Data privacy, security, terms and data retention

Is Tabby safe to use?

Yes. Tabby encrypts your data in transit with TLS 1.3 and at rest with AES-256, hosts it on AWS in US regions, and connects to banks through Plaid with read-only access. Tabby never stores your bank login.

Does Tabby store my bank password?

No. You sign in to your bank inside Plaid's window. Plaid handles your credentials and gives Tabby a read-only token for transaction data.

Is Plaid secure?

Plaid is used by thousands of financial apps and is SOC 2 Type II audited. It encrypts data and gives apps like Tabby read-only access you can revoke at any time.

Is Tabby SOC 2 certified?

[Confirm] Tabby's bank connections run through Plaid, which is SOC 2 Type II audited, and Tabby hosts on AWS. Don't state a Tabby SOC 2 certification until the audit report is in hand.

Where is my data stored?

On Amazon Web Services (AWS) servers in the United States.

Does Tabby support multi-factor authentication?

Yes. Turn on multi-factor authentication in your account settings to require a second code at sign-in. [Confirm] the methods available today (email, authenticator app or SMS).

Who can see my data?

Only you and the people you invite. Each user gets a role (Admin, Bookkeeper, Accountant or a custom role) that limits what they can see and change. Sessions sign out after 30 minutes of inactivity.

Does Tabby sell my data?

No. Tabby doesn't sell your data for money. The website does use advertising cookies for cross-context behavioral advertising, which California law calls "sharing", and you can opt out of it.

Does Tabby use my data to train AI?

Tabby's privacy policy allows it to use data with identifying details removed, or combined with other users' data, to improve its AI features. [Confirm] the exact wording with the current privacy policy.

Which third parties process my data?

Tabby uses service providers to run the product, including Plaid (bank connections), Stripe (payments), AWS and Google Cloud (hosting), Crisp and Intercom (support chat), and Twilio (messaging). The full list is in the privacy policy.

Does Tabby comply with GDPR and CCPA?

Tabby honors the privacy rights in the GDPR and CCPA, including access, correction, deletion and export of your data. Send requests to info@usetabby.com. Tabby replies within 30 days, or 45 days for complex or CCPA requests.

Is Tabby HIPAA compliant?

No. Tabby is bookkeeping software and isn't built to store protected health information. Keep patient details out of transaction notes and attachments.

Who owns my data?

You do. Tabby's terms state that you own your data, and you can export it at any time.

Can I export all my data?

Yes. Export transactions to CSV, and reports to PDF, CSV or Excel. You can also export your chart of accounts, classes, customers, vendors and products.

How long does Tabby keep my data?

Financial records are kept for at least 7 years, in line with US record-keeping rules. After you delete your account, account data can be recovered for up to 90 days, then it's removed. Backups are cleared within 30 days. [Confirm] the deletion timeline, since the retention policy gives both 24 hours and 90 days.

Does Tabby back up my data?

Yes. Tabby takes daily backups, and data you delete can be recovered for 90 days.

Does Tabby run security tests?

Tabby has an annual penetration test and commits to notify affected users of a data breach within 24 hours of confirming it. Report a vulnerability to info@usetabby.com.

Does Tabby give tax or legal advice?

No. Tabby's terms state that it doesn't provide legal, tax, accounting or financial advice. For advice on your situation, talk to a CPA or tax professional.

Do plans renew automatically?

Yes. Monthly and yearly plans renew automatically until you cancel. If a payment fails, the account is suspended after 7 days and can be terminated after 14 days.

How old do I need to be to use Tabby?

You must be at least 18.

Where can I read the legal documents?

The Terms of Service, Privacy Policy, Data Retention Policy, Refund Policy and Security page are linked in the footer of https://www.usetabby.com. Privacy questions go to info@usetabby.com.

Updated on: 10/10/2026