This Privacy Policy explains how CabiCAD ("we", "us", "our"), operated as a sole proprietorship, collects, uses, stores, and shares your personal data when you use the CabiCAD platform, website, and related services (collectively, the "Service").
We are committed to protecting your privacy and handling your data transparently and responsibly. This policy applies to all users of the Service worldwide, including users in the European Union (subject to the General Data Protection Regulation — GDPR), the United States, Israel (subject to the Israeli Privacy Protection Law, 5741-1981 and its regulations), and all other jurisdictions.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
Contact: CabiCAD, Atlit, Israel — info@cabicad.com
This policy applies to:
| Data | Who | Purpose |
|---|---|---|
| Email address | All users | Account creation, authentication, communications |
| Password (hashed) | All registered users | Authentication |
| First and last name | All registered users | Account personalization |
| Company name | Designers, Manufacturers | Account profile |
| Country | Manufacturers, Waitlist | Service delivery, compliance |
| Primary product category | Manufacturers | Platform configuration |
| Machine count and brand | Manufacturers | Machine setup, post-processor matching |
| Logo / branding assets | Designers | Branded PDF export feature |
| Project designs and 3D models | All registered users | Core service delivery |
| Messages and comments | All registered users | Collaboration and Q&A features |
| Price quotes | Manufacturers | RFQ workflow |
| Payment information | Paid tier subscribers (at GA) | Billing — processed by Stripe, not stored by us |
| VAT number | EU business subscribers | Tax compliance |
| Waitlist form responses | Waitlist registrants | Pre-launch qualification |
When you use the Service, we automatically collect:
We use your data for the following purposes, each grounded in a legal basis:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your account | Performance of contract |
| Delivering the core platform features | Performance of contract |
| Processing RFQs and connecting designers with manufacturers | Performance of contract |
| Sending transactional emails (verification, notifications, billing) | Performance of contract |
| Processing payments via Stripe | Performance of contract |
| Enforcing feature flag entitlements per subscription tier | Performance of contract |
| Sending product updates and feature announcements | Legitimate interests (you may opt out) |
| Improving the platform through usage analytics | Legitimate interests |
| Detecting fraud and preventing abuse | Legitimate interests / legal obligation |
| Maintaining audit logs for GDPR compliance | Legal obligation |
| Responding to legal requests | Legal obligation |
| Sending marketing communications (with consent) | Consent |
We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.
CabiCAD's three-party collaboration model requires controlled sharing of data between parties:
We share data with trusted third-party processors who act on our instructions:
| Provider | Purpose | Location |
|---|---|---|
| Railway | Cloud infrastructure, hosting, database | USA (data center location varies by Railway configuration) |
| Stripe | Payment processing | USA / Global |
| Email provider (TBD) | Transactional and notification emails | TBD |
All processors are bound by data processing agreements and are required to handle data in accordance with applicable law.
We may disclose your data if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.
If CabiCAD is acquired, merged, or its assets are transferred, your data may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website prior to your data becoming subject to a different privacy policy.
For data relating to manufacturers' own customers, employees, and internal production processes that manufacturers upload or process through CabiCAD:
To request a DPA: info@cabicad.com
All rights listed in 7.1 apply. Additionally:
Under the Israeli Privacy Protection Law:
California residents have the right to:
Submit requests to: info@cabicad.com
We will respond within:
We may need to verify your identity before processing your request.
| Cookie Type | Purpose | Can be declined? |
|---|---|---|
| Strictly necessary | Authentication session, security (CSRF), language preference | No — required for the Service to function |
| Analytics | Understanding how users interact with the platform (aggregate, anonymized) | Yes |
| Preference | Remembering your UI settings | Yes |
We do not use advertising or tracking cookies. We do not share cookie data with advertising networks.
You can manage cookie preferences through:
Declining non-essential cookies does not affect your ability to use the core Service.
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 90 days after deletion request |
| Project designs and files | Duration of account + 90 days after deletion request |
| Audit logs | 3 years (legal/compliance obligation) |
| Billing records | 7 years (tax and accounting obligation) |
| Waitlist data | Until 12 months after general availability launch, then deleted |
| Server logs | 90 days |
| Deleted account data | Purged within 90 days of deletion (except audit logs and billing records) |
When you delete your account, your personal data is anonymized or deleted within 90 days. Project data shared with manufacturers during active RFQs may be retained by those manufacturers independently — CabiCAD cannot control data stored outside our platform.
We implement industry-standard technical and organizational measures to protect your data:
No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to info@cabicad.com.
CabiCAD is operated from Israel. Your data may be processed in countries outside your country of residence, including the United States (via Railway and Stripe infrastructure).
For EU/EEA users: These transfers are made on the basis of:
The Service is not directed at children under the age of 16 (or 13 in jurisdictions where that is the applicable minimum). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at info@cabicad.com and we will delete it promptly.
We may update this Privacy Policy from time to time. When we make material changes, we will:
Continued use of the Service after the effective date constitutes acceptance of the updated policy.
CabiCAD
Atlit, Israel
Email: info@cabicad.com
If you are an EU/EEA resident and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority. A list of EU DPAs is available at: edpb.europa.eu
If you are an Israeli resident, you may contact the Israeli Privacy Protection Authority: gov.il/en/departments/the_privacy_protection_authority
This Privacy Policy was last reviewed on April 5, 2026. CabiCAD is operated from Atlit, Israel. Governing law: State of Israel.