Privacy Notice

Last updated: 5/29/2026

1. Who we are

This Privacy Notice applies to the Subloka service ("Subloka", "we", "us", "our"), operated by Tabsoffice. Tabsoffice is the data controller for the personal data described below.

2. Personal data we collect

• Account data — email address, display name, password hash (via our auth provider), and optional avatar.
• Service data — the subscriptions you track in Subloka (service name, billing amount, cycle, renewal dates, notes).
• Support and communications — messages you send us and our replies.
• Usage and device data — IP address, browser type, pages viewed, timestamps, error and performance telemetry.
• Cookies and similar technologies — see "Cookies" below.

Payment-card details are collected directly by Paddle (our Merchant of Record) and never reach our servers.

3. How we use your data and legal basis

• To provide the service (contract): authentication, storing your tracked subscriptions, generating AI insights, customer support.
• To process payments (contract): sharing necessary order data with Paddle to complete checkout, billing, renewals, and refunds.
• To secure the service (legitimate interests): fraud and abuse prevention, rate limiting, audit logs.
• To improve the product (legitimate interests): aggregated analytics and error monitoring.
• To send service messages (contract / legitimate interests): receipts, security alerts, important account notices.
• Marketing (consent): only with your opt-in, and you can withdraw at any time.
• Legal compliance (legal obligation): tax, accounting, and lawful requests from authorities.

4. Who we share data with

• Paddle.com Market Ltd — our Merchant of Record. Paddle handles checkout, subscription management, payments, tax compliance, invoicing, and refunds.
• Infrastructure and subprocessors — hosting, database, email delivery, analytics, error monitoring, and AI providers that power product features.
• Professional advisers — legal, accounting, and compliance advisers, under confidentiality.
• Authorities — where required by law, court order, or to protect rights, safety, and property.

We do not sell your personal data.

5. International transfers

Some of our subprocessors are located outside your country, including in the United States. Where data is transferred out of the UK or EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. Data retention

We keep personal data only as long as needed for the purposes described above. Account and subscription data is kept while your account is active and for a reasonable period afterwards to handle disputes and comply with legal, tax, and accounting obligations. We then delete or anonymise it.

7. Your rights

Depending on where you live, you may have rights to access, rectify, erase, restrict, or port your personal data, to object to processing, to withdraw consent, and to lodge a complaint with your local supervisory authority. UK/EEA users have these rights under UK GDPR / GDPR; we will respond within one month. To exercise any right, contact us at the address below.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, hashed credentials, and audit logging. No system is perfectly secure, but we work to keep the risk low.

9. Cookies

We use strictly necessary cookies to keep you signed in and to operate the service. We may also use analytics cookies to understand usage in aggregate. You can manage cookies through your browser; disabling essential cookies will break login.

10. Children

Subloka is not directed to children under 16, and we do not knowingly collect their personal data.

11. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be highlighted in-product or by email.

12. Contact

Questions or requests: contact Tabsoffice through the support channel inside Subloka. For payment-related inquiries (receipts, refunds, billing history), you can also reach Paddle at paddle.net.

See also our Terms & Conditions and Refund Policy.