1. Overview & Data Controller
This Privacy Policy explains how TabMyBio Technologies Private Limited ("TabMyBio", "we", "us", or "our") collects, uses, discloses, and protects your information when you access or use our link-in-bio platform at tabmybio.com, our mobile-optimized web applications, APIs, creator dashboard, and public bio pages.
For the purposes of the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Digital Personal Data Protection Act (DPDP), TabMyBio Technologies Private Limited operates as the Data Controller for your account credentials and personal subscriber records, and acts as a Data Processor for analytics and subscriber data collected on behalf of creators via their public bio links.
2. Information We Collect
- Account Credentials: Email address, name, username/handle, and authentication credentials.
- Profile & Bio Information: Bio descriptions, display names, profile avatars, banner artwork, social media handles, and custom theme settings.
- Blocks & Links: URLs, external destinations, product cards, contact details, and custom embeds you add to your page.
- Bespoke Inquiries & Customer Support: Communications, briefs, and quotes exchanged with our design team.
- Bio-Link Analytics: Aggregated views, unique visits, link clicks, device types, operating systems, and HTTP referrer sources.
- Technical Logs: IP address (anonymized or hashed), browser type, and timestamps for security rate-limiting and DDoS defense.
- Cookies & Local Storage: As detailed in our Cookie Policy.
Paid subscriptions and custom design services are processed through our authorized payment gateway, Razorpay. TabMyBio does not capture, store, or process raw credit card numbers or banking PINs. We receive only transaction authorization tokens, subscription status, billing addresses, and order references.
3. How We Use Your Information
We process your personal information under the following lawful bases:
- Contractual Performance: Providing the TabMyBio service, authenticating logins, hosting and serving your public bio page, processing subscription upgrades, and syncing custom domains.
- Legitimate Interests: Monitoring service health, preventing platform fraud, enforcing handle reservation policies, defending against automated web scrapers, and debugging performance bottlenecks.
- Legal Obligations: Retaining mandatory financial transaction records for tax, auditing, and corporate compliance in accordance with applicable laws.
- Consent: Sending optional marketing newsletters or activating optional analytics/campaign cookies.
4. Subprocessors & Service Providers
We partner with trusted, privacy-vetted infrastructure providers who process data strictly under Data Processing Agreements (DPAs):
| Provider | Purpose | Data Location |
|---|---|---|
| Supabase Inc. | Relational database, Auth, and encrypted asset storage | AWS Singapore / US East |
| Razorpay Software Private Limited | PCI-DSS Level 1 compliant payment processing | India |
| Resend Inc. | Transactional system emails and newsletter delivery | US East |
| Vercel Inc. | Serverless cloud edge hosting & global CDN delivery | Global Edge Network |
5. Your Privacy Rights
Depending on your jurisdiction (including GDPR, CCPA, and DPDP), you hold the following rights regarding your personal data:
Request an export of all personal data, published bio blocks, and click records we hold on you.
Correct or update any inaccurate profile information directly from your Account Settings.
Request permanent deletion of your profile, handle, blocks, and collected audience records.
Revoke consent for analytics or marketing cookies at any time via our Cookie Preferences.
To exercise any of these rights, email us at grievance@tabmybio.com. We verify identity and respond within thirty (30) days without charge.
6. Data Retention & Security
We retain your account data for as long as your account remains active. If you delete a bio page or unpublish your profile, the page is immediately withdrawn from public routing. When you delete your account, your personal data and uploaded media assets are permanently expunged from our live production databases within thirty (30) days, except where retention is mandated by law.
We maintain stringent technical safeguards, including HTTPS TLS 1.3 encryption in transit, AES-256 encryption at rest, PostgreSQL Row-Level Security (RLS) policies, rate-limited API gateways, and scoped authentication sessions.
7. Grievance Officer & Inquiries
In accordance with the Information Technology Act and applicable data protection regulations, queries or complaints regarding privacy practices may be submitted to our Grievance Officer:
Grievance Officer · Privacy & Data Protection
TabMyBio Technologies Private Limited
Registered office address, Bengaluru, Karnataka, India
Email: grievance@tabmybio.com