1. Who controls your data
Tabula OS is responsible for the processing described here, except where a customer agency controls client and lead data entered into its workspace. In that case, the agency is the primary controller and Tabula OS processes the data to provide the service.
2. Data we collect
- Account and profile data, including name, email, agency, contact details, licences and branding.
- Listings, media, CRM records, budgets, preferences, notes and content submitted to the workspace.
- Subscription, plan and transaction status received from our billing provider.
- Integration identifiers and tokens for services you connect, such as Google Drive or WhatsApp.
- Operational logs, security events, device/browser information and feature usage needed to run the service.
- On public Advisor shares, a daily one-way hash derived from the network address is used to deduplicate view counts. The raw address is not stored in that view record.
- Name and WhatsApp number when a visitor expressly asks to be contacted through a public share form.
3. Why we use data
We use data to authenticate users, provide listings, CRM, sharing, market signals and Motion video features; secure and troubleshoot the platform; process subscriptions; respond to support requests; meet legal duties; and improve reliability. Depending on the context, processing is based on contract, consent, legitimate operational interests or a legal obligation.
4. AI and connected services
When an AI, Motion, translation, mapping, storage, messaging or billing feature is used, the minimum content required for that feature may be sent to the relevant provider. Connected-service tokens are stored encrypted where supported by the platform. Do not submit highly sensitive personal information unless it is necessary and you are authorised to do so.
5. Service providers and transfers
We use vetted infrastructure and feature providers, which may include Supabase, Cloudflare, Google, Whop, Meta/WhatsApp and the Tabula Showcase rendering service. Providers process data under their own terms and our instructions as applicable. Data may be processed outside your country with contractual or other appropriate safeguards where required.
6. Retention and security
We retain data for as long as the workspace is active and afterwards only as needed for legitimate business, backup, dispute, security and legal requirements. Retention can differ by record type and customer agreement. We use access controls, tenant isolation, encrypted transport and safeguards for stored integration secrets. No system can guarantee absolute security.
7. Your choices and rights
Subject to applicable law, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Client and lead requests should normally be directed first to the agency that collected the data. You may also contact us using the address below.
8. Children and policy changes
Tabula OS is a business service and is not intended for children. We may update this policy as the product or law changes. Material changes will be identified by a new effective date and, where appropriate, an in-product notice.
9. Contact
Privacy requests: tabula@buildhub.global.