Tabs

[Enterprise Terms] Section 9 states Tabs may 'internally use and modify (but not disclose) Customer Data for the purposes of (1) providing the Service to Customer; (2) marketing of Tabs' products...and (3) generating Aggregated De-Identified Data.' This vague language permits internal use for service improvement and marketing without explicit prohibition on AI training. No clear opt-out mechanism is stated for enterprise customers, though aggregated/anonymized data usage is permitted.

“[Enterprise Terms] 'Tabs may (a) internally use and modify (but not disclose) Customer Data for the purposes of (1) providing the Service to Customer; (2) marketing of Tabs' products...and (3) generating Aggregated De-Identified Data'”

[Enterprise Terms] Section 9 grants Tabs a license to use Customer Data for service provision, marketing, and generating aggregated data, but the scope is somewhat limited by the statement that Tabs will 'process, retain, use, and disclose such personal information only as necessary to provide the Services.' However, the license for 'Feedback' in Section 7 is perpetual, irrevocable, worldwide, sublicensable, and royalty-free, which is broad. The customer retains ownership of Customer Data itself, but Tabs's usage rights are broader than strictly necessary for service delivery.

“[Enterprise Terms] Section 7: 'Customer shall...grant to Tabs a nonexclusive, worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free, fully paid up license to use and exploit the Feedback for any purpose'”

[Privacy Policy] states 'A current list of subprocessors is available upon request' and mentions sharing with 'Service Providers,' 'Advertising Partners,' and 'Analytics Partners.' The policy indicates data may be shared with 'Marketing providers' and 'Companies that track how users interact with the Services,' but does not explicitly prohibit data sales or provide a comprehensive published sub-processor list. [Enterprise Terms] Section 9 restricts sharing of personal information but permits aggregated/de-identified data sharing freely.

“[Privacy Policy] 'We may engage subprocessors to support our Services. A current list of subprocessors is available upon request' and 'Advertising Partners...help us market our services'”

[Enterprise Terms] Section 9 states 'Customer Data may be irretrievably deleted if Customer's account is ninety (90) days or more delinquent' but does not specify standard retention periods for active accounts. [Privacy Policy] states 'We retain Personal Data about you for as long as necessary to provide you with our Services' and 'Where we process Personal Data on behalf of our enterprise customers, we will retain such data for the duration of the customer agreement or as directed by the customer,' which is vague regarding specific timelines. Backup and archival retention is mentioned but not clearly defined.

“[Privacy Policy] 'We retain Personal Data about you for as long as necessary to provide you with our Services or to perform our business or commercial purposes' and [Enterprise Terms] 'Customer Data may be irretrievably deleted if Customer's account is ninety (90) days or more delinquent'”

[Enterprise Terms] Section 9 explicitly states 'Customer shall retain all right, title and interest in and to the Customer Data, including all intellectual property rights therein.' This clearly establishes that the customer owns all IP rights to data and outputs generated from their data. Tabs retains rights only to the Service itself and to Feedback provided by the customer, not to customer-generated outputs.

“[Enterprise Terms] Section 9: 'Customer shall retain all right, title and interest in and to the Customer Data, including all intellectual property rights therein'”

[Enterprise Terms] Section 9 states 'Tabs shall use commercially reasonable efforts to maintain the security and integrity of the Service and the Customer Data, including but not limited to maintaining SOC2 compliance throughout the Term.' SOC 2 compliance is mentioned but no other certifications (GDPR, ISO 27001, HIPAA) are explicitly stated. [Privacy Policy] mentions 'appropriate physical, technical, organizational and administrative security measures' and 'encryption in transit and at rest' but does not provide evidence of formal certifications beyond SOC 2.

“[Enterprise Terms] Section 9: 'Tabs shall use commercially reasonable efforts to maintain the security and integrity of the Service and the Customer Data, including but not limited to maintaining SOC2 compliance throughout the Term'”