Privacy Policy

1. Who processes your data

The data controller for CabinetOS is Rafal Solutions Ltd (“we”, “us”), trading as CabinetOS — a company registered in England and Wales (company no. 13645392), registered office 14 Kings Road, Wood Green, London N22 5SN. For data protection questions, contact us via the contact page or support@cabinetos.co.uk.

2. What we collect

Account and profile

When you sign up, we collect identifiers such as email address, name where provided, and authentication data from our auth provider. We store preferences you set in the app (for example units, theme, or language).

Usage and projects

We process content you create in CabinetOS (projects, units, cutlists, sketches, exports, and similar) so the product works. We may log technical events (errors, performance) to keep the service reliable and secure.

Your projects are saved in your browser and also on our servers (our database provider, Supabase), so they are backed up and can be recovered if your browser data is cleared or you change device. Authorised CabinetOS staff can access a project only to give you support, fix problems, or keep the service secure. Projects you delete in the app are kept for 30 days (you can restore them from Projects → Recently deleted), then removed for good; everything is removed when your account is deleted. If your plan changes to one with fewer projects, nothing is deleted: projects above the new limit become read-only.

Billing

If you subscribe or top up, our payment processor (for example Stripe) receives payment details you submit. We receive limited billing metadata (subscription status, last four digits of cards where applicable, invoices).

Done-for-you orders

If you order drawings or a cut list on the Done for you page, we keep your name, business name, email, mobile, what you asked for and the files you upload (sketches, drawings, photos), so we can do the work and send it back. The files are stored privately with our hosting provider (Supabase) and only we can open them. Card payments for orders happen on Stripe's pages, as above. We keep orders for six years for tax records; ask us and we delete the files sooner once the job is finished.

Cut lists from the wardrobe planner

If you ask for the cut list of a wardrobe you designed in the planner on rafcarpentry.com, we keep your email, the design (its sizes and units, no name or address) and when we sent it, so we can email you the cut list (through Resend) and open the design in CabinetOS when you follow the link in that email. It's one email, not a mailing list. Ask us and we delete it.

Communications

If you email us or use a contact form, we keep your message and contact details to respond.

We email you about your account: a welcome email, reminders before your free trial ends, payment confirmations, failed payments and plan changes. These are part of the service, so they have no unsubscribe link. Tips and product news emails are sent only if you ask for them (at sign-up or in Settings); every one has an unsubscribe link, and you can turn them off in Settings at any time. We keep a record of which emails we sent you so the same one isn't sent twice. Account emails are sent through Resend. If you ask for tips, we share your email address and first name with systeme.io, which sends the tips emails; turning tips off removes you from them.

Cookies and similar technologies

These are all the cookies and on-device storage CabinetOS uses:

• Signing in— keeps you logged in until you sign out. Essential, so we don't ask.
• Your cookie choice— remembers whether you said Accept or Reject, so we don't ask on every visit. Essential.
• Language (cabinetos_lang) — remembers whether you picked English or Polski on this device. Essential.
• App data on your device — your projects and settings are also kept in your browser so the app opens quickly. Essential.
• “Email me tips” — if you tick it and then sign up with Google, it remembers the tick for 30 minutes while you sign up. Only set because you asked.
• Referral (cabinetos_ref) — if you arrived from a friend's referral link and press Accept, we remember the link for 30 days so your friend gets their reward when you sign up. It's removed once used. This is the only optional cookie: press Reject and it isn't saved (or is deleted).
• Not counted (cabinetos_not_me) — set only on CabinetOS's own staff devices, so our own visits are left out of the visit statistics. Never set for anyone else.

Change your answer any time with Cookie Preferencesat the bottom of every page. We don't use advertising or tracking cookies. Payments happen on Stripe's own pages, which use Stripe's cookies.

Visit statistics

We use Vercel Web Analytics to count page visits (which pages are viewed, the referring site, country, browser and device type). It does not use cookies and does not identify you or follow you across other websites. View-only share links are never sent to it.

We also keep our own record of the pages viewed on cabinetos.co.uk, so we can see how people find CabinetOS and use it: the page and the time, the site that linked you here (or a referral or campaign code in the link), the country, region and town your internet connection is in (worked out by Vercel from your IP address, which we don't keep), and your device type, system and browser. A visit's pages are grouped by a code made from your IP address and browser that changes every day, so nobody can be followed from one day to the next, and nothing is stored on your device. If you're signed in, the visit is linked to your account. Share links, sign-in pages and print pages aren't recorded. We keep these records for 13 months.

3. Why we use your data (lawful bases)

• Contract: to provide CabinetOS and process subscriptions you request.
• Legitimate interests: to secure the service, improve features, diagnose bugs, and understand aggregate usage, balanced against your rights.
• Legal obligation: where we must comply with tax, accounting, or court orders.
• Consent: where we ask clearly (for example marketing emails or certain cookies), which you can withdraw.

4. How long we keep data

We keep account and project data while your account is active. After you delete or close an account, we delete or anonymise personal data within a reasonable period unless we must retain it for legal, tax, or dispute reasons. Backups may persist for a limited time before rotation. Records of the pages viewed (see “Visit statistics”) are deleted after 13 months.

5. Who receives your data

We use trusted processors, for example:

• hosting and database (e.g. Vercel, Supabase) — to run the application and store data;
• visit statistics (Vercel Web Analytics, and our own record of the pages viewed) — to count page visits, without cookies;
• payments (e.g. Stripe) — to take payment;
• email (Resend) — to send account emails;
• email marketing (systeme.io) — to send tips emails, only if you ask for them;

Processors act on our instructions and are contractually bound to protect your data. We do not sell your personal data.

6. International transfers

Your data may be processed in the UK, EEA, or other countries where our suppliers operate. Where data leaves the UK/EEA, we rely on appropriate safeguards (such as standard contractual clauses) where required.

7. Security

We use encryption in transit, access controls, and industry-typical measures to protect your information. No online service is perfectly secure; report suspected incidents to support@cabinetos.co.uk.

8. Your rights (UK GDPR / UK GDPR-style rights)

Depending on your situation, you may have the right to:

• access a copy of your personal data;
• correct inaccurate data;
• erase data in certain cases;
• restrict or object to processing;
• data portability where processing is automated and based on contract or consent;
• withdraw consent where processing was consent-based;
• lodge a complaint with the ICO (ico.org.uk) in the UK.

To exercise rights, contact us using the details above. We may need to verify your identity.

9. Children

CabinetOS is not directed at children under 16. We do not knowingly collect their personal data.

10. Changes to this policy

We may update this page; the “Last updated” date shows the latest version. For significant changes we may notify you by email or in-product notice where appropriate.

11. Related

See also our Terms of Service for rules about using CabinetOS.