Home / Privacy policy
LegalPrivacy.
Your documents stay on your hardware. Here is the little we do collect, and why.
Last updated: 29 September 2026. This policy explains what Tabotec, Inc. ("Tabotec", "we") collects when you use tabotec.com, request a trial, buy a licence, or run Tabotec Atlas, and what we do with it. The short version: the website collects what you type into a form, Stripe handles payment, and Atlas itself keeps your documents on your own hardware.
1. The website
When you send a contact, demo or trial request we store the details you enter (name, email, organisation, message, the page you sent it from) and the request time, and email them to our team so we can reply. We keep them as long as we have a business reason to, typically while you remain a customer or a prospect, and delete them on request.
Our web server logs requests (IP address, browser, page, time) for security and troubleshooting, and the site is served through Cloudflare, which keeps its own short-lived logs. We do not run advertising trackers or third-party analytics on the site.
2. Buying a licence
Payments are processed by Stripe. Card numbers go directly to Stripe; Tabotec never sees or stores them. Stripe sends us your name, email, organisation, the plan you bought and the payment status so we can issue and renew your licence. Stripe is an independent controller of the payment data it holds.
We keep a licence record for each customer: organisation, contact name and email, licence id, plan, seats, issue and expiry dates, and billing events (payment, renewal, refund, dispute). We keep these records for as long as required for tax and accounting, at least seven years.
Your licence file contains your organisation name and a licence id. It contains no personal data beyond the organisation name and is signed so that Atlas can verify it offline.
3. Running Atlas
Atlas is installed on your hardware. The documents you load, the questions you ask and the answers it gives are processed and stored on your systems only. Tabotec has no access to them and receives none of that content.
Atlas contacts Tabotec for two things, both optional in operation:
- Updates. When an administrator checks for or installs updates, Atlas requests the update catalogue from our update host and sends the licence id so the host can confirm the licence is active. Our host logs the licence id, IP address and time of each download.
- Usage statistics (off by default). If an administrator switches telemetry on, Atlas sends aggregate counts (questions per day, average latency, error rates, version numbers). It never sends document text, questions, answers, user names or email addresses. The switch is in Settings and can be turned off at any time.
Atlas also has a support-access feature that an administrator can enable for a limited time to let Tabotec support sign in to a specific instance. It is off unless you turn it on, and everything done under it is written to the instance's activity log.
If you connect Atlas to a third-party model provider (for example Anthropic, OpenAI or Google) that provider receives the text you send it under its own terms. Atlas ships with local models so this is a choice you make, not a default.
4. Email
We email you your licence, receipts and renewal notices, and answer support questions. We do not send marketing email unless you ask for it, and every marketing message has an unsubscribe link.
5. Sharing
We share personal data only with the service providers named here (Stripe for payments, Google Workspace for email, Cloudflare for hosting and the update host), each under its own privacy commitments, and when the law requires it. We do not sell personal data.
6. Your rights
You can ask us what we hold about you, ask us to correct or delete it, or object to how we use it, by emailing [email protected]. We answer within 30 days. California residents have the rights described in the CCPA, including the right to know, delete and opt out of sale (we do not sell data), and we do not discriminate for exercising them. If you are in the EU or UK, we act as a controller for the website and billing data and as neither a controller nor a processor for the content inside your Atlas installation, since we do not receive it.
7. Security
Website and licence data are stored on servers we control, encrypted in transit, with access limited to the people who need it. No system is perfectly secure; if we learn of a breach affecting your data we will tell you without undue delay.
8. Changes
We will post changes to this policy here and update the date at the top. Material changes for existing customers are also sent by email.
9. Contact
Tabotec, Inc., 601 North Market Street, D6, Inglewood, CA 90302, USA. [email protected] · (562) 353-0494
