Privacy Policy

Effective 3 August 2026 · Terms of Use · Cookies Policy

This policy explains what data neotab collects, why, and what happens to it. neotab is operated by Importify Limited, Unit 1603, 16th Floor, The L. Plaza, 367 - 375 Queen's Road Central, Sheung Wan, Hong Kong ("we", "us"). It covers the neotab Chrome extension, the web dashboard at neotab.io/app, and this website.

Questions or requests: support@neotab.io.

The short version

1. Data we collect

Account data

You sign in with Google. We receive and store your name, email address, and Google account identifier. We never see or store a password.

Board data

Your board is your categories, groups, saved links (titles and URLs), and settings.

AI requests

When you run an AI action (for example organizing open tabs or filling a group), the titles and URLs of the relevant tabs or links, together with your instruction, are sent through our server to OpenAI to generate the result. Page content is never read and never sent. We record usage counts and technical metadata (such as token counts) to enforce plan limits and prevent abuse. Under OpenAI's API terms, API data is not used to train their models.

Billing data

Purchases are processed by PayPro Global, our merchant of record. PayPro collects your payment details under its own privacy policy. We receive order metadata only: order ID, product, status, and the email used at checkout. Card numbers never reach us.

Usage statistics

We collect anonymous feature-usage counters — for example "onboarding completed", "import used", or "a board reached 30 links" — to understand which features matter and to improve neotab. These events are tied to a random install identifier, not to your account, and never include page URLs, page titles, or any of your board content. A daily check-in event includes your approximate timezone and interface language as a rough region signal; we do not use your IP address for this. Because these events are not linked to your account, they cannot be attributed back to you. You can turn usage statistics off at any time in Settings → Data; the setting applies per device.

Link icons and dead-link checks

To show a site's icon next to a saved link, your browser requests that icon from Google's public favicon service. Only the site's domain is sent (for example example.com) — never the full address, never the page title, and never page content. For tabs you have already visited, the extension uses Chrome's built-in icon cache first and makes no network request at all.

The optional dead-link check asks whether a saved site still resolves. It sends only the domain to a public DNS resolver — Cloudflare DNS, falling back to Google Public DNS — and again never the full address or the page. This check is off until you grant permission for it, and you can decline; the rest of Clean up still works.

Referrals

If you reach neotab.io through a partner's referral link, we store that partner's short referral code in a first-party cookie (nt_ref, 90 days) so they can be credited if you later subscribe. The code identifies the partner, not you, and is never combined with your board, your links, or your usage counters. If you later create an account, the code is attached to that account solely to attribute a single commission. See the Cookies Policy for the full cookie table.

Technical data

Our servers keep standard logs (IP address, request time, endpoint) used for security, rate limiting, and abuse prevention.

2. What we never do

3. How we use data

Only to provide, protect, and improve the service: authenticating you, syncing your board, running the AI actions you request, processing purchases and plan status, enforcing plan limits and fair use, understanding feature usage through anonymous counters, and responding to support requests.

4. Service providers

ProviderPurpose
GoogleSign-in (OAuth). Site icons for saved links (domain only) via Google's favicon service. Fallback resolver for the optional dead-link check (domain only). Fonts on this website are loaded from Google Fonts.
CloudflarePublic DNS resolver for the optional dead-link check (domain only).
OpenAIProcesses AI requests (tab titles, URLs, and your instruction).
PayPro GlobalMerchant of record for all payments.
Cloud hostingOur servers and database run on managed cloud infrastructure.

Each provider receives only what its role requires.

5. Retention and deletion

6. Your rights

You can access and export your board at any time (Export in the app produces a JSON file). You may request a copy, correction, or deletion of your personal data by emailing support@neotab.io. Depending on where you live, you may have additional statutory rights; we honor them.

7. Security

All traffic is encrypted in transit (HTTPS/TLS). Sessions use opaque tokens stored as a cookie on neotab.io. Access to production systems is restricted. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

8. Children

neotab is not directed at children under 16, and we do not knowingly collect their data.

9. Changes

If we change this policy, we will update this page and its effective date. Material changes will be announced in the product.

10. Contact

Importify Limited
Unit 1603, 16th Floor, The L. Plaza
367 - 375 Queen's Road Central
Sheung Wan, Hong Kong
support@neotab.io