Last updated: August 11, 2026
This Privacy Policy describes how Tabu ("we", "us", or "our") collects, uses, and shares information in connection with your use of our website, API services, and dashboard (collectively, the "Services").
Account Information: When you create an account via our dashboard, we collect your name and email address through our authentication provider (Clerk). If you sign in using a social provider (Google, Apple, Microsoft), we receive your public profile information from that provider.
Payment Information: When you subscribe to a paid plan, payment details are collected and processed directly by Stripe. We do not store your credit card numbers or bank details on our servers. We receive from Stripe: your Stripe Customer ID, subscription status, and invoice history.
API Usage Data: We log API requests for operational purposes, including: timestamps, image classification results (safe/unsafe, category scores), request IDs, and the API key used. We use this data to enforce usage quotas, display analytics in your dashboard, and generate compliance reports.
Images: When you submit an image for classification via the API (URL or file upload), the image is processed in-memory for classification and is not stored on our servers after processing is complete. We retain only the classification metadata (scores, safe/unsafe determination), never the original image.
We use the information we collect to:
We do not sell your personal data to third parties. We share data only with the following categories of service providers, solely for the purpose of operating our Services:
We may also share data if required by law, regulation, or legal process, or to protect the rights, property, or safety of Tabu, our users, or the public.
API Logs: Classification logs (metadata only, no images) are retained for the lifetime of your workspace to enable compliance reporting and analytics. You may request deletion at any time.
Account Data: We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR):
To exercise any of these rights, contact us at hello@tabushield.com.
We implement industry-standard security measures to protect your data, including encrypted connections (TLS/HTTPS), hashed API keys, and access controls. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.
Our website uses essential cookies only for authentication (via Clerk) and session management. We do not use third-party tracking cookies or analytics trackers.
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us at hello@tabushield.com.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Services after any changes constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us: