Privacy Policy for TabulaNote

1. Introduction

TabulaNote ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your information when you use the TabulaNote Chrome extension.

By using TabulaNote, you agree to this Privacy Policy. If you do not agree, do not use the extension.

2. Information We Collect

2.1 User-Generated Content

• Notes and Content: All text, images, and other content you create in TabulaNote
• Note Metadata: Note titles, creation dates, modification dates, and organization data
• User Preferences: Theme settings (light/dark mode), last active note, and other customization choices

2.2 Google Account Information (Optional)

If you enable Google Drive sync, we access:

• Email Address: Your Google account email address
• Profile Information: Basic profile information from your Google account
• OAuth Tokens: Secure authentication tokens for Google Drive API access

2.3 Technical Information

• Extension Usage Data: Local storage usage, sync status, and error logs (stored locally only)
• Browser Information: Chrome extension environment data necessary for functionality

2.4 Information We Do NOT Collect

• Browsing history (not currently collected; see Section 7 for future considerations)
• Personal information beyond what you provide in notes
• Data from websites you visit
• Location data
• Device information beyond what Chrome provides

3. How We Use Your Information

3.1 Primary Uses

• Note Storage and Management: Store and organize your notes locally in your browser
• Google Drive Sync: When enabled, sync your notes to your Google Drive for backup and cross-device access
• Extension Functionality: Provide core features including auto-save, note organization, and export
• User Experience: Remember your preferences and restore your last active note

3.2 Data Processing

• All note content is processed locally in your browser
• Google Drive sync uses Google's secure API endpoints
• No data is sent to our servers or third-party services except Google (when sync is enabled)

4. Data Storage and Location

4.1 Local Storage

• Your notes and preferences are stored locally in your browser using Chrome's storage API
• Data remains on your device and is not transmitted unless you enable Google Drive sync
• Local storage is managed by Chrome and subject to Chrome's data policies

4.2 Google Drive Storage (Optional)

• If you enable Google Drive sync, your notes are stored in a "Tabula Notes" folder in your Google Drive
• This data is subject to Google's Privacy Policy and Terms of Service
• You can disable sync at any time, and your notes will remain in your local browser storage

4.3 Data Retention

• Local Storage: Your notes remain stored locally until you delete them or uninstall the extension
• Google Drive: Synced notes remain in your Google Drive until you delete them manually
• Account Information: OAuth tokens are stored locally and can be revoked through Chrome's identity API

5. Third-Party Services

5.1 Google Services

TabulaNote integrates with Google services for optional cloud sync:

• Google Drive API: Used to sync your notes to Google Drive
• Google Identity Services: Used for secure OAuth authentication
• Google OAuth 2.0: Used to authenticate and authorize access to your Google Drive

Google's Privacy Policy: When you use Google Drive sync, your data is also subject to Google's Privacy Policy, available at: https://policies.google.com/privacy

Google's Terms of Service: Your use of Google services is also subject to Google's Terms of Service, available at: https://policies.google.com/terms

5.2 Data Sharing

• We do not sell, rent, or share your data with third parties except as necessary for Google Drive sync (when enabled)
• We do not use your data for advertising or marketing purposes
• We do not share your data with analytics services or data brokers

6. Your Rights and Controls

6.1 Access and Control

• View Your Data: All your notes are accessible within the extension
• Edit Your Data: You can edit, rename, or delete any note at any time
• Export Your Data: You can export individual notes as text files
• Delete Your Data: You can delete notes individually or uninstall the extension to remove all local data

6.2 Google Drive Sync Controls

• Enable/Disable Sync: You can enable or disable Google Drive sync at any time
• Revoke Access: You can revoke Google Drive access through Chrome's extension settings or your Google Account settings
• Delete Synced Data: You can delete synced notes from your Google Drive at any time

6.3 Uninstalling the Extension

• Uninstalling the extension removes all locally stored data
• Synced data in Google Drive will remain unless you delete it manually
• You can reinstall the extension and reconnect to Google Drive to restore synced notes

7. Future Features and Data Collection

7.1 Potential Browsing History Access

We are considering features that may require access to your browsing history to enhance note-taking (e.g., automatically capturing URLs, creating notes from visited pages, or providing context-aware suggestions).

Current Status: This feature is not currently implemented, and we do not collect or access your browsing history at this time.

If Implemented:

• We will update this Privacy Policy with specific details about how browsing history would be used
• We will request the necessary permission from Chrome Web Store with clear justification
• We will notify users through the extension update process
• We will provide clear controls for users to opt-in or opt-out
• We will only access browsing history with your explicit consent
• We will never share browsing history data with third parties

User Control: If this feature is implemented, you will have full control to enable or disable it, and you can revoke access at any time.

8. Security Measures

8.1 Data Security

• Local Storage: Data stored locally is protected by Chrome's built-in security measures
• OAuth Security: We use Google's OAuth 2.0 for secure authentication
• HTTPS Only: All communication with Google APIs uses secure HTTPS connections
• No Server Storage: We do not maintain servers that store your data

8.2 Authentication Security

• OAuth tokens are stored securely using Chrome's identity API
• Tokens can be revoked at any time through Chrome settings
• We do not store your Google account password

9. Children's Privacy

TabulaNote is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify users of significant changes through the extension or Chrome Web Store
• Continued use of the extension after changes constitutes acceptance of the updated policy

11. Compliance

11.1 Chrome Web Store Requirements

This extension complies with Chrome Web Store's Developer Program Policies, including requirements for:

• User data privacy and security
• Permissions justification
• Third-party service disclosure

11.2 Data Protection

While we are a small development team, we are committed to protecting your privacy and handling your data responsibly in accordance with best practices.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

We will respond to your inquiries as soon as possible.

13. Consent

By using TabulaNote, you consent to this Privacy Policy. If you do not agree with any part of this policy, please do not use the extension.