Optional team features · 2.1.7

The local-storage and Calendar-token descriptions below apply to personal features. Optional team features process Google identity, nicknames, tasks, messages, requests, announcements and presence through the Vercel API and Supabase. Drive credentials are encrypted on the server. Invitation emails use Brevo. See the team notice for data categories, retention, deletion and sharing.

Optional team features · 2.1.7

TabPad — Privacy Policy

2026-11-08 · v2.1.5

Scope

TabPad is a Chrome-extension-only planner for schedules, tasks and notes. The website provides installation information and this policy, not the planning workspace. Cloud schedule sync and phone push are not available in the current extension.

Local data

Schedules, notes, tasks, text rules, preferences, reminder records and imported Google event caches are stored in your browser, not synced to TabPad servers. TabPad does not collect browsing history, content from other websites, GPS or payment information for its core features. User-entered content is processed locally.

Google Calendar

Connection is optional. Chrome Identity supplies access tokens for direct Google API requests. TabPad processes account email or calendar identifiers, calendar lists and selected event details such as titles, descriptions and times for display. Only calendar.calendarlist.readonly and calendar.events.readonly are requested; original events are not modified. Chrome manages the token cache; TabPad holds the active token in memory and excludes it from backups. Extension Google tokens are not stored on TabPad servers. Disconnect clears local authentication state and requests revocation when a token is available. If revocation fails, for example due to a network error, you can also revoke access in your Google account.

Permissions and reminders

storage saves local settings, schedules and reminder records; alarms schedules reminders; identity supports Google sign-in. notifications is requested optionally when enabling reminders. www.googleapis.com access retrieves calendars and oauth2.googleapis.com access revokes tokens. Reminder delivery depends on Chrome and operating-system availability.

Banners and external services

Banners are selected by interface language and publication period; development samples may appear. They may appear on entry and after every five active minutes, with closing enabled five seconds after image loading. Banner JSON is retrieved from Vercel and images from Supabase. Providers may process ordinary network information such as IP address and request time. TabPad does not collect GPS or use schedules, notes or Google data for ad targeting. External banner links and email composition open only when clicked. External services are subject to their providers' policies.

Reviews and support

The first-use record, next reminder time, dismissal and review-link-opened preferences are stored only on your device. Event counts are evaluated locally for reminder eligibility. TabPad does not track actual ratings or review submission and sends no review-reminder analytics to a server. Reviews are submitted on the Chrome Web Store. Email links open your configured mail application; email addresses and messages you choose to send to support are used to answer and resolve your request.

Retention and deletion

Local data can remain until you delete it, clear browser data or remove the extension. Exported JSON/TXT/DOCX files are not encrypted and must be managed or deleted by you. Disconnecting Google does not delete exported files. Changing to extension-only operation does not automatically delete old web-version browser data or historical server copies. Contact support to request access to or deletion of historical server data and support messages. Provider logs follow the providers' retention policies. Support correspondence is retained as needed to resolve requests and meet applicable retention obligations.

Limited use and security

Google data is used only for user-requested calendar display and refresh, not sale, ad targeting, AI training, creditworthiness or lending. Use of Google API information adheres to the Google API Services User Data Policy and Chrome Web Store User Data Policy, including Limited Use requirements. Network traffic uses HTTPS. External spellcheck processing depends on your browser settings.

Amazon affiliate banners

From version 2.1.5, English, Japanese and Traditional Chinese users may see automatic Amazon Best Sellers affiliate banners. Korean users are excluded. Links lead to the US Amazon.com English store. As an Amazon Associate I earn from qualifying purchases. Affiliate attribution is transmitted only when a banner is clicked; display alone does not contact Amazon or set its cookies. Purchases are not required to use TabPad.

Coupang Partners banners

Korean-language users may see automatic Coupang Partners banners. TabPad receives commission from qualifying purchases. The Korean affiliate disclosure appears beneath the banner. Affiliate links open only when clicked; banner display alone does not contact Coupang or set Coupang cookies. Other interface languages do not receive Coupang banners.