Privacy Policy

Overview

This policy explains what information MSAI Space collects when you use our website and our products (currently MouseShortcuts and TabNap). We try to keep data collection to the minimum necessary to operate the products you're using.

Account Data (TabNap)

If you sign up for TabNap, we create an account on our authentication provider, Supabase. The following data is collected and stored:

• Email address
• A securely hashed password (we never see or store your plain-text password)
• If you sign in with Google, your basic Google profile information (email, name, profile picture) as provided by Google OAuth
• Account creation timestamp and last sign-in timestamp

This data is processed by Supabase on our behalf and stored in their managed Postgres database (region: ap-northeast-1). See Supabase's privacy policy.

Payment Data (TabNap)

If you start a TabNap free trial or subscribe, payments are processed by Razorpay. We do not see or store your card number, CVV, or full payment credentials — those are handled directly by Razorpay.

What we store on our side:

• A reference ID (Razorpay subscription ID) tying your account to your subscription
• Trial start and end dates
• Subscription status (trial pending / active / paid / failed)
• Charge timestamp once payment completes

Razorpay receives your card details, billing information, and any data required for KYC and payment processing under Indian regulation. See Razorpay's privacy policy.

Website

The msai.space marketing website itself does not currently load analytics, advertising, or behavioural-tracking scripts. Standard server access logs (IP address, timestamp, requested URL, user agent) may be retained by our hosting provider for routine operational and security purposes.

Cookies and Local Storage

The TabNap signup page uses browser sessionStorage and standard authentication cookies set by Supabase to keep you signed in across page loads. We do not use third-party advertising or tracking cookies.

What We Do NOT Do

• We do not sell your personal data to third parties.
• We do not share your data with advertising networks.
• We do not access camera, microphone, or device location.
• We do not read or transmit the contents of your browser tabs (TabNap operates entirely on-device for tab management).

Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you
• Request correction or deletion of your account and associated data
• Withdraw consent and stop using the service at any time

These rights are recognized under frameworks such as the GDPR (EU/UK), CCPA (California), and India's DPDP Act. To exercise any of them, email mouseshortcuts@gmail.com from the address associated with your account. We will respond within 30 days.

When you delete your account, we delete your row from the Supabase auth tables and the associated TabNap subscription record. Razorpay retains payment records for the duration required by Indian financial regulation; deletion requests for payment data must be addressed to Razorpay directly.

Data Security

Connections to our website and APIs are encrypted with TLS. Passwords are stored as bcrypt hashes by Supabase. Payment authorisation uses HMAC-SHA256 signature verification on every transaction. Database access is restricted by row-level security so that one user cannot read another user's data.

Subprocessors

We use the following third-party services that may process your data on our behalf:

• Supabase — authentication and database hosting
• Razorpay — payment processing
• Google — OAuth sign-in (only if you choose "Continue with Google")

Children

Our products are not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has signed up, contact us and we will delete the account.

Changes to This Policy

If we make material changes to this policy we will update the effective date above and, where appropriate, notify you in-product. Continued use of our products after a change constitutes acceptance of the revised policy.