Privacy policy
This policy explains how Tabstop handles information through our public website, our website services, and the administration software we use to maintain client websites.
Information you provide
When you contact or work with Tabstop, you may provide your name, contact details, information about your business and website, project materials, and correspondence. We use this information to respond to enquiries, plan and deliver agreed work, communicate with you, and provide ongoing website care and support.
Materials you provide for a website may include information about other people. We use those materials for the agreed website work, including publishing content intended for public use. Please only supply information you are authorised to share, and tell us if a material is confidential or should not be published.
Account authentication and Google sign-in
Tabstop's website administration system, sometimes named Tabstop CMS, is used as part of our client website services. Access is invitation-controlled. We maintain account information such as your email address, name where supplied, account identifier, invitation and enabled status, assigned role, and linked sign-in provider. We use it to authenticate you, administer access, and identify account activity within the website's administration system.
If you choose Google sign-in, we request only basic identity information: your email address, basic profile
information such as your name, and Google's identifier for your account. These are the basic sign-in permissions openid, profile, and email. We use this information for authentication and account
administration, including matching and linking your Google identity to an existing invited account.
This is not permission to access Gmail, Google Drive, Google Calendar, Google Contacts, or the contents of those or other Google services. We do not request access to that content through Google sign-in.
Account identity information and provider links are stored in our authentication service, Amazon Web Services (AWS) Cognito. Tabstop and authorised account administrators can use account information to manage website access. Google processes the sign-in with Google; AWS processes the resulting identity and administration session. Google identity information is used for sign-in and account administration, not advertising.
Another configured sign-in provider, such as Microsoft, may similarly supply basic identity information to authenticate and link an invited account. The provider's own privacy policy also applies to its handling of your information. For Google's requirements, see the Google API Services User Data Policy.
Technical information and browser storage
Hosting and network services process ordinary request information, such as your IP address and requested resource, to deliver the website and administration services. Service operations can also produce diagnostic records, such as sign-in outcomes and errors, used to operate the services and investigate problems.
The public website stores your colour-theme preference in your browser. The administration system uses cookies to maintain an authenticated session and browser storage for account state and interface preferences. These support sign-in and the operation of the interface.
Service providers and sharing
We use technical providers to host and operate websites, authenticate accounts, and handle business email. These include AWS for hosting and authentication and Microsoft 365 for Tabstop's business email. Information is processed through these services as needed to respond to you and deliver and maintain the website services.
Client website information is also available to the people authorised to manage that website, according to their access. Content approved for publication is publicly accessible once published.
Retention and security
We retain information according to its purpose and our ongoing service, operational, and recordkeeping needs. Account disabling stops future sign-in but does not itself delete the account record or its associated history. Contact us to discuss information that is no longer needed.
Administration access is restricted through invited accounts and assigned permissions. Our hosted website and authentication services use HTTPS. Please keep your sign-in details secure and let us know if you believe an account has been accessed without permission.
Questions and requests about your information
Contact support@withtabstop.com with privacy questions or to ask about access, correction, or deletion of information associated with you. Include enough context to identify the enquiry, project, or account. We may need to confirm your identity before handling a request.