Privacy policy

What Tabot records

The Chrome extension stores visited page addresses and activity signals in Chrome on your device. These include tab changes, pages being visible, clicks, scroll position, and whether keyboard activity occurred. A saved page address may include its path or search terms in the address.

Tabot does not record the keys you press, what you type, form entries, passwords, page contents, screenshots, audio, or video. “Keyboard activity” means only that activity happened; it does not include the keys or text.

When you connect ChatGPT

After you authorize the Tabot plugin/connector in ChatGPT, ChatGPT can request selected information from the extension through Tabot’s online connection service. This service uses MCP, the connection method that lets ChatGPT request information from Tabot.

1. You ask a question in ChatGPT.
2. ChatGPT requests relevant information. The connection service checks permission and passes the request to your extension while it is online.
3. The extension looks up the requested information from activity stored on your device, then returns the result through the service to ChatGPT.

The dashboard also reads from the extension on your device. It does not send your browsing records to the connection service just to show them. Exporting a file is a separate action you control.

What the AI assistant receives

ChatGPT requests information by calling a Tabot tool. Depending on the tool, the extension returns selected details such as a description of a browsing context, website names (including subdomains), dates and times, counts, recurring-pattern details, or estimated activity measures. These are structured results, not a single general summary. Website names are not hidden or anonymized.

The extension does not return raw event-by-event records, page paths or query strings, login credentials, or website icons. Some returned text is checked for personal details, but this cannot guarantee every sensitive detail is removed. OpenAI may keep information ChatGPT receives under its own policies and account settings. Tabot does not control how long it keeps it.

What the connection service keeps

The service keeps the records needed to recognize ChatGPT and authorize its access. These include connection IDs, ChatGPT registration details, permissions, protected access-token records, and expiry dates. It does not save your browsing records or the information returned to ChatGPT in its application storage; requests and results pass through while being handled. Cloudflare runs the service and may process service traffic and operational information under its own policies.

You can revoke ChatGPT’s access in its connection settings. Revoking access removes its active authorization, but does not delete local browsing records or ChatGPT’s registration details held by the service. Tabot currently has no separate self-service control to delete those registration details.

Website analytics

The Tabot website uses Umami Cloud to measure visits to the website. This is separate from the Chrome extension: Umami does not read the extension’s local browsing records. Umami Cloud handles website-usage information under its own policies.

Keeping and deleting your data

Your browsing records remain in Chrome on your device until you clear Tabot’s extension data or remove the extension. Pausing recording stops new activity from being recorded; it does not delete what Tabot has already saved. To stop ChatGPT from accessing Tabot, revoke its connection in ChatGPT’s settings. This does not delete records stored on your device or ChatGPT’s registration details held by the connection service. You control exported files after downloading them.

Changes and contact

We may update this policy when Tabot’s data practices change. For privacy questions, email shanvit7@gmail.com.