Privacy Policy

1. Who processes your data

The data controller for CabinetOS is the operator of the CabinetOS service at cabinetos.co.uk (“we”, “us”). For data protection questions, contact us via the contact page or support@cabinetos.co.uk.

2. What we collect

Account and profile

When you sign up, we collect identifiers such as email address, name where provided, and authentication data from our auth provider. We store preferences you set in the app (for example units, theme, or language).

Usage and projects

We process content you create in CabinetOS (projects, units, cutlists, sketches, exports, and similar) so the product works. We may log technical events (errors, performance) to keep the service reliable and secure.

Billing

If you subscribe or top up, our payment processor (for example Stripe) receives payment details you submit. We receive limited billing metadata (subscription status, last four digits of cards where applicable, invoices).

Communications

If you email us or use a contact form, we keep your message and contact details to respond.

Cookies and similar technologies

We use cookies and local storage as needed for sessions, preferences, and anonymised analytics where configured. You can adjust non-essential cookies via the cookie controls linked in the site footer where available.

3. Why we use your data (lawful bases)

• Contract: to provide CabinetOS and process subscriptions you request.
• Legitimate interests: to secure the service, improve features, diagnose bugs, and understand aggregate usage, balanced against your rights.
• Legal obligation: where we must comply with tax, accounting, or court orders.
• Consent: where we ask clearly (for example marketing emails or certain cookies), which you can withdraw.

4. How long we keep data

We keep account and project data while your account is active. After you delete or close an account, we delete or anonymise personal data within a reasonable period unless we must retain it for legal, tax, or dispute reasons. Backups may persist for a limited time before rotation.

5. Who receives your data

We use trusted processors, for example:

• hosting and database (e.g. Supabase) — to run the application and store data;
• payments (e.g. Stripe) — to take payment;
• email or transaction providers — to send service messages.

Processors act on our instructions and are contractually bound to protect your data. We do not sell your personal data.

6. International transfers

Your data may be processed in the UK, EEA, or other countries where our suppliers operate. Where data leaves the UK/EEA, we rely on appropriate safeguards (such as standard contractual clauses) where required.

7. Security

We use encryption in transit, access controls, and industry-typical measures to protect your information. No online service is perfectly secure; report suspected incidents to support@cabinetos.co.uk.

8. Your rights (UK GDPR / UK GDPR-style rights)

Depending on your situation, you may have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• erase data in certain cases;
• restrict or object to processing;
• data portability where processing is automated and based on contract or consent;
• withdraw consent where processing was consent-based;
• lodge a complaint with the ICO (ico.org.uk) in the UK.

To exercise rights, contact us using the details above. We may need to verify your identity.

9. Children

CabinetOS is not directed at children under 16. We do not knowingly collect their personal data.

10. Changes to this policy

We may update this page; the “Last updated” date shows the latest version. For significant changes we may notify you by email or in-product notice where appropriate.

11. Related

See also our Terms of Service for rules about using CabinetOS.