Skip to main content

AI privacy and permissions

Choose what may receive your writing and which artwork your books may use.

1. Local, Cloud, and Team accounts

You choose whether an assistant can read your writing and whether automated services can process it. Open AI privacy and permissions under Connections on your account page. Save with Save AI permissions.

AI policy controls by account type
AccountWhat you control
LocalYour personal AI permissions, individual tools, and built-in artwork. Browser assistants work with your open tab when the browser supports them. A Local license alone does not provide a cloud copy for the remote connector.
CloudThe same personal controls, including permission for assistants to use your synced projects through the remote connector. A subscription does not override a restriction you have saved.
TeamYour own personal controls still apply. An administrator with permission to manage policy also sets rules for team-owned projects, approves members for AI use, and can accept responsibility for publication review.

A paid seat is not permission to use AI. A team member can read the team policy, but changing it requires manage-policy; billing access alone is not enough. Your plan and project permissions still apply.

Personal AI processing turned off on a Local account, with the built-in artwork restriction set independently.
Personal AI controls on a Local account. The artwork setting remains independent of AI processing. Open the screenshot at full size

2. Stop AI requests or permit a narrower task

Turn off Allow AI access and processing to stop subsequent AI requests. Keep writing. Cloud storage and sync continue if your plan includes them; switching off AI does not move your projects off the server.

With AI enabled, set the permissions you want an assistant to have:

  • Connected assistants (MCP) controls the hosted connector and local connector.
  • Browser assistants (WebMCP) controls assistants operating an open Tabularia tab.
  • Read and analyze manuscripts permits reading your work.
  • Suggest changes in drafts and comments permits suggestions you can review.
  • Change manuscript text directly permits edits in the text itself.
  • Change structure and project settings permits changes to the book’s organization and design.
  • Export, share, or publish through an assistant permits distribution where the tool supports it. This is off by default; you can still use those controls yourself.

Under Individual tools and approved connections, turn off a particular tool without disconnecting every assistant. A tool’s switch cannot grant a broader permission you have disabled above it. New tools follow those rules.

Individual MCP tools on a Cloud account, with one tool disabled and the approved client ID field empty.
A Cloud account can restrict individual connector tools while keeping other permitted tools available. Open the screenshot at full size

Approved MCP client IDs accepts one registered client ID per line. Leave it empty to allow any otherwise permitted connection. An ID identifies an app connection, not a verified company workspace or its training settings. A restricted list also blocks local and browser connections that cannot prove that identity. Broad browser controls need broader editing permissions; use an allowed MCP tool when you need a narrower action.

3. Set the team’s rules

Open your team’s settings and find AI privacy and permissions. The rules cover team-owned projects. An administrator can turn off AI access for guests and outside editors while leaving approved staff able to use an assistant.

Expand Member approval and select Only approved members may use AI with team-owned projects to require an explicit approval for each member. Choose the people who may use AI, then save. A contractor can hold a paid seat and still be required to work without AI.

Team member approval and the accepted Team-managed publication review setting.
A policy administrator chooses which team members may use AI. Publication responsibility is a separate choice below it. Open the screenshot at full size
Read-only Team AI permissions shown to a member without permission to manage policy.
An ordinary team member can inspect these rules, but the switches are read-only. Open the screenshot at full size

A project can be stricter. Open its Settings, then AI Privacy. Your account rules combine with the project owner’s rules and the project’s own restrictions. If any applicable rule refuses an action, a more permissive project setting cannot allow it. Sharing or joining another team does not lift that restriction or grant access to writing you could not otherwise read.

Project AI permissions with the built-in artwork switch disabled by an inherited Team rule.
A team’s artwork restriction is inherited by the project. The project cannot turn that permission back on. Open the screenshot at full size Open the screenshot at full size

4. Choose which automated services may receive work

Publishing checks start with Cloudflare Workers AI processing. An enabled second reviewer may receive selected material if further review is needed. The provider controls let you restrict that processing:

  • Use AI to screen publications controls automated publication screening.
  • Cloudflare Workers AI processing controls the initial checks and permitted artwork generation.
  • Anthropic second review and OpenAI second review control those external reviewers.
  • Send passages to an external rights search permits selected sentences to reach a configured search provider.
  • Generate artwork with AI controls artwork generation through Tabularia’s automated services.

