Privacy Policy

Plain words on purpose — this is the whole policy, not a summary of one.

1. The short version

We keep
  • Run counts — how many of your monthly runs are used
  • Step telemetry — counts, timing, success rates
  • Site domain patterns — so site support improves
  • Your email — only if you sign in or buy Pro
  • Your subscription’s status — if you buy Pro
We never see
  • Passwords or payment fields — never read, ever
  • Your card number — that goes to Creem, never to us
  • The values on your pages, before or after a run
  • Screenshots or recordings
  • Your browsing history

Everything below is detail on those two lists.

2. What Tabruns does

Tabruns is a Chrome side panel. You ask for help on the page you’re looking at; our planning service turns your request into a step-by-step plan; the extension carries that plan out inside your browser, in your existing login session. The work happens on your device — our servers plan, they never execute.

3. What we collect

  • To answer you. Your message and a structured outline of the page — field labels, button names, headings and what kind of control each one is, never what is typed in them — go to our planning service to produce the plan. They are processed in memory, discarded once the plan returns, and never used to train models.
  • To run the meter. An anonymous install ID and a count of do-it-for-me runs this month. That is how the free allowance works without an account.
  • To keep site support healthy. Per run: number of steps, how many succeeded, fallback count, and latency, tied to a site’s domain pattern (like *.zendesk.com) — not the full address of the page you were on.
  • If you fill in the exit survey. When you uninstall, a page asks why. Answering is optional: the reasons you tick, anything you type in the box, the version you left on, and the anonymous install ID — so the answer can be read against how much you had used it. Nothing is sent unless you press the button.
  • If you sign in. Your email address, and — if you buy Pro — your subscription’s status, when the current period ends, and a customer reference so the billing page can be opened. Payments are handled by Creem, our merchant of record; card numbers never touch our servers, and we could not see them if we wanted to.

4. What we never collect

  • Anything typed into password or payment-card fields — the extension skips them where the page is parsed, before any data could leave it.
  • Field values on your pages. Plans reference fields by name; the values you approve are filled locally.
  • Screenshots, recordings, or your browsing history.
  • Your chat history — it stays in Chrome’s local storage on your device.

5. Where your data lives

Chat threads, saved details and settings live in Chrome’s storage on your device. They sync between your computers only if you have turned on Chrome profile sync — that is between you and Google. “Clear history on this device” in Settings removes every thread immediately. Run counts and telemetry live on Cloudflare infrastructure.

6. Browser permissions

Tabruns installs with the permissions it needs to draw the panel and act on the tab you are on: sidePanel, storage, activeTab, tabs, scripting, alarms, downloads and favicon.

Access to particular websites is not granted at install. It is optional, and asked for the first time you run something on a site — each “Allow” is remembered for that site only, and every grant can be revoked in Settings → Site access or at chrome://extensions. A run that walks onto a site you have not granted stops and asks rather than acting.

7. Who we share with

We don’t sell data, run ads, or share with data brokers. Three processors touch data on our behalf: Cloudflare (hosting and the run-count database), Google (the Gemini planning API, under terms that bar training on your requests), and Creem, our merchant of record, for Pro billing only. Creem receives your email address and payment details when you buy; we receive back your address, a customer reference and your subscription’s status, and never the card. We disclose data if the law requires it, and we’ll tell you unless we’re legally barred from doing so.

8. How long we keep things

Telemetry is aggregated after 30 days and deleted at 12 months. Exit-survey answers are kept for 24 months, because the point of them is comparing one year to the next. Run counts reset monthly and the prior month is deleted. Sign-in codes and their rate-limit windows are deleted daily once they expire. Account records last while your account does — delete the account and your email, billing links and plan history are gone within 30 days.

9. Your choices

  • Use Tabruns free, forever, without an account.
  • Clear your history in Settings at any time.
  • Revoke any site’s access, or the whole extension’s, in one click.
  • Delete your account from Settings → Plan.
  • Exercise access or deletion rights under GDPR, CCPA, or your local law — we answer within 30 days.

10. Children

Tabruns isn’t directed at children under 13 and we don’t knowingly collect their data. If you believe a child has created an account, write to us and we’ll delete it.

11. Changes to this policy

If this policy changes materially we announce it in the extension before it takes effect. Old versions are available on request.

12. Contacting us

Privacy questions, access and deletion requests, and anything on this page you think is wrong: write to support@tabruns.com. It is read by the people who build Tabruns. We answer within two business days, and within 30 days on anything the law puts a clock on.

The contact form reaches the same inbox if you would rather not use mail — it takes a message with no address attached, though we then have no way to write back.