Privacy Policy

1. The short version

Everything below is detail on those two lists.

2. What Tabruns does

Tabruns is a Chrome side panel. You ask for help on the page you’re looking at; our planning service turns your request into a step-by-step plan; the extension carries that plan out inside your browser, in your existing login session. The work happens on your device — our servers plan, they never execute.

3. What we collect

• To answer you. Your message and a description of the page go to our planning service to produce the plan: a structured outline — field labels, button names, and what kind of control each one is — and the page’s own readable text, its headings, paragraphs and tables, so a question about what the page shows can be answered. What you or anyone else has typed into its fields and editors is never included. All of it is processed in memory, discarded once the plan returns, and never used to train models.
• To run the meter. An anonymous install ID and a count of do-it-for-me runs this month. That is how the free allowance works without an account.
• To keep site support healthy. Per run: number of steps, how many succeeded, fallback count, and latency. Per step: the kind of step, the name of the control it addressed, whether it was found and how — element names and control shapes, the same vocabulary as the outline above, never a value and never page text. All of it is tied to a site’s domain pattern (like *.zendesk.com) — not the full address of the page you were on — and the per-step detail is deleted after 90 days.
• If you report a run. A finished run offers a “Report this run” button. Pressing it — and only pressing it — sends what that thread showed: your request, each step and how it went, and the outline of the page the plan was written against. What is typed into fields is reduced to its shape (“text, 17 characters”) before anything leaves your browser. Reports exist to fix the failure that prompted them: what you send is delivered to the same private inbox a contact-form message reaches so somebody can act on it — and, when our private issue tracker is connected, filed there too. The copy in our database is deleted after 30 days and a tracker copy is stripped with it, leaving only the site name and how many steps went wrong; the mailed copy is kept like any correspondence you send us, for as long as fixing what it describes needs it. Never used to train models.
• If you fill in the exit survey. When you uninstall, a page asks why. Answering is optional: the reasons you tick, anything you type in the box, the version you left on, and the anonymous install ID — so the answer can be read against how much you had used it. Nothing is sent unless you press the button.
• If you sign in. Your email address, and — if you buy Pro — your subscription’s status, when the current period ends, and a customer reference so the billing page can be opened. Payments are handled by Creem, our merchant of record; card numbers never touch our servers, and we could not see them if we wanted to.

4. What we never collect

• Anything typed into password or payment-card fields — the extension skips them where the page is parsed, before any data could leave it.
• Field values on your pages. Plans reference fields by name; the values you approve are filled locally.
• Screenshots, recordings, or your browsing history.
• Your chat history — it stays in Chrome’s local storage on your device.

5. Where your data lives

Chat threads, saved details and settings live in Chrome’s storage on your device. They sync between your computers only if you have turned on Chrome profile sync — that is between you and Google. “Clear history on this device” in Settings removes every thread immediately. Run counts and telemetry live on Cloudflare infrastructure.

6. Browser permissions

Tabruns installs with the permissions it needs to draw the panel and act on the tab you are on: sidePanel, storage, activeTab, tabs, scripting, alarms, downloads and favicon.

Access to particular websites is not granted at install. It is optional, and asked for the first time you run something on a site — each “Allow” is remembered for that site only, and every grant can be revoked in Settings → Site access or at chrome://extensions. A run that walks onto a site you have not granted stops and asks rather than acting.

7. Who we share with

We don’t sell data, run ads, or share with data brokers. Four processors touch data on our behalf: Cloudflare (hosting, the run-count database, and the mail pipeline that delivers a pressed “Report this run” to our own inbox), Google (the Gemini planning API, under terms that bar training on your requests — and the mailbox provider that inbox lives on, which receives what a report contains), Creem, our merchant of record, for Pro billing only, and GitHub — but only if our issue tracker is connected and you press “Report this run”, and only for what that report contains. Creem receives your email address and payment details when you buy; we receive back your address, a customer reference and your subscription’s status, and never the card. We disclose data if the law requires it, and we’ll tell you unless we’re legally barred from doing so.

8. How long we keep things

Telemetry is aggregated after 30 days and deleted at 12 months. Exit-survey answers are kept for 24 months, because the point of them is comparing one year to the next. Run counts reset monthly and the prior month is deleted. Sign-in codes and their rate-limit windows are deleted daily once they expire. Account records last while your account does — delete the account and your email, billing links and plan history are gone within 30 days.

9. Your choices

• Use Tabruns free, forever, without an account.
• Clear your history in Settings at any time.
• Revoke any site’s access, or the whole extension’s, in one click.
• Delete your account from Settings → Plan.
• Exercise access or deletion rights under GDPR, CCPA, or your local law — we answer within 30 days.

10. Children

Tabruns isn’t directed at children under 13 and we don’t knowingly collect their data. If you believe a child has created an account, write to us and we’ll delete it.

11. Changes to this policy

If this policy changes materially we announce it in the extension before it takes effect. Old versions are available on request.

12. Contacting us

Privacy questions, access and deletion requests, and anything on this page you think is wrong: write to support@tabruns.com. It is read by the people who build Tabruns. We answer within two business days, and within 30 days on anything the law puts a clock on.

The contact form reaches the same inbox if you would rather not use mail — it takes a message with no address attached, though we then have no way to write back.