Privacy Policy
What CabDesign collects, why we collect it, which companies help us process it, what happens to what you type into the AI Designer, and how to see, export or delete all of it.
This document is a working draft. It is not yet in force. Every clause marked [Owner to complete] needs a decision or a confirmation from the company's California attorney before this policy takes effect. The data practices described below are accurate to how CabDesign is actually built today.
The short version
A plain-words summary for orientation only. It is not the policy, and the full text below governs.
- We collect what we need to run your account and your projects, and nothing for advertising.
- Four companies process data for us: Supabase, Stripe, Anthropic and Vercel. That is the whole list.
- What you type into the AI Designer goes to Anthropic to generate a reply. It is not used to train models.
- There are no third-party analytics trackers, no advertising pixels and no data brokers involved.
- We never sell your personal information, and we never sell your customers' details.
- You can delete your account yourself, and we will tell you honestly how long backups take to age out.
1. Who we are, and what this policy covers
This policy covers cabdesign.app and everything you do on it.
CabDesign is a web-native cabinet and room design service operated by [Owner to complete: exact legal entity name and form, and its registered business address] ("we", "us", "CabDesign"), published by Bespoke Woodcraft Studio.
This policy explains how we handle personal information on cabdesign.app and in the CabDesign tools, including the AI Designer. It works alongside our Terms of Service.
Many CabDesign tools run without an account at all. If you use the site that way, the only data we hold about you is the ordinary web server log described in section 2.
2. What we collect
Your sign-in details, the design work you save, your billing record, what you type to the AI Designer, and standard server logs. That is all.
| Category | What is in it | Where it comes from |
|---|---|---|
| Account and identity | Your email address. If you set a password, we store only a salted hash of it, never the password itself, so nobody here can read it. If you sign in with Google, the basic profile Google returns (name, email, and profile picture reference). Sign-in timestamps and session records. | You, when you create an account, or Google when you choose Google sign-in. |
| Your design work | Projects, rooms, cabinets, dimensions, material and hardware selections, company standards, pricing rules, cut lists and saved outputs. | You, as you use the tools. |
| Your customers' records | Contact details and job notes you enter about your own customers. See section 5, which explains that we handle this on your behalf, not for our own purposes. | You, when you use the customer features. |
| Billing | Your subscription status, plan, renewal dates, and the identifiers Stripe gives us for your customer and subscription records. We do not receive or store your full card number. | Stripe, when you subscribe. |
| AI Designer conversations | The messages you send the assistant, the project context needed to answer them, and the replies you receive. See section 4. | You, when you use the AI Designer. |
| Technical and log data | IP address, browser and device type, pages requested, timestamps, and error diagnostics. These are the ordinary logs any web host produces. | Automatically, when your browser requests a page. |
| Support messages | Anything you send us by email, and our replies. | You, when you contact us. |
We do not ask for and do not want sensitive personal information such as government identifiers, health data, precise geolocation or biometric data. Please do not enter it into CabDesign.
3. Why we use it
To sign you in, save your work, take your payment, answer your chat, keep the service up, and follow the law.
- To run your account. Signing you in, keeping you signed in, syncing your work between your devices.
- To provide the tools. Storing and computing your designs, cut lists, materials and standards so the Service does what you asked.
- To bill you. Starting, renewing, changing and cancelling a paid plan, and keeping the record of your consent to a recurring charge that the law requires us to keep.
- To run the AI Designer. Sending your message and the necessary project context to our AI provider and returning the reply. See section 4.
- To keep the service working and secure. Diagnosing errors, preventing abuse, enforcing usage limits, and protecting accounts.
- To communicate with you. Service notices, billing notices, security notices, and replies to your support messages.
- To meet legal obligations. Tax and accounting records, and responding to lawful requests.
If you are in a region with a legal-basis requirement such as the European Economic Area or the United Kingdom, our bases are: performance of our contract with you (running your account and the tools), legitimate interests (security, abuse prevention, improving the Service), legal obligation (tax and accounting), and consent where we ask for it.
4. The AI Designer: what happens to what you type
Your chat goes to Anthropic to produce the answer. It is not used to train any model, and Anthropic deletes its own operational copy on a short rolling window.
When you use the AI Designer, your message and the project context needed to answer it are sent from our server to Anthropic's API, which generates the reply. The call is made server side, so your browser never talks to the AI provider directly and no AI provider key is exposed to you.
Under Anthropic's standard commercial API terms, which is how CabDesign uses the service:
- the content you send and the replies you receive are not used to train models;
- Anthropic's operational logs are deleted automatically on a short rolling window, currently around seven days; and
- Anthropic acts as our sub-processor under a data processing agreement that includes Standard Contractual Clauses for international transfers.
