Privacy Policy

1. Introduction

This Privacy Policy describes how Vision Labs AI ("Company," "we," "us," or "our") collects, uses, and shares information when you use our browser extensions, applications, and other online products and services (collectively, the "Services"), including TabStash and Herr AI.

By using our Services, you agree to the collection, use, and sharing of your information as described in this Privacy Policy. If you do not agree with our policies and practices, do not use our Services.

2. Information We Collect

2.1 Information You Provide

• Communications: When you contact us for support or feedback, we collect the content of your messages and any contact information you provide.
• User Content: Content you input into our Services, such as text for translation or language practice in Herr AI, or tab data you choose to stash in TabStash.

2.2 Information Collected Automatically

• Usage Data: We collect information about how you interact with our Services, including features used, actions taken, and time spent.
• Device Information: Browser type and version, operating system, and device type.

2.3 Product-Specific Data Collection

TabStash (Browser Extension):

• Tab metadata: Tab titles, URLs, favicons, and timestamps when you stash a tab.
• Page meta descriptions: Extracted from web pages via a content script to provide context for categorization. This includes standard meta descriptions, Open Graph descriptions, and Twitter Card descriptions.
• Categories: Assigned to each tab either automatically via domain-based heuristic categorization or manually by the user.
• Session data: Session names and associated tab groups when you save a browser session.
• Archived tabs: Tabs moved to the archive, including the date they were archived.
• Settings and preferences: Your chosen stale tab threshold, category list, and sync preferences.
• Notion OAuth token and workspace metadata: Stored locally only if you choose to connect your Notion account. Includes access token, database ID, workspace name, and last sync timestamp.

All TabStash data is stored locally on your device using Chrome's local storage API. Data is only transmitted externally when you explicitly enable Notion sync.

Herr AI (Language Assistant):

• Text inputs you provide for translation, grammar checking, or conversation practice.
• This content is sent to third-party AI services for processing.
• We do not store your specific text inputs beyond the session.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services.
• Categorize your stashed tabs using domain-based heuristic matching (processed entirely on your device).
• Sync your tab data with Notion if you choose to connect your account.
• Process voluntary donations via our payment provider.
• Send you technical notices, updates, and support messages.
• Respond to your comments, questions, and customer service requests.
• Monitor and analyze trends, usage, and activities in connection with our Services.
• Detect, investigate, and prevent fraudulent transactions and other illegal activities.

4. How We Share Your Information

We may share your information in the following circumstances:

• Notion (User-Initiated): If you connect your Notion account, your stashed tab data (titles, URLs, categories, meta descriptions, and timestamps) is synced to a Notion database in your workspace. This sync only occurs when you explicitly enable it. You can disconnect at any time from the TabStash settings page.
• Cloudflare Workers: Our serverless proxy handles Notion OAuth authentication and Notion API operations on your behalf. Tab data passes through this proxy only when Notion sync is enabled. No tab data is stored on our servers — it is forwarded to Notion and discarded.
• Payment Provider (Lemon Squeezy): If you choose to make a voluntary donation, Lemon Squeezy processes the payment as our merchant of record. We do not collect or store your payment information. Lemon Squeezy's privacy policy applies to payment transactions: https://www.lemonsqueezy.com/privacy
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information to protect the rights, property, and safety of Vision Labs AI, our users, or others.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, after obtaining explicit prior consent.

We do not sell your personal information to third parties. We do not transfer user data to advertising platforms, data brokers, or information resellers. We do not use your data to determine creditworthiness or for lending purposes. We do not use your data for personalized advertisements.

5. Third-Party Services and Integrations

5.1 Notion Integration

If you connect your Notion workspace to TabStash:

• We only access the pages and databases you explicitly authorize during the OAuth flow.
• We use this access solely to sync your stashed tabs to a TabStash database in your Notion workspace.
• Tab data passes through our Cloudflare Worker proxy to reach the Notion API but is not stored on our servers.
• You can revoke access at any time through the TabStash settings page or your Notion settings.

Notion's privacy policy: https://www.notion.so/privacy

5.2 AI Categorization (Currently Disabled)

TabStash contains code for AI-powered categorization using third-party AI providers. This feature is currently disabled. No data is sent to any AI service. Tab categorization is performed entirely on your device using domain-based heuristic matching. If this feature is enabled in the future, we will update this privacy policy and notify users before any data is transmitted to AI providers.

5.3 Cloudflare

Our serverless proxy runs on Cloudflare Workers. Cloudflare may process request metadata (IP addresses, request headers) in accordance with their privacy policy: https://www.cloudflare.com/privacy/

5.4 Lemon Squeezy

Voluntary donations are processed by Lemon Squeezy as our merchant of record. They handle all payment processing, tax collection, and payment compliance. Their privacy policy: https://www.lemonsqueezy.com/privacy

6. Data Storage and Retention

All TabStash user data (tabs, sessions, categories, archived tabs, settings) is stored locally on your device using Chrome's local storage API. We do not maintain a server-side copy of your data.

If you enable Notion sync, a copy of your tab data exists in your Notion workspace under your control.

You can delete your data at any time by:

• Deleting individual tabs or archived tabs from the extension popup.
• Using "Clear All Data" in the TabStash settings page.
• Exporting your data as JSON or CSV before deletion.
• Uninstalling the extension, which removes all locally stored data.

7. Data Security

We implement appropriate technical and organizational measures to protect your information:

• All data transmitted between the extension and external services (Notion, Cloudflare Worker) uses HTTPS/TLS encryption.
• Notion OAuth tokens are stored in Chrome's sandboxed local storage, accessible only to the TabStash extension.
• Our Cloudflare Worker does not log or persist user tab data.
• API secrets are stored as Cloudflare Worker secrets and are never exposed to the client.

No method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights Under GDPR (European Economic Area Users)

If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you. You can export your TabStash data as JSON or CSV directly from the extension at any time.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data. You can delete all data from TabStash settings, or uninstall the extension to remove all local data.
• Right to Data Portability: Request a copy of your data in a portable format. TabStash supports JSON and CSV export.
• Right to Restrict Processing: Request restriction of processing in certain circumstances.
• Right to Object: Object to processing of your personal information.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time (e.g., by disconnecting Notion).

Legal Basis for Processing: We process your data based on:

• Legitimate Interest: Processing tab data is necessary for TabStash to function as described.
• Consent: Notion sync is only activated when you explicitly choose to connect your account.

To exercise any of these rights, contact us at visionlabsai16@gmail.com. We will respond within 30 days.

9. Chrome Web Store User Data Policy Compliance

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• We limit the use of data to providing or improving TabStash's core functionality.
• We do not transfer user data to third parties except as described in this policy and only as necessary to provide the service.
• We do not use or transfer user data for serving advertisements.
• We do not use or transfer user data to determine creditworthiness or for lending purposes.
• User data is not sold to third parties.

10. International Data Transfers

If you enable Notion sync, your tab data may be processed by Notion and Cloudflare in countries other than your country of residence, including the United States. Both Notion and Cloudflare maintain appropriate safeguards for international data transfers. When Notion sync is disabled, all data remains locally on your device and no international transfers occur.

11. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us at visionlabsai16@gmail.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by:

• Posting the updated policy on our website with a new effective date.
• Displaying a notice in our Services.

Your continued use of our Services after the effective date constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

We will respond to your request within 30 days.