they collect and process.
- Hosting and infrastructure. Our application and data may be hosted on third-party providers (e.g., cloud providers); they process data on our behalf to run the Service.
- AI and runtime. Virtual employees may use AI models and external services to perform tasks and generate responses; relevant data may be sent to those services in accordance with our agreements and your usage.
- Integrations you enable. If you connect email, SMS, or other services, their respective privacy policies apply to data handled by those services.
6. Cookies and Session Data
We use session and authentication tokens (including cookies where applicable) to keep you logged in and to secure the Service. You can control cookie settings in your browser; disabling certain cookies may affect your ability to use the Service.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. If you delete your account or request deletion, we will delete or anonymize your personal data in line with our retention practices and applicable law, except where we must retain data for legal or safety reasons.
8. Your Rights and Choices
Depending on your location, you may have the right to:
- Access and receive a copy of your personal data.
- Correct or update your personal data (e.g., via account or company settings).
- Request deletion of your personal data or your account.
- Object to or restrict certain processing of your data.
- Data portability (e.g., receive your data in a structured format).
- Withdraw consent where processing is based on consent.
- Lodge a complaint with a supervisory authority (e.g., in the EU/EEA or UK).
To exercise these rights, contact us using the details in Section 11. We will respond in accordance with applicable law.
9. Children
The Service is not intended for users under the age of 16 (or higher where required by law). We do not knowingly collect personal information from children. If you believe we have collected such data, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the “Last updated” date. Material changes may be communicated via the Service or by email where appropriate. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact us at the support or contact address provided in the Service or on our website.