[Owner to confirm: re-check Anthropic's current commercial terms and the exact log retention window at the time this policy goes into force, since vendor terms drift]
We keep your conversation and any project facts it produced in your own workspace so the assistant has continuity between sessions. That copy is yours: you can delete it, and it goes when your account goes (see section 10).
Anthropic is the only AI provider that receives CabDesign customer data today. If we ever enable another one, we will name it in this policy before any customer data reaches it.
Please do not paste anything into the assistant that you would not want processed by a third-party AI provider, including other people's personal information you have no right to share.
5. Customer records you store in CabDesign
When you save your own customers' details in CabDesign, they are your records, not ours. You decide what goes in and why. We just hold them for you and do what you ask with them.
CabDesign lets a shop store contact records and job notes about its own customers. That information is personal information about people who are not our users, so it is worth being precise about who is responsible for what.
You are the controller. We are the processor. In plain words: you decide what customer information to collect, why you collect it, and how long to keep it. We only hold and process it on your instructions, so that the Service works for you. We do not use your customers' details for our own purposes, we do not market to them, and we do not sell or share them with anyone outside the sub-processors listed in section 6.
That means a few practical things:
- You are responsible for having a lawful basis to collect and store your customers' details, and for telling your customers what you do with them.
- If one of your customers asks you to correct or delete their record, you can do that yourself inside CabDesign. If you need our help, ask us.
- If your business needs a formal data processing agreement covering this relationship, for example because you work with clients in Europe or the United Kingdom, we can provide a standard one. Ask us using the details in section 15.
[Owner to complete: have counsel review the standard Article 28 data processing agreement offered to business customers before the first one is signed]
6. Who processes data for us
Four companies. Here is exactly what each one holds and why.
| Sub-processor | What it handles | Why |
|---|---|---|
| Supabase | Accounts and sign-in, plus the database holding your projects, materials, standards and customer records. | It is our identity provider and our database. Without it there is no account and no saved work. |
| Stripe | Subscription payments and the card details you enter at checkout. | Stripe is the payment processor. Card data goes to Stripe directly, so we never hold it. |
| Anthropic | Your AI Designer messages and the project context needed to answer them. | It provides the AI model behind the assistant. See section 4. |
| Vercel | Hosting, content delivery, and the server and function logs that come with running the site. | It serves the site and runs our server-side functions. |
Each of these providers is bound by its own data processing agreement with us, which restricts them to processing data for the purpose we engaged them for. [Owner to complete: collect and file the four vendor data processing agreements, and confirm which Vercel plan CabDesign is on, since Vercel scopes its data processing agreement to certain plan tiers and this sentence must be true before the policy goes into force]
Beyond those four, we share personal information only when we have to: with professional advisers under confidentiality, in response to a lawful legal request, to protect the rights or safety of people or of the Service, or to a successor if the business is sold, in which case we would tell you first.
7. What we never do
These are hard commitments, not aspirations.
- We never sell your personal information, and we never sell your customers' details.
- We never share your personal information for cross-context behavioural advertising.
- We never use your designs, dimensions, chat or customer records to train AI models, and we do not let our AI provider do so either.
- We never run third-party advertising trackers or advertising pixels on the site.
- We never read your projects except when you ask us for support and we need to, or where security or the law requires it.
8. Cookies, local storage and tracking
We use the storage that keeps you signed in and remembers your settings. There are no analytics or advertising trackers on this site.
CabDesign uses browser storage for two things only:
- Keeping you signed in. Your authentication session is stored by the Supabase client in your browser. Clearing it signs you out.
- Remembering your settings. Small preferences such as your chosen colour theme, your unit of measure, and unsaved work in progress are kept in your browser's local storage so the tools behave the way you left them. Some tools work entirely on your device this way, with nothing sent to us.
No analytics, no advertising. As of the effective date of this policy, CabDesign runs no third-party analytics service, no advertising network, no behavioural tracking and no data broker integration of any kind. If that ever changes, we will update this section and this policy before the change goes live.
Do Not Track and Global Privacy Control. California law requires us to tell you how we respond to Do Not Track signals. Because we do not track you across other websites and do not run advertising trackers, there is no cross-site tracking here for a Do Not Track signal to switch off. There is nothing for a Global Privacy Control signal to switch off, because we never sell or share personal information in the first place.
9. Where your data lives, and how it is protected
It lives in our Supabase database, it travels encrypted, and each workspace is walled off from every other one at the database level.
