Privacy
This policy covers the Tabhatch website at tabhatch.com and the shared backend that handles Notion sign-in and Stripe billing for our extensions. Each extension also has its own policy. Those pages describe what that extension stores on your computer.
Who we are
Tabhatch is a software company building simple tools that make everyday life easier. Contact us through the contact form. We have not published a registered postal address yet. Legal notices can be sent through that form.
The website
The marketing site uses Vercel Web Analytics to count page views without a tracking cookie. We do not run advertising. The host, Vercel, records standard request logs (IP address, user agent, and the path requested) to operate and secure the site. The support form is the only contact channel. Submissions are emailed to us and are not written to the entitlement store.
The backend
Two jobs require a server. Neither one receives the contents of a page you clip.
- Notion OAuth. A public Notion integration cannot ship its client secret inside an extension. We exchange the one-time code for an access token and immediately return that token to the extension in a URL fragment. We do not store the token or the page content.
- Subscriptions. Stripe Checkout and the customer portal run on Stripe. A webhook records whether Pro is active for a Notion user id, a workspace id, a Stripe customer id, the plan, the subscription status, and the period end. The extension checks that record. It does not send clipped text.
Where that record lives
Production uses Upstash Redis, a hosted key-value store. Local development can use a JSON file on the machine running the app. We keep the record while the subscription is relevant and delete it on a verified request through the contact form.
Processors
- Vercel hosts the site and API.
- Stripe processes payments. Their policy is at stripe.com/privacy.
- Notion receives clips directly from the extension, under Notion's own terms.
- Upstash stores entitlement records when it is configured.
- FormSubmit delivers support form messages: the name, email address, request type, and text you submit, so we can reply.
- Vercel Web Analytics counts page views on the marketing site.
Extensions
Children
The site and the extensions are not directed at children under 16.
Changes
If this policy changes in a way that matters, the page will say so at the top and the date will move. This version is dated 18 October 2026.