Legal
Privacy policy
Last updated: October 7, 2026
This is a courtesy translation. The Italian version is the legally binding one. Read the Italian version.
Data controller
The data controller for the data collected through this website is [RAGIONE SOCIALE], VAT no. [P.IVA], with registered office at [INDIRIZZO]. For any request about your data, you can write to info@tabilo.it.
What data we collect and why
We only collect the data you give us directly, when you interact with the site:
- Contact form (name, company, email, phone, message): to reply to the request you sent us.
- Call booking (name, email, optional phone, notes): to confirm your appointment and get back to you if needed.
- Project kickoff questionnaire, if you are already a customer and received the dedicated link: information about your business needed to set up the work.
- Client portal and payments, if you are already a customer: project status and budget items related to your work. Payments (one-time or subscription) are handled entirely by Stripe — we never see or store your card details.
The legal basis is the performance of pre-contractual or contractual measures (replying to a request, managing an ongoing project) or our legitimate interest in replying to people who contact us.
How long we keep data
Contact and booking data are kept for as long as needed to handle the request and, if a working relationship follows, for the duration of the project and for any subsequent legal obligations (e.g., tax and accounting). You can request erasure at any time, except where the law requires us to retain the data.
Who we share data with
Some technical providers process data on our behalf, as data processors:
- Supabase (database and authentication, infrastructure in the European Union) — privacy policy.
- Vercel (website hosting) — privacy policy.
- Stripe (payment processing, only for customers who activate a plan) — privacy policy.
- OpenAI (transcription of voice dictation in the client area, servers in the United States): audio is sent only when you use the “Detta” (Dictate) button, is used solely to obtain the text, and we do not store it. OpenAI does not use data sent through its API to train its models and may retain it for up to 30 days for security purposes — privacy policy.
- Anthropic (automatic task titles in the client area, servers in the United States): when you create a task without a title, the description is sent to Anthropic only to generate the title; we store nothing beyond the title and the description in the task. Anthropic does not use data sent through its API to train its models — privacy policy.
- Telegram: we use a Telegram bot to receive internal notifications of new requests, bookings, and payments. The notification text passes through Telegram’s servers (located outside the European Union) only to deliver the alert to us.
We do not sell or transfer your data to third parties for marketing purposes.
Your rights
At any time you can ask us to access, rectify, or erase your data, restrict its processing, object to its processing, or request data portability, by writing to info@tabilo.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Cookies
For details on the cookies used by the site, see the Cookie policy.
Changes to this policy
We may update this policy over time; the date at the top shows the latest revision. If we make material changes, we will point them out clearly on the site.