1. What we collect#
- Account information: name, email address, Google sign-in identifiers, account type (personal or professional), and a company name for professional accounts. Sign-in is via Google; we do not receive or store your Google password.
- Connected mail, calendar and contacts: when you connect an account, we retrieve message content and headers, calendar events, and contacts, going back up to two years, together with the tokens for that connection, which are stored encrypted (AES-256-GCM). If you connect Slack, the messages its read access allows.
- What Tabla produces from it: summaries of threads and people, meeting briefs, prepared draft replies, priority scores, proposed to-dos and alerts, and links between records that describe the same person or company, each tied to its source.
- What you add: notes on people, corrections, drafts, feedback, and applications you build and the results they save.
- Booking submissions: where a Tabla user publishes a booking link, the name, email address, and any note an invitee provides to schedule a meeting, and the calendar event created from it. Invitees are told who they are booking with before they submit, and are shown this policy.
- Usage events: a fixed set of product events with account identifiers and counts, never message content, sent to our analytics provider.
- Technical logs: request logs, with email addresses, identifiers and credentials removed from free text.
- Communications: messages you send us, including support requests.
2. What we deliberately do not do#
- We do not sell personal data, and we do not use it for advertising.
- We do not use your data to train machine-learning models, and our model provider may not either.
- To keep the workspace fast, Tabla stores some of what it works out from your records, such as summaries, scores and briefs. Each is deleted when you disconnect the source it came from or delete your workspace.
- The Service acts in your connected accounts only as you direct it: something you do in the product, a standing instruction (such as an away responder you turn on, or calendar buffers around your meetings, which you can turn off), or a booking link you publish. Each action is recorded in your action log.
3. How we use information#
To provide, secure, support, and improve the Service; to operate the website; to communicate about the Service; to comply with law. AI features send the relevant content (for example a thread you ask to summarize or reply to) to our model provider, Anthropic, which processes it to return a result under terms that do not permit training on your data.
4. Google user data#
Tabla's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we use Gmail and Google Calendar data only to provide and improve the features you use in Tabla, we never sell it or use it for advertising, and neither we nor our AI providers use it to train generalized AI or machine-learning models. People at Tabla read it only with your permission, for security purposes, or as the law requires.
5. Sharing#
We share personal data only with the service providers below, each bound by contract to protect it, and where required by law. If Tabla is involved in a merger or acquisition, data may transfer as part of that transaction with notice.
| Provider | What it does, and what it receives |
|---|---|
| Supabase | Database, sign-in and file storage. Holds everything Tabla stores. |
| Vercel | Hosting and scheduled jobs. Handles requests in transit and receives scrubbed logs. |
| Nylas | Connects Google and Microsoft mail and calendar. Carries mail, calendar and contact data in transit. |
| Anthropic | AI models. Receives the content sent for a specific AI feature. |
| Mixpanel | Product analytics. Receives event names, account identifiers and counts. |
| Slack | Only if you connect it. Provides the read access you grant. |
When you direct it, Tabla also contacts others: the people you email or invite, a sender's unsubscribe address when you unsubscribe, and public web pages and news feeds your applications read. Weather lookups send only a city name.
6. Retention#
Retention periods are stated in the Data Retention Policy. In brief: connected data is kept while the source is connected; disconnecting a source deletes its synced records and what was derived from them right away; deleting your workspace ends access immediately and deletes its data within 30 days; deleted data leaves encrypted backups within 7 days.
7. Security#
Encryption in transit; encryption of connection credentials at rest; per-account isolation enforced at the database layer; least-privilege internal access; secrets kept in a managed vault, never in code. No method is perfectly secure; we will notify affected users of a breach as the law requires.
8. Your rights and choices#
You can disconnect any source at any time in the product, and delete your workspace yourself in Settings, which ends access at once. Export your data first: export is not available after deletion. You may also access, correct, export, or delete your data by contacting privacy@worktabla.com. Where you use Tabla through an organization, requests about records we process on its behalf are fulfilled through that organization. Rights available under the law of your state apply as provided by that law.
10. Children#
The Service is not for anyone under 18, and we do not knowingly collect their data.
11. Changes and contact#
Material changes will be announced on this page and to users by email or in the product, with the effective date updated above. Contact: privacy@worktabla.com. Security reports: security@worktabla.com.
12. Text messages (Text Tabla)#
Text Tabla is optional. If you turn it on in Settings, you link your mobile number by entering, in Tabla, a code we text you. You can then text our number to ask about your schedule, add a to-do, or start an email or calendar event. If you also turn on Send by text, you can send a draft you asked for by replying “yes”. It goes only to people you’ve emailed before, after a 15-second pause you can stop in the app.
We use your mobile number and your texts only to run Text Tabla for you. When you ask Tabla to draft something by text, your request is handled like any other request in Tabla, including by our AI provider (sections 3 and 5).
Tabla texts you in two ways:
- Replies to texts you send, plus one code when you link your number.
- Assistant texts, only if you turn them on in Settings: a nudge to answer someone, with a draft ready; a heads-up before a meeting; a daily brief at a time you pick; and an alert when someone you’ve marked as important writes. You can turn each kind off on its own. They wait for the end of your quiet hours (9pm to 8am unless you change them), and Tabla sends up to 10 a day unless you change it. You can turn summaries off.
We never send marketing by text. Assistant texts you turn on can include a short summary of mail you’ve received, such as who wrote and what about. Replies to your texts never include anyone else’s email.
Your texts and our replies pass through mobile carriers and Amazon Web Services, and like all text messages they are not end-to-end encrypted.
We do not sell, rent or share your mobile number or text-messaging opt-in data with third parties or affiliates for marketing or promotional purposes.
Turn Text Tabla off in Settings, or reply STOP, at any time. Reply HELP for help, or email support@worktabla.com. Text Tabla is for US mobile numbers only. Message frequency varies, and message and data rates may apply.