A background job checks permission again before each later provider request, so turning off a provider stops subsequent requests even if the job was queued while that provider was still allowed. This includes retries. A request already sent cannot be recalled.

Cloudflare says Workers AI does not use your content to train models. Its data policy describes retention, stateful features, and legal exceptions. That promise concerns Workers AI; stored cloud copies and requests sent to another service have their own storage and retention rules. Expand Where your data goes for provider links and the limits of these controls.

Your connected assistant has its own privacy settings. Tabularia cannot verify whether your assistant’s account allows training or erase material it already received. Check its settings before connecting. The assistant guide explains where to start.

5. Publishing without AI screening

For personal projects, including Local and Cloud accounts, switching off AI screening means a publication waits for human review before going live. The same distinction applies when using the free online publishing tool. Turning screening off does not turn review off.

Teams have another option. A policy administrator can enable Team-managed publication review and explicitly accept responsibility for rights and compliance with Tabularia’s terms. The team’s projects can then publish without AI screening or an automatic human-review hold. Reports and takedown rules still apply. A member’s personal projects do not gain this exception.

This choice concerns publication screening. It does not allow artwork prohibited by the team’s decoration policy.

6. Keep AI-made built-in artwork out of your books

Tabularia’s built-in illustrated drop caps and ornaments were made with ChatGPT. Allow AI-made drop caps and ornaments covers those sets, including earlier editions. It starts on. Turn it off at account or team level if your publishing policy excludes that artwork; a project may also impose the restriction for itself.

The illustrated collections disappear from decoration pickers and chapter-opening controls. Assistants and older versions of Tabularia cannot save new uses of them. Plain typographic initials remain, set in your book’s typeface, along with native separators and your own uploaded decorations.

The setting governs the built-in sets. It does not determine whether an uploaded picture was AI-generated; you remain responsible for the artwork you upload. Turning off AI processing alone does not remove or prohibit the built-in sets, because selecting an existing drawing does not make an AI request.

Decorations shows an existing artwork conflict and the Remove AI-made decorations action, with a plain initial still available.
An existing book keeps its artwork and shows an explicit removal action. Typography and Custom remain available. Open the screenshot at full size Open the screenshot at full size

Your book stays intact. In Assets, open Decorations and choose Remove AI-made decorations. The action replaces illustrated initials with plain ones and removes built-in ornaments without changing your words or uploaded artwork. It applies across the current manuscript composition and can be undone.

The Typography collection after explicit cleanup, with a plain initial and no remaining artwork conflict.
After removal, the conflict is gone and a plain initial provides a chapter opening without built-in artwork. Open the screenshot at full size Open the screenshot at full size

Export, printing, and publishing refuse active prohibited artwork until you remove it. Inactive drafts and historical Snapshots stay intact; choosing one for output checks that version separately. A policy change does not automatically withdraw a page that was already published. Publishing it again must follow the current rules.

7. Check activity and the limits of revocation

Expand Recent AI activity to inspect policy changes and AI requests, including refusals. Policy records identify who changed the rules and which permissions they saved. These audit records do not copy prompts, manuscript passages, or model answers. Reading team activity requires audit permission separately from permission to change policy.

Recent AI activity showing a refused ornament request and a saved policy change, with no manuscript text.
Recent AI activity records saved policy changes and refused actions without copying manuscript text. Open the screenshot at full size

Save changes before leaving. Existing connections must follow the new rules on their next request, but revoking access cannot recall an earlier disclosure or stop someone from uploading a copied or exported file elsewhere. An approved app connection is still subject to your assistant provider’s terms and your organization’s own policy.

8. Continue reading

Try it on your own book

Start a free evaluation. No card needed.

Try free See plans and pricing