Privacy Policy
How Tabula handles your data. We don't train on your memories, and you can export or delete everything at any time.
Last updated: May 2026
What we collect
Account. Your email address. If you sign in with Google, we also receive the name and profile picture on your Google account.
Profile. Your first name, an optional profile picture, and which AI platforms you choose to connect.
Memories. The memories you create and the memories your connected AI stores on your behalf.
Technical. Basic connection and usage metadata, plus request information we use to keep the service secure and prevent abuse.
How we use it
Your data is used solely to provide and operate the service. We do not sell your data. We do not use your memories to train AI models. And we never send the content of your memories to OpenAI, Anthropic, or any other AI company to process: the semantic search that powers recall runs on our own infrastructure, not a third party's. The only AI that ever receives your memories is the one you connect and ask, at your direction. We do not share your data with anyone else except the infrastructure providers we need to run Tabula, listed below.
Cookies
We use essential cookies to keep you signed in. We do not use advertising or third-party tracking cookies.
Service providers
We rely on trusted infrastructure to run Tabula: Supabase for database and authentication, Vercel for hosting, and Upstash for rate limiting. Google is involved only if you choose Google sign-in. These providers process data on our behalf to operate the service, and your data may be processed in the regions where they operate.
Storage and security
Your data is stored on managed, access-controlled infrastructure and encrypted at rest. Accounts are isolated, so other users can never see your data. We log activity metadata to run the service, never the content of your memories, and direct administrative access to the database is recorded so it is never silent.
To be straight with you about what we can see: to search your memory and serve it to the AI you ask, our servers process it in readable form at the moment of your request. Like any cloud service that searches your data, that means we can in principle access your memories to operate, support, and debug the service. Tabula is not a zero-knowledge service and we will not pretend otherwise. We keep that access least-privilege, audited, and used only as needed to run the service. For true zero-knowledge, where even we cannot read your data, a local mode is on our roadmap.
Third-party AI platforms
When you connect an AI platform and use it, your memories are sent to that platform through MCP so it can use them. We do not control how those AI providers handle data on their end. Review their privacy policies to understand their practices.
Your data, your control
You own your data. View, edit, or delete any memory from your dashboard. Export everything as JSON or PDF. Delete your account from settings and all your data, including memories, profile, and connection history, is permanently removed.
Data retention
We keep your data for as long as your account is active. When you delete a memory or your account, it is removed from our systems.
Children
Tabula is not intended for children under 13, and you must be at least 13 years old to use it. If you believe someone under 13 has given us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with a new date.
Contact
Questions, or want to access or delete your data? Email us at hello@tabula360.com.