Your account and your work are stored in our Supabase database. Traffic between your browser, our site and our providers is encrypted in transit using TLS, and data is encrypted at rest by our providers.
Access between workspaces is enforced in the database itself, using row level security policies, so one customer's account cannot read another customer's projects, materials or customer records. Administrative access on our side is limited to the people who need it to run and support the Service.
No system is perfectly secure, and we cannot promise that a determined attacker will never succeed. If a breach affects your personal information, we will notify you and any regulator as the law requires.
10. How long we keep it, and how to delete it
You can delete your account yourself, from your account settings. The live data goes right away. Encrypted backups take a little longer to age out, and we would rather tell you that than pretend otherwise.
We keep your account and your work for as long as your account is open, and for as long afterwards as we need to meet a legal or accounting obligation.
Deleting your account. You can delete your CabDesign account yourself from your account settings. Doing so removes your account and the project data attached to it from the live database.
Backups, honestly. Deletion from the live database does not instantly erase every encrypted backup copy. Backups roll over on a fixed schedule, and a deleted record disappears from them as they age out. We do not restore deleted data from a backup except to recover from a genuine system failure. [Owner to complete: state the actual backup retention window in days, taken from the Supabase plan CabDesign is on, so this promise matches what the infrastructure really does]
Records we keep after deletion. We retain what the law requires us to retain, which is mainly the billing and tax record of what you paid, and the record of your consent to a recurring charge, which California's automatic renewal law requires us to keep for a set period after the subscription ends. [Owner to confirm: the exact retention period for the automatic renewal consent record, which is three years or one year after termination, whichever is longer]
AI conversations. Your AI Designer conversation history and the project facts it produced are part of your workspace and are deleted with it.
11. Your privacy rights
You can ask to see it, correct it, take it with you, or delete it. Ask us and we will do it, whether or not a particular law obliges us to.
Whoever you are and wherever you live, you can ask us to:
- tell you what personal information we hold about you and where it came from;
- correct anything that is wrong;
- give you a copy in a portable format;
- delete your account and the personal information attached to it; or
- stop a particular use of it.
Contact us as described in section 15. We will respond within the time the applicable law allows, and we will not treat you worse for exercising a right.
If you are in California
The California Online Privacy Protection Act applies to CabDesign regardless of our size. This page is our conspicuously posted privacy policy under that law: it names the categories of personal information we collect (section 2), the third parties we share it with (section 6), how you review and change your information (section 11 and your account settings), how we announce changes to this policy (section 14), and our Do Not Track disclosure (section 8).
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to businesses above certain revenue and volume thresholds. CabDesign does not meet those thresholds today, so we are not currently a covered business under that law. We nevertheless offer the rights it grants, as a matter of practice: to know, to delete, to correct, to opt out of sale or sharing (which never happens here), and to limit the use of sensitive personal information (which we do not collect). We do not sell or share personal information as those terms are defined in that law, and we have not done so in the preceding twelve months.
If you are in the European Economic Area, the United Kingdom or Switzerland
The General Data Protection Regulation may apply to you even though we are based in the United States, because it follows the person rather than the company. You have the rights to access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent where we rely on it. You also have the right to complain to your local supervisory authority.
[Owner to confirm: whether an Article 27 representative in the European Union or the United Kingdom is required, which depends on the volume and regularity of the monitoring or offering of services to people located there]
12. Children
This is a professional tool, not a service for children.
CabDesign is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.
13. International transfers
We are a United States business, so your data is processed there.
CabDesign is operated from the United States, and our sub-processors process data in the United States and, depending on the provider, in other countries where they operate. If you use CabDesign from outside the United States, you are sending your information to the United States.
Where personal information is transferred out of the European Economic Area, the United Kingdom or Switzerland, our providers' data processing agreements include the European Commission's Standard Contractual Clauses, or an equivalent approved transfer mechanism.
14. Changes to this policy
If we change something that matters, we will change the date at the top and tell you.
We will update this policy when our practices or the law change. The effective date at the top of the page always shows the current version.
If we make a material change, for example adding a sub-processor that handles personal information or starting to use a new category of data, we will post the updated policy here before the change takes effect and tell account holders by email or by a notice in the Service.
15. How to reach us
One address for any privacy question or request.
For any privacy question, or to make a request under section 11, contact [Owner to complete: the privacy contact email address, the legal entity name, and the registered mailing address to publish here, plus a data protection contact if one is required].
To help us find your records quickly, write from the email address on your CabDesign account where you can. If we cannot verify that a request comes from you, we may not be able to act on it, which is a protection for you rather than an obstacle.