Terms of Service

Last updated: 16 October 2026

1. About Tabor8

Tabor8 ("Tabor8", "we", "us") is a footage sorting and sharing service operated by Tabor8 Limited (Hamilton, New Zealand). By creating an account or uploading footage you agree to these terms.

Tabor8 processes uploaded video files by detecting faces and matching them within your footage, producing per-person clip folders for download by the account holder.

A project can also hold your files as they were uploaded, to keep and share, with no scan run on them (a "library project"). In a library project, faces are matched only in the files you select and scan, and the files themselves are never changed.

Tabor8 sorts still photos by person in the same way. In these terms, "footage" includes photos you upload, unless a section says otherwise.

2. Biometric Processing

Tabor8's core function involves biometric processing as defined by the New Zealand Biometric Processing Privacy Code 2025 and equivalent frameworks in other jurisdictions. By using the service you acknowledge and agree to the following:

• Tabor8 extracts face templates (numeric vectors derived from facial features, which are biometric information) from the faces it detects in uploaded footage.
• These templates are used for one thing: grouping the people in your footage into per-person clip folders. That includes merging duplicate folders of the same person within a project, and across projects when you choose to merge them. You can merge projects you own and projects another account holder has given you access to (section 3.8).
• Templates are stored with the project they came from. Tabor8 stores them on your behalf, as your data processor, and does not use them for its own purposes.
• Templates are deleted when you delete the person folder they belong to, and all templates for a project are deleted when you delete the project.
• Photos are the exception to the two points above. Templates made from photos exist only in memory while the photos are being sorted and are discarded when sorting ends. They are never stored, so photos take no part in merging across projects, and photos and video are never compared with each other.
• Tabor8 does not use templates to work out who anyone is. Folders are numbered, not named, unless you label them yourself. Templates are never sold, and are not disclosed to anyone other than the service providers that store and process data for us.
• Tabor8 provides a standing biometric processing notice at tabor8.com/legal/privacy. Where footage is accessed via Tabor8's API, each clip response includes a notice_url field linking to this notice for the benefit of individuals appearing in the footage.

3. Your Responsibilities

3.1 Right to submit footage

You must have the legal right to upload footage for processing. This means either you own the footage or have been authorised by the owner to process it using a biometric service.

3.2 Notice to individuals appearing in footage

You are the data controller for footage you upload. Tabor8 is the data processor acting on your instructions. As data controller, you are responsible for ensuring appropriate notice is given to individuals who appear in footage you submit. Tabor8 assists with this obligation by:

• Providing a standing public Privacy & Biometrics Notice at tabor8.com/legal/privacy that you may direct individuals to, covering delivery-time notification under Rule 3 of the NZ Code.
• Including a notice_url field in API clip responses that links to this notice.

For pre-event or at-event notice (beyond delivery-time notice), you may use printed or digital signage displayed at the venue informing attendees that the footage will be sorted by matching faces. This is a convenience measure and is not a condition of use.

3.3 Footage involving minors

You must not upload footage that focuses on or is primarily comprised of individuals under 16 years of age without appropriate parental or guardian consent for biometric processing.

3.4 Compliance warranty

By uploading footage for processing, you represent and warrant that you have obtained all consents, notifications, and permissions required by applicable biometric privacy laws in your jurisdiction from individuals appearing in that footage, and that your use of Tabor8 to process such footage is lawful.

3.5 Account security

You are responsible for all activity under your account. Notify us immediately at privacy@tabor8.com if you believe your account has been compromised.

3.6 Eligibility and account holders under 18

You must be at least 16 years old to create an account. We do not knowingly allow anyone under 16 to hold an account, and we will close any such account we become aware of.

If you are 16 or 17, your parent or legal guardian must have read and agreed to these terms and to the Privacy & Biometrics Notice, and must consent to your use of Tabor8. A parent or legal guardian must be the person who pays for any paid plan and is responsible for all charges. By creating an account you confirm that you are 18 or older, or that you are 16 or 17 and have this consent.

