Privacy

Who we are

Tabs & Spaces is made by Proteus AI ("we", "us"). For anything about privacy, write to hello@proteusai.app.

This policy covers:

• our websites: tabsandspaces.dev and developer.tabsandspaces.dev;
• the deployment we run at tabsandspaces.app;
• the apps we run for any deployment: the GitHub app (github.tabsandspaces.app) and our Google apps, including Gmail (google.tabsandspaces.app);
• the marketplace, and the support we give.

For the deployment we run, we're the controller of personal data about the people who use it. A workspace's owners decide what goes into their workspace, and we process its content to run it for them.

Self-hosted deployments are run by whoever installs them, on their own servers. Their operator is responsible for the data in them; we don't receive it. We only get what a deployment chooses to send us: if its operator registers it with us (for the marketplace or support), its address, version and how many workspaces it has; the listings it publishes; support tickets; and what its people send our apps when they use them.

What we collect

• Your account: your name, email address and password (stored hashed), and the picture, job title, language, theme and time zone you choose.
• What you put in your workspace: messages, files, docs, tasks, agents and their instructions and memory, apps' data, and the settings of your workspace and spaces.
• Accounts you connect: when you connect a Google or GitHub account, the access tokens it gives us (stored encrypted) and the account's address or user name.
• How the service is used: sign-ins and changes, with the IP address and device they came from, kept in your workspace's audit log; and our servers' logs.
• Email we send you: confirmations, invitations, notifications and replies to tickets, sent through our email provider.
• Support and contact: what you tell us in tickets, emails and calls.

Our websites don't use analytics or advertising cookies. The app uses cookies only to keep you signed in and to protect your session.

Google user data

Our Google apps (Gmail today) only access your Google account when you connect it yourself, in an app's tab, and only for the access you grant there. Gmail asks for gmail.modify: to read, search, label, archive and draft mail, and to send it.

• What we use it for: only the features you use. Agents search and read your mail, and draft, send, label or archive it, when you ask them to; anything that sends or changes mail waits for your approval. When you choose to tell a space about your new mail, we pass that space the subject, sender and first lines of new messages in the labels you chose, so its triggers can start tasks.
• What we keep: your Google account's address, encrypted tokens, the access you granted, and where your mailbox's history was last read. We don't store your mail. A space's Gmail tab lists the last 20 messages it was told about (subject, sender and mailbox only).
• Who else sees it: what an agent reads to answer you is sent to our AI model provider to produce its answer, under terms that don't allow them to train models on it. The people in a space you chose to tell about your new mail see what was passed to it. Nobody else.
• What we never do: we don't sell Google user data, use it for advertising, or use it to train AI models. People at Proteus AI don't read it, unless you ask us to (for support), it's needed for security, or the law requires it.

Tabs & Spaces' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect at any time, in the app's tab or in your Google account's connections. Disconnecting revokes our access and deletes your tokens.

GitHub

The GitHub agent and the GitHub app act in GitHub as you, with the account you connect, only when you ask; changes wait for your approval. The GitHub app keeps your encrypted tokens and what each space chose to follow, and passes the space the title, number, author and link of pull requests, issues and checks in those repositories. We don't keep your code.

Why we use it

• To provide the service you asked for (performing our contract with you): your account, your workspace, agents, apps and connected accounts.
• To keep it secure and working (our legitimate interests): audit logs, preventing abuse, backups, fixing problems.
• To talk with you (contract, or our legitimate interests): emails about your account and workspace, and answers to your questions.
• Because the law requires it (legal obligation), for example accounting records.

We don't sell personal data, and we don't use it for advertising.

Who helps us

These providers process personal data for us, under contracts that require them to protect it:

Google and GitHub receive what's needed to act in your accounts when you've connected them. Where data leaves the European Economic Area for a country without an adequacy decision, we rely on the European Commission's standard contractual clauses or an equivalent safeguard.

How long we keep it

• Your account, until you ask us to delete it.
• A workspace's content, until its owners ask us to delete it; its audit log, for 365 days.
• Backups, for up to 30 days after something is deleted.
• Connected accounts' tokens, until you disconnect them.
• Support conversations, for as long as needed to help you, and up to two years.
• Anything the law requires us to keep, for as long as it requires.

How we protect it

Everything travels encrypted (HTTPS). Tokens for connected accounts are encrypted at rest. Access to our systems is limited to the people who need it, and sign-ins and changes are recorded in each workspace's audit log, chained so they can't be quietly altered.

Your rights

You can ask us to show you the personal data we hold about you, correct it, delete it, restrict or object to how we use it, or give it to you in a portable form; a workspace can also be exported at any time from its settings. Where we rely on your consent, you can withdraw it. Write to hello@proteusai.app; we'll answer within a month.

You can also complain to a data protection authority: in the Netherlands, the Autoriteit Persoonsgegevens, or the one where you live.

If your workspace is on someone else's deployment, ask its operator: they hold that data, not us.

Children

Tabs & Spaces isn't meant for anyone under 16, and we don't knowingly collect their data.

Changes

When we change this policy, we'll update the date at the top, and tell you in the app or by email if the change matters to you.