Privacy Policy
Strata Ventures LLC d/b/a Cabora ("Cabora", "we", "us", or "our") operates the Cabora cabinet design platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.
1. Information We Collect
We collect information in the following ways:
- Account information: Name, email address, and password when you register.
- Billing information: Payment details are processed by Stripe. We do not store full credit card numbers.
- Project data: Cabinet designs, room dimensions, materials, cut lists, and other content you create within the Service.
- Usage data: Pages visited, features used, session duration, browser type, operating system, and IP address.
- Communications: Messages you send us via email or support channels.
2. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service.
- Process payments and manage your subscription.
- Send transactional emails (account confirmation, password reset, billing receipts).
- Send product updates and newsletters (you may opt out at any time).
- Respond to support requests.
- Detect and prevent fraud, abuse, or security incidents.
- Comply with legal obligations.
3. Cookies and Tracking
We use cookies and similar technologies to operate the Service:
- Session cookies: Required to keep you logged in. These are deleted when you close your browser.
- Persistent cookies: Used to remember your preferences and authentication state.
- Analytics: We may use anonymized analytics to understand how the Service is used. No personally identifiable information is shared with analytics providers.
You can control cookies through your browser settings. Disabling cookies may prevent some features of the Service from functioning correctly.
4. Third-Party Services
We use the following third-party services to operate Cabora:
- Supabase: Database storage and authentication. Your project data and account credentials are stored on Supabase-managed infrastructure.
- Stripe: Payment processing. Stripe's privacy policy governs the handling of your payment information.
- AI providers: AI features may transmit design context to third-party AI APIs to generate responses. No personally identifiable information is included in these requests beyond what is necessary for the feature.
We do not sell your personal data to any third party.
5. Data Retention
We retain your account and project data for as long as your account is active. If you cancel your subscription, your project data is retained for 90 days and then permanently deleted. You may request deletion of your account and data at any time by contacting us at privacy@cabora.ai.
6. Security
We take reasonable technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Request that we correct inaccurate data.
- Deletion: Request that we delete your data ("right to be forgotten").
- Portability: Request your project data in a machine-readable format.
- Opt-out: Unsubscribe from marketing communications at any time.
To exercise any of these rights, contact us at privacy@cabora.ai. We will respond within 30 days. If we decline your request, you may appeal by replying to our response email and we will provide a written explanation within 30 days.
8. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us personal information, we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice and update the effective date above. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
10. Governing Law
This Policy is governed by the laws of the State of Utah, United States. Any disputes arising under this Policy shall be resolved in the state or federal courts located in Utah County, Utah.
11. US State Privacy Rights
Residents of California, Colorado, Connecticut, Utah, Virginia, and other states with active privacy laws may have the right to know what personal data we collect, access or correct that data, request deletion, and opt out of the sale or sharing of their personal data. We do not sell personal data. To submit a request, contact us at privacy@cabora.ai. We will respond within 45 days, as permitted by most state laws.
12. Contact
Questions or concerns about this Privacy Policy? Contact us at privacy@cabora.ai.