Privacy Policy

This policy explains what personal data CabiPlan handles, why, and the choices you have. It covers our website, the company dashboard and the kitchen planner we host for cabinet companies.

Two kinds of data

• Company account data - about the businesses that use CabiPlan and their team members. For this data CabiPlan decides how it's used (we are the controller).
• Planner data - what a company's customers enter in that company's planner. This belongs to the company; CabiPlan stores and processes it only on the company's behalf and instructions (we are the processor). If you used a company's planner, that company is responsible for your data - please contact them first.

What we collect

For company accounts:

• name, work email and company name; your password, which is stored only as a one-way hash;
• your catalog, prices, photos, 3D models, logo and settings;
• billing details: plan, invoices and a Stripe customer reference - card numbers are held by Stripe, never by us;
• notification settings you add, such as emails, phone numbers and Telegram chats;
• “Book a demo” requests from our website: name, email, company, website and message.

In a company's planner:

• the kitchen designs customers make;
• what they enter in the Save Project and Designer Assistance forms: name, email, phone (if given), company, role, project details and message;
• orders created with “Add to Cart”: the items, quantities and prices.

Technical data: IP addresses are used briefly to stop spam and password guessing (they're stored only as one-way hashes, for a short time). Our servers and error reports record technical details such as browser type and the page where an error happened.

Why we use it

• to run the planner and dashboard and deliver orders, leads and requests to the right company;
• to send the notifications a company set up (email, Telegram, SMS or WhatsApp) and messages about its account;
• to bill for plans and send receipts;
• to keep the service secure, prevent abuse and fix errors;
• to answer demo requests and support questions.

We don't sell personal data, and we don't use planner data for advertising or share it with other companies on CabiPlan.

Cookies and storage

The dashboard uses one essential cookie to keep you signed in. The planner saves a few preferences in your browser (for example your last design and measurement units). We don't use advertising or tracking cookies.

Who helps us run the service

We use these service providers, each only for its part of the service:

• Vercel - hosting of the website, dashboard and planner;
• Neon - the database;
• Cloudflare R2 - storage of uploaded files (photos, 3D models, logos);
• Stripe - payments and invoices;
• Resend - email notifications;
• Telegram and Twilio - Telegram, SMS and WhatsApp notifications, when a company turns them on;
• Sentry - error reports.

Some of these providers process data in the United States or other countries. Where the law requires, transfers are covered by safeguards such as standard contractual clauses.

How long we keep it

Company data is kept while the account exists. When a company asks us to close its account, we delete its data, including its planner data, within 30 days, except records we must keep by law (such as invoices). Backups roll over within a few weeks. Companies can delete individual designs, leads and requests themselves or ask us to.

Security

Data is encrypted in transit; each company's data is kept apart with database-level access rules; passwords are hashed; access is limited to people who need it. No system is perfectly secure, but we take care and will tell affected companies promptly if a breach happens.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it's used. Company users can do most of this in the dashboard or by writing to support@cabiplan.com. If your data was entered in a company's planner, ask that company - we'll help them respond. You can also complain to your local data protection authority.

Children

CabiPlan is a business service and isn't meant for children under 16.

Changes

If we change this policy in a meaningful way, we'll update the date above and tell account owners by email.

Contact

Privacy questions and requests: support@cabiplan.com.
CabiPlan, 815 Sandy Ln, Warwick, RI 02889