Privacy Policy
Effective August 16, 2026
Right Design Studio LLC ("Right Design Studio," "we," "us," or "our") operates Tablation, a structured data platform available at tablation.com and app.tablation.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to everyone who visits our marketing site, signs up for an account, or interacts with a workspace's published forms or views.
If you have questions about this policy, contact us at [email protected].
Information we collect
We collect information in three ways: what you give us directly, what we collect automatically, and what we receive from Google if you choose to connect a Google account.
- Account information. Name, email address, password (stored as a salted hash — we never see or store your plaintext password), and an optional profile photo.
- Workspace content. The tables, records, views, forms, and files you or your team create and store in Tablation ("Customer Content"). This can include whatever your organization chooses to put into it, which may include personal data about your own customers, employees, or contacts — that data belongs to you, not to us; see "Customer Content" below.
- Public form submissions. If someone fills out a form your workspace has published publicly, we collect whatever that form asks for, plus a short-lived session identifier used to let them return to or edit their own submission where the workspace has enabled that.
- Usage and log data. IP address, browser and device information, timestamps, and the pages or API endpoints requested, collected automatically for security, debugging, and abuse prevention.
- Cookies. A session cookie that keeps you signed in, and, for public form respondents, a separate session cookie scoped to that public form. We do not use third-party advertising or tracking cookies.
Information from Google
If you choose to sign in with Google, we receive your name, email address, and profile picture from your Google account, solely to create and authenticate your Tablation account.
If you choose to connect Google Sheets, Tablation requests Google's drive.file scope. This means Tablation can only see and access the specific spreadsheet files you explicitly select or create through Tablation's own file picker — never your full Google Drive, and never files you haven't chosen to share with us. You can disconnect this access at any time from your Tablation account settings or directly from your Google Account permissions page.
Tablation's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use data obtained through Google APIs to serve advertisements, and we do not sell that data or transfer it to third parties except as necessary to provide the Sheets integration you've requested, to comply with the law, or as part of a merger or acquisition of our business (in which case we'll tell you first).
How we use information
- To operate, maintain, and secure the Service — including authenticating you, rendering your workspace's data, running the automations you configure, and sending transactional email such as workspace invitations or the notifications your workflows trigger (sent through our email provider, Resend).
- To sync data with Google Sheets, but only for the specific spreadsheet files you've connected, and only to perform the sync you've configured.
- To respond to support requests and communicate with you about your account.
- To diagnose problems, prevent abuse, and improve the reliability of the Service.
We do not use your Customer Content or your Google data to train machine learning models, and we do not sell your personal information.
Who we share information with
We share information only as described here — we don't sell it, and we don't share it for third-party advertising.
- Within your workspace. Tablation is a collaboration tool. Data you add to a workspace is visible to other members of that workspace according to the permissions your workspace administrator configures.
- Service providers. We use a small number of vendors to run the Service: Linode (application hosting, database, and file storage), Resend (transactional email delivery), and Google (sign-in and, if you connect it, Sheets sync). Each only receives the data it needs to perform its function for us, and each is contractually restricted from using it for their own purposes.
- Legal reasons. We may disclose information if required by law, subpoena, or other legal process, or if we believe in good faith it's necessary to protect the rights, property, or safety of Right Design Studio, our users, or the public.
- Business transfers. If Right Design Studio is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We'll notify you before your information becomes subject to a different privacy policy.
Data retention and deletion
We retain your account and workspace data for as long as your account is active. Tablation is currently in beta and does not yet have self-serve account or workspace deletion in the product — to request deletion of your account, a workspace, or any personal data we hold about you, email [email protected]. We'll verify the request and complete it within 30 days, except where we're required to retain certain records by law.
Disconnecting Google Sheets access (either in Tablation or from your Google Account) immediately stops any further access to your Sheets data; it does not automatically delete data already synced into your Tablation workspace, which is deleted the same way as any other workspace data, per the paragraph above.
Security
We use industry-standard measures to protect your information, including encryption in transit (TLS) for all traffic to the Service, salted password hashing, and access controls limiting who can reach production systems. No method of transmission or storage is perfectly secure, and we can't guarantee absolute security.
Children's privacy
Tablation is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we'll delete it.
International users
Tablation is operated from the United States, and information we collect is processed and stored in the United States. If you use the Service from outside the United States, you understand your information will be transferred to and processed in the United States.
Your choices
You can access and update your account information at any time from within the Service. You can request a copy of the personal data we hold about you, request its correction, or request deletion, by emailing [email protected]. We'll respond to verified requests within 30 days.
Changes to this policy
We may update this policy as the Service changes. If we make material changes, we'll update the effective date above and, where appropriate, notify account holders by email.
Contact us
Right Design Studio LLC
[email protected]