3.7 Shared links

A project, or part of one, can be shared with a link. The link is a key: anyone who has it can open it, with no account, until it expires or you switch it off. There are two kinds of link:

• a link to a sorted project shows its clips and photos grouped by person;
• a link to files as uploaded shows one file, one folder, a whole library project, or a share folder, as the files were uploaded, originals included. A share folder collects files from any of your projects behind one link.

A share folder can also hold clips and photos that a scan sorted, picked for one person in the delivery suite. Its link shows the files you picked and nothing else from the project: no person folders and no face data.

If you send a link, you are responsible for who you send it to and for anyone they pass it on to. By creating a link you confirm that you have the right to share the footage it covers, from every project it draws on, with the people you send it to, including any consent or notice required under sections 3.1 to 3.4. You can switch a link off or replace it at any time, and anything already downloaded through it stays with the person who downloaded it.

If you open a link, you must tick the box on the page before any footage is shown. By ticking it you agree to these terms and acknowledge the Privacy & Biometrics Notice, whether or not you hold a Tabor8 account, and you confirm that you are 18 or older, or that you are 16 or 17 and your parent or legal guardian has agreed to these terms. Sections 4, 7, 9 and 11 apply to you in the same way they apply to an account holder. The footage belongs to the person who shared it or to their client: you may view and download it for the purpose it was shared with you, and nothing in these terms gives you any other right to it.

No account is created when a link is opened this way. For a link to a sorted project, we record that the box was ticked and what is downloaded through the link. For a link to files as uploaded, your browser remembers that you ticked the box, and we count visits and downloads by a scrambled form of your internet address, kept for 30 days. Both are described in the Privacy & Biometrics Notice. Because no sign-in is involved, we cannot confirm the identity or the age of the person who ticked the box.

Links expire 7 days after they are created or last extended. The person who shared the project can extend a link or issue a new one. We may limit how much can be downloaded through one link in a given period, and may switch off a link that is being misused.

3.8 Merging projects

Merging puts the people, clips and photos of one or more projects into another. The projects merged in are removed from your dashboard, and their footage stays inside the project they were merged into. A merge cannot be undone.

You can merge any projects you can open, including a project another account holder has shared with you as a collaborator. When projects owned by different accounts are merged:

• the face templates of those projects are compared with each other, to join the same person across them;
• the merged project belongs to the owner of the project the others were merged into;
• the owner and collaborators of each merged-in project keep access to the merged project, as collaborators;
• shared links on the merged-in projects stop working.

By giving someone collaborator access to a project, you accept that they can merge it in this way. After a merge, only the owner of the merged project can invite or remove collaborators. Anyone who has access to it, owner or collaborator, can delete people, clips, photos or the whole project, including footage someone else uploaded.

4. Prohibited Uses

You must not use Tabor8 for any of the following:

• Real-time facial surveillance of any kind
• Law enforcement, watchlist, or access-control applications
• Building commercial identity databases from processed footage
• Targeting, tracking, or profiling individuals based on their appearance or identity
• Processing footage where subjects are primarily located in Illinois (US), Texas (US), or Washington (US) without implementing the explicit prior-consent flow required by applicable biometric statutes in those states
• Processing footage of individuals located in the European Union or United Kingdom without a compliant GDPR Article 9 consent mechanism in place
• Using Tabor8 outputs to infer or assess the emotional state, intent, mental health, or psychological characteristics of any individual
• Categorising or profiling individuals based on protected characteristics including race, ethnicity, religion, or political affiliation, whether from Tabor8 outputs or from data derived from processed footage
• Any use that violates applicable law in your jurisdiction

5. Data Handling

The following summarises how Tabor8 handles data associated with your account:

• Uploaded video files - in a project that is scanned as a whole, held only until the scan finishes: the uploaded files are then deleted from our storage and only the clips cut from them are kept. In a library project, the uploaded files are kept as uploaded, scanned or not, together with smaller copies made for viewing, until you delete them or the project. Either way, Tabor8 is not a backup of your original files, so keep your own copy.
• Uploaded photos - the original files are kept with the project, together with smaller copies made for viewing, until you delete the project. An original file keeps whatever the camera recorded in it, which can include the date and time, the camera model and the location.
• Face templates - for video, stored with the project and deleted when you delete the person folder or the project. For photos, never stored.
• Clip files - stored in your account until you delete the project.
• Processing logs - retained for 12 months on a rolling basis for security, billing, and audit purposes.
• Account data - retained until account deletion. Contact us to delete your account.

When you delete a project, its clip outputs, its photos, its face templates and any uploaded video files it still holds are permanently removed from storage. Account deletion removes your account data within 30 days. Backup copies of deleted data may be retained for up to 30 days for disaster recovery purposes.

Full details on biometric data handling, individual rights, and complaint processes are in our Privacy & Biometrics Notice.

6. Regional Restrictions

Tabor8 accounts are currently available in New Zealand only, for the duration of the beta. Outside New Zealand, the product itself (the dashboard, uploading and scanning footage) shows a region restriction page, so footage cannot be uploaded from there, regardless of whether that jurisdiction has biometric-specific law. Shared links are the exception: a link can be opened from any country (section 3.7), and no new face matching is run for the person opening it. Tabor8 operates on a notice-based compliance model under the NZ Biometric Processing Privacy Code 2025 - a model we have not yet extended to other jurisdictions, which is why the beta is scoped to New Zealand.

The jurisdictions below are kept here as the research record for future expansion, not as a description of where Tabor8 currently operates:

European Union / UK (not currently served): GDPR Article 9 requires explicit consent from biometric data subjects before processing, and our current service does not meet that requirement.

Illinois, Texas, Washington (US) (not currently served): These states have biometric-specific statutes (Illinois BIPA, Texas CUBI, Washington My Health My Data Act) requiring prior written consent from biometric data subjects.

Australia (not currently served): Australia's Privacy Act classifies biometric data as sensitive information. If and when Tabor8 expands to Australia, additional obligations may apply to you as data controller for footage subjects.

7. Intellectual Property

You retain ownership of footage you upload. Tabor8 does not claim any rights over your uploaded video content or clip outputs. You grant Tabor8 a limited licence to process your footage solely for the purpose of providing the service.

Tabor8's software, brand, and documentation are owned by Tabor8 and may not be copied or reproduced without permission.

To submit a copyright takedown notice under the Digital Millennium Copyright Act (DMCA), email privacy@tabor8.com with "DMCA" in the subject line. A valid notice must include: (a) identification of the copyrighted work claimed to be infringed; (b) identification of the material to be removed and information sufficient to locate it on the service; (c) your contact information; (d) a statement that you have a good faith belief the use is not authorised by the rights holder; (e) a statement that the information in the notice is accurate and, under penalty of perjury, that you are authorised to act on behalf of the rights holder; and (f) your physical or electronic signature.

If you believe material was removed in error, you may submit a counter-notice to privacy@tabor8.com including: (a) identification of the removed material and its prior location on the service; (b) a statement under penalty of perjury that the removal was a mistake or misidentification; (c) your contact information and consent to the jurisdiction of your federal district court; and (d) your signature. We will forward valid counter-notices to the original complainant and may restore the material after 10–14 business days unless we receive notice of a court action.

Tabor8 will terminate the accounts of users found to repeatedly infringe copyright.

8. Fees and Billing

Paid plans are billed monthly in advance. All prices are in USD and are shown on our billing page.

• Tools and bundles: Tabor8 is three tools: Deliver (sending files with a link), Stills (sorting photos by face) and Cuts (clips of each person from video). Each has a free tier, with the limits shown on the billing page, and can be upgraded on its own. Studio and Studio Pro include all three. Each paid tool or bundle is a separate monthly subscription, renewed and cancelled on its own. When a free limit is reached for the month, the files that do not fit stay in your project, unscanned; nothing is deleted.

• Automatic renewal: Paid plans renew automatically each month at the price shown on the billing page, and your payment method is charged again on each renewal date, until you cancel. You can cancel at any time online from your billing page, without contacting us. You will receive an email confirming your subscription and how to cancel.

• Payment: By subscribing you authorise Tabor8 to charge your payment method on a recurring monthly basis. You must keep your billing information current.

• Failed payment: If a payment fails, Stripe will retry over 7 days. If payment is not recovered within that period, your account is downgraded to the free tier. Your projects and footage are retained. You may re-subscribe at any time.

• Cancellation: You may cancel at any time from your billing page. Cancellation stops future billing; your plan remains active until the end of the current paid period. We do not provide refunds for unused time in a billing period.

• Upgrades and downgrades: Upgrading your plan takes effect immediately; the difference is charged on a pro-rata basis. Downgrading takes effect at the start of your next billing cycle.

• Price changes: We will give at least 14 days' notice of price changes by email. Changes apply from your next billing cycle.

• Scan credits: If a scan fails due to a fault on our part, the footage minutes consumed are returned to your monthly allowance.

• Non-refundable: Except as stated above and where required by applicable law, all payments are non-refundable.

• Business purchases: If you are acquiring Tabor8 in trade, you agree that the Consumer Guarantees Act 1993 does not apply to your purchase.

• GST: Prices shown are exclusive of GST. Where GST applies to your purchase, it will be added at checkout and shown on your invoice.

9. Limitation of Liability

Tabor8 provides the service on an "as is and as available" basis. Tabor8 makes no warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, or non-infringement. To the maximum extent permitted by law:

• Tabor8 is not liable for your failure to obtain appropriate consent or notice for footage you upload.
• Tabor8 is not liable for losses arising from processing errors, incorrect clustering, or missed faces.
• Tabor8 is not liable for any indirect, consequential, incidental, special, or punitive loss or damage, including loss of profits, revenue, data, or business opportunity.
• Tabor8's total liability to you for any claim will not exceed the greater of (a) the amount you paid for the service in the 12 months preceding the claim or (b) NZD $100.

Consumer rights (New Zealand): If you are a consumer within the meaning of the Consumer Guarantees Act 1993, nothing in these terms limits or excludes guarantees, rights, or remedies that you have under that Act or the Fair Trading Act 1986 that cannot lawfully be limited or excluded.

Your indemnity: You agree to indemnify and hold harmless Tabor8 from any claim, demand, loss, or expense (including legal fees) arising from (a) your breach of these terms, (b) your failure to obtain required consent or notice for footage you upload, or (c) any third-party claim relating to footage you submitted, including claims under biometric privacy statutes.

Nothing in these terms limits liability for fraud, gross negligence, or any liability that cannot be excluded under New Zealand law.

10. Changes to These Terms

We may update these terms from time to time. We will provide at least 14 days' notice of material changes by email or by a notice on our website. Continued use of Tabor8 after the effective date of updated terms constitutes acceptance.

11. Governing Law

These terms are governed by the laws of New Zealand. Disputes are subject to the exclusive jurisdiction of the courts of New Zealand.

12. Account Termination

By you: You can ask us to delete your account at any time by emailing privacy@tabor8.com. See Section 5 for what happens to your data on deletion.

By us: We may suspend or terminate your account if you breach these terms - including the Prohibited Uses in Section 4, a failure to meet your responsibilities under Section 3, or repeated copyright infringement (Section 7) - or if payment fails and is not recovered within the period described in Section 8. Where practical, we will give notice and an opportunity to resolve the issue before terminating for breach; we may terminate immediately for prohibited uses involving surveillance, law enforcement applications, or unlawful processing of biometric data.

What happens on termination, by us or by you:

• Access to your account is revoked immediately.
• Your clip outputs, your photos, and any uploaded video files your projects still hold, are permanently removed from storage within 30 days, consistent with the deletion timeline in Section 5. Backup copies may be retained for up to 30 days beyond that for disaster recovery.
• Face templates are stored with your projects and are removed with them, on the same timeline as your clip outputs.
• Processing logs already collected are retained for the remainder of the 12-month rolling window described in Section 5, for security and audit purposes, then deleted on the same schedule as any other account's logs.
• Billing records are retained for 7 years as required by NZ Inland Revenue, regardless of termination.
• Amounts already paid are non-refundable, consistent with Section 8, except where required by applicable law.

Termination does not affect the rights of individuals who appear in footage you processed - see the Privacy & Biometrics Notice for how they can make a request independent of your account status.

13. Contact

For questions about these terms or the service: privacy@tabor8.com