1. Who We Are
Cabiqo Industries Private Limited ("Cabiqo", "we", "us") is the data controller responsible for your personal data. We operate the Cabiqo ERP platform, E-Shop marketplace, Planora design tool and related services.
Registered address: Plot No. G53/1, IDA, IP-Sultanpur, Generalpark, Sultanpur, Patancheru, Medak – 502319, Telangana, India, Telangana, India.
2. Data We Collect
2.1 Information you provide directly
- Account registration: name, email address, phone number, company name, GST number.
- Orders & E-Shop purchases: billing address, shipping address, payment method details (processed via PCI-compliant gateways — we do not store card numbers).
- Design data: room layouts, BOM configurations, finishes and measurements created using Planora.
- Contact forms: name, email, company, and the message content you submit.
- Support requests: communications you send to our helpdesk.
2.2 Information collected automatically
- Usage data: pages visited, features used, session duration, clicks and interactions within the Platform.
- Device & log data: IP address, browser type, operating system, referring URL and timestamps.
- Cookies: see Section 6 for details.
2.3 Information from third parties
- Payment processors (Razorpay, HDFC PayZapp) may share transaction status and fraud signals.
- Logistics partners may share delivery and tracking updates.
3. How We Use Your Data
- Provide & operate the Platform: create and manage your account, process orders, generate quotes, BOMs and cut lists, enable the Planora design tool.
- E-Shop & fulfilment: process B2B purchases, manage delivery, issue invoices and credit notes.
- Communication: send order confirmations, delivery updates, account notifications and product announcements.
- Customer support: respond to enquiries, troubleshoot issues and process returns.
- Improvement & analytics: understand how the Platform is used so we can enhance features and performance.
- Legal compliance: meet obligations under Indian tax law (GST), accounting standards and any applicable regulations.
- Security: detect and prevent fraud, abuse or unauthorised access.
4. Legal Basis for Processing
We process your data on the following bases:
- Contractual necessity: processing required to fulfil your orders and operate your account.
- Legitimate interests: analytics, platform security, fraud prevention and product improvements — balanced against your rights.
- Legal obligation: tax invoicing, audit trails and statutory reporting.
- Consent: marketing emails — you may withdraw consent at any time by clicking "Unsubscribe" or contacting us.
5. Sharing Your Data
We do not sell your personal data. We share data only as necessary:
- Service providers: cloud hosting (AWS India region), payment processors, email delivery, analytics tools — bound by data processing agreements.
- Logistics partners: your shipping address and contact number are shared with courier and freight partners to fulfil E-Shop orders.
- Legal requirements: when required by Indian law, court order or government authority.
- Business transfers: in the event of a merger, acquisition or sale of assets, data may be transferred subject to equivalent privacy protections.
6. Cookies & Tracking
We use cookies and similar technologies to operate and improve the Platform:
- Essential cookies: required for login sessions, security and basic Platform functionality. Cannot be disabled.
- Preference cookies: remember your language, theme and display settings.
- Analytics cookies: track usage patterns using anonymised data (Google Analytics, Mixpanel). You may opt out via your browser settings.
- Marketing cookies: used only with your explicit consent to serve relevant product advertisements.
You can manage cookie preferences via your browser settings. Disabling non-essential cookies will not affect core Platform functionality.
7. Data Retention
- Account data: retained for the duration of your account and for 3 years after closure to comply with statutory requirements.
- Order & invoice records: retained for 7 years as required by Indian GST and accounting regulations.
- Design data (Planora): retained while your account is active; deleted within 60 days of account closure on request.
- Analytics data: retained in aggregated, anonymised form for up to 24 months.
- Marketing data: deleted within 30 days of consent withdrawal.
8. Your Rights
Under applicable Indian data protection law and as a matter of good practice, you have the right to:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate or incomplete data.
- Deletion: request erasure of your personal data, subject to legal retention obligations.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing based on legitimate interests.
- Withdraw consent: withdraw marketing consent at any time without affecting lawfulness of prior processing.
To exercise any of these rights, email help@cabiqo.com with the subject line "Data Rights Request". We will respond within 30 days.
9. Data Security
We implement industry-standard security measures to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher.
- Data at rest is encrypted using AES-256 on AWS infrastructure hosted in the India region.
- Access to production data is restricted to authorised personnel with role-based access controls.
- We conduct regular security audits and vulnerability assessments.
Despite these measures, no system is completely secure. In the event of a data breach affecting your rights, we will notify you and the relevant authority as required by law.
10. Third-Party Links
The Platform may contain links to external websites or services. Cabiqo is not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any external sites you visit.
11. Children's Privacy
The Platform is intended for business users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes we will notify registered users via email and update the "Last updated" date at the top of this page. Continued use of the Platform after changes take effect constitutes acceptance of the revised policy.
13. Contact Us
For privacy-related enquiries, data rights requests or to report a concern: