Your money and your data, kept safe

Your money never touches tab

Clients pay into your own Stripe account and Stripe pays out to your bank. tab never holds, moves or touches your money; its fee is taken by Stripe at the moment of payment.

Card and bank details go to Stripe

Your clients type card and bank details on Stripe's secure payment page. tab never sees or stores them. Stripe is certified to PCI DSS Level 1, the highest level for payment companies.

Only you can see your work

Each account is walled off inside the database itself, not just in the app, so one account can never read another's clients, hours or invoices.

Encrypted on the way and at rest

Everything travels over HTTPS. Your data is stored with Supabase in the United States, encrypted at rest.

No passwords to steal

Sign in with a one-time email link or code, a passkey, Google or Apple. tab never stores a password.

Yours to take or delete

Export everything as CSV at any time. Delete your account and all of its data yourself, in Settings, straight away.

No spying, no ads, no selling

No screenshots, keystroke logging or activity scores of you or your clients. tab never sells your data or shows you ads.

A real person behind it

tab is made by Brady UX, a design studio in Maryland, USA. Questions about security or your data: hello@tabwork.app.

The details

Payments run on Stripe Connect: each freelancer connects their own Stripe account, and tab creates payments directly on it. Your sign-in, data and files are hosted by Supabase; the website and app by Netlify; emails are delivered by Resend. Full list and what each one handles: Privacy.

Found a security problem? Please write to hello@tabwork.app and we’ll reply within a day.