Privacy

TabGlue stores your workspace to provide canvas editing, sharing, and optional AI assistance. We do not sell your data or use it for advertising.

Private workspaces and accounts

Private canvases and immutable revisions are stored in Supabase under your account. Anonymous accounts can edit canvases. Google, Apple, or email sign-in is required for publishing and AI requests. Account records include your sign-in identity and optional display name.

Extension and browser control

The extension lets webpages load inside your canvas and reuse compatible browser sessions. Cookie values stay in the extension and browser; they are not given to the TabGlue app or sent to the AI service. Browser control is enabled by you for an AI task. The extension attaches Chrome's debugger to the TabGlue tab, observes embedded documents and nested frames, and performs a fixed set of webpage actions. It detaches when the task ends, you stop or disable control, your account changes, the app closes or navigates away, or the executor lease expires.

AI chat and page observations

AI chat is private to your account and follows you across canvases. Your requests, relevant workspace context, selected page text and controls, and screenshots when needed are sent through our authenticated gateway to OpenAI to perform the active task. Do not put passwords, payment credentials, or recovery codes into chat. Sensitive fields, sign-in, CAPTCHA and unsupported browser dialogs are handed to you. Website submissions, purchases, remote deletion and publishing require confirmation of the specific action.

TabGlue retains user-facing messages, concise action summaries, workspace checkpoints, action/approval receipts, and token/cost accounting. Raw page observations, screenshots used for AI, and transient model context remain in memory during the task. They are not saved to chat history, logs, public documents, or public snapshot storage. Chat and its checkpoints are excluded from canvas publishing, export, import and forks.

OpenAI requests use store: false. This disables Responses API application-state storage; it does not itself promise zero provider retention. OpenAI's separate abuse-monitoring and data-retention policies apply to submitted content. See OpenAI API data controls. API data is not used to train OpenAI models by default unless explicitly opted in.

Published canvases

Publishing creates a public release with the saved canvas document and screenshots captured at publication. Screenshots can show personal information visible on those webpages, so review your canvas before publishing. Public releases do not include private chat, cookies or authentication tokens. Unpublishing disables the public link; retained revisions and storage cleanup follow the service's retention rules.

History, restoration and removal

Chat history remains until you clear it. Clearing chat removes its messages and checkpoint references and redacts completed action payloads; it does not change canvases or reset usage. Accounting and minimal task receipts remain to enforce the allowance and prevent duplicate charges. Ordinary canvas retention keeps the most recent 100 revisions and closed canvases for 30 days. Public releases and retained workspace checkpoints can preserve older revisions and closed canvases beyond those limits.

Workspace restore includes later manual edits, creation and closure, and saves a recovery checkpoint first. It does not undo website submissions, restore forms or browser sessions, refund AI usage, or republish an old release. Clearing local browser data does not delete server-stored workspaces. Removing the extension ends its access.

Service providers and operational records

Supabase provides authentication, private canvas/chat records and AI gateway execution. Cloudflare provides hosting and public snapshot storage. OpenAI processes AI requests. Embedded websites receive normal browser requests and follow their own policies; the site also loads a typeface from Google Fonts.

AI operational records measure task completion, failures, stale actions, latency, spending and unresolved reservations. They do not contain raw page text, screenshots, credentials or provider keys.

Changes

Last updated 5 September 2026.