1. Short Version
Mackley Studios operates Tabularia. "We," "us," and "our" refer to Mackley Studios.
- We do not sell personal information or Manuscript content, use it for behavioral advertising, or train AI models on your writing.
- Writing is saved in your browser. The Local plan keeps it on your device. With the Cloud plan, it is also sent to our infrastructure for sync, backup, sharing, or publishing.
- Stripe processes payments. We do not store full card numbers or bank details.
- Assistants you authorize receive the content they request under their own providers' policies. You can disconnect them from Account.
2. Information We Collect
Account information
We store information needed to operate and secure your account:
- your name and email address, a password hash, and optional Google sign-in details such as profile image and verification status
- authentication, session, and abuse-prevention records
- verification and recovery tokens, unsubscribe choices, and email-delivery or suppression records
- preferences, account access status, historical early-access requests, and product-update choices
Passwords and email-action tokens are hashed, not stored in readable form.
Writing and Projects
Your browser stores writing and associated Project data. This includes Drafts and History, media, and settings. Cloud features process corresponding Project data for synchronization and recovery, including operation and backup records.
Imports are converted on your device. Source bytes are processed temporarily in browser memory. Supported content and notes are retained, while unsupported formatting and source history are discarded. Converted content follows the same storage rules as other writing.
A local backup folder and its write permission stay on your device. Anyone with access to your device account and browser profile may access local work. Clearing site data or ending private browsing can remove it. Keep independent exports.
Connected assistants
We store each connection's name, permissions, authorization date, and last use. Its credential is stored as a one-way hash.
Billing
Billing records support purchases and subscriptions. They include Stripe identifiers, renewal choices, and payment events needed to manage access.
Technical and support information
Security logs record request metadata and browser or device information. We also process support messages and diagnostics or debug exports you choose to send.
Aggregate reporting records page paths and referral hosts alongside sign-up and sign-in events. A keyed visitor identifier changes daily. Analytics records exclude raw network addresses and full referring URLs and do not track visitors across reporting days.
3. How We Collect And Use Information
Information comes from you, your browser, and the providers you use. We use it to:
- operate and secure accounts, writing, sync, backups, and paid access
- send essential account, recovery, security, and billing messages
- send product updates you opt into, honor unsubscribe choices, and suppress marketing after bounces or complaints
- provide support, prevent abuse, and measure aggregate service health and growth
- meet legal obligations and enforce our terms
4. How We Share Information
We share information as needed to operate the service, carry out your requests, comply with law, or protect the service. Our providers include:
- Cloudflare for hosting, storage, processing, security, and cloud sync
- Stripe for payments, subscriptions, invoices, and billing management
- Google for optional sign-in
- Resend.com for account messages, opted-in product updates, and operational email
An assistant you connect acts for you, not for us. While authorized, it receives the content it requests. Disconnecting prevents further access but cannot retrieve copies already received.
5. Third-Party Services
Providers handle information under their own terms and privacy policies. See Stripe, Google, Cloudflare, and Resend.
Assistants you choose have separate privacy and retention settings that we cannot control. We do not permit advertising networks to collect information through Tabularia.
6. Cookies And Tracking
Cookies support sign-in, account security, and sessions. We use no advertising or analytics cookies and do not track you across websites.
Aggregate reporting uses request metadata and a keyed identifier that changes each UTC day. Browser storage holds writing and preferences for app features. Do Not Track signals do not change these practices.
7. Data Retention
- Analytics. Page-view records are kept for up to 90 days. Daily aggregate reports may be kept longer for trends and service health.
- Email records. Verification and recovery links expire automatically. Consumed tokens are removed after 30 days, and completed notification and provider-webhook records after 90 days. Unsubscribe tokens remain while the account exists. Hashed bounce or complaint suppression markers may be kept to honor do-not-contact choices.
- Assistant connections. Connections last until disconnected. Disconnecting stops access immediately but leaves a record of the connection.
- Browser data. Clearing site data removes only that browser's writing and settings. Cloud copies remain available for download after sign-in. Persistent storage reduces automatic eviction, not deliberate clearing.
- Project deletion. Delete a synced Project while online to remove its cloud copy. Other devices remove their copies when they next sync. You can clear an offline device's local data separately. Deletion markers and commit records may remain for the account's lifetime to prevent stale clients restoring deleted work.
- Subscriptions. Canceling or pausing does not delete the account or content. Pausing stops billing and hosted features until resumed, while existing cloud content remains readable, downloadable, and deletable. With a Local license, editing and every export keep working; without one, Studio offers DOCX and Markdown downloads until you resume. Pausing itself schedules no deletion, but inactive accounts are not guaranteed indefinite storage.
- Account deletion. Separately confirmed permanent deletion cancels billing, removes cloud Projects and account records, and clears the current browser's site data. Deleted cloud content cannot be recovered normally. Isolated provider disaster-recovery copies may remain until overwritten. Minimal deletion markers prevent stale clients recreating content. Legally required transaction records may remain.
- Inactivity. We may publish an extended-inactivity cleanup schedule. When reasonably feasible, we give advance notice and an opportunity to sign in or export. Applicable law and security or operational needs may affect removal.
- Authentication. Sessions expire after 2 days of inactivity. Google sign-in state expires after 15 minutes. Rate-limit windows last 10 minutes, with expired entries removed during cleanup.
- Transactions. Billing records are generally kept for seven years, or longer for legal obligations, audits, disputes, claims, or fraud investigations. Records no longer needed are deleted or de-identified. Stripe follows its own retention requirements.
- Support. Messages and files are kept only as needed to resolve requests, protect the service, address disputes, or meet legal obligations.
8. Your Rights And Choices
Use the app to access, correct, export, or delete your writing. Account controls manage billing and permanent deletion. Anonymous users can clear their local workspace from Settings. Export important work first.
If you cannot access your account or need to exercise an additional right under applicable law, contact support@mackleystudios.com.
9. International Privacy Information
We operate from the United States. Cloudflare's global network may process information in the United States or elsewhere. Request-processing locations may differ from account and Project storage locations.
We follow applicable privacy laws and require providers to protect information processed internationally.
Where EEA or UK law applies, we process information to provide and secure the service, meet legal obligations, or fulfill purposes you consent to. You may withdraw consent and contact your local data protection authority.
10. Security
We hash passwords and protect sessions with HTTP-only cookies and CSRF checks. Requests and payment redirects are validated. No service can eliminate every security risk. Protect your password, devices, and browser profiles.
Cloud Manuscript content travels over TLS and is encrypted at rest with AES-256. Cloudflare holds the keys, so this is not end-to-end encryption. We and Cloudflare can technically access content.
Automated processing supports features such as sync and publishing. Mackley Studios personnel read Manuscript content only when you request help with it or law requires access.
11. Children's Privacy
Tabularia is not intended for children under 13. We do not knowingly collect their personal information. If we discover it, we disable the account and promptly delete the information unless law requires retention.
12. Changes To This Policy
Updates carry a revised effective date. We give reasonable notice before material changes take effect. Where consent is required, we request it separately rather than treating continued use as consent.
13. Contact
Contact Mackley Studios at support@mackleystudios.com.