This is the privacy policy of Zorva Labs, which makes and sells Cabinet Maker Pro, for cabinetmakerpro.com: the website and the app under /app/.

The Cabinet Maker Pro app

When you start a trial, the app keeps your name, your email address and your shop’s name, and a scrambled form of your password (never the password itself). Signing in sets one cookie, cmp_session, which keeps you signed in for up to 30 days and is only sent to this site; signing out removes it. The sign-in record on our side keeps the browser and the IP address it was made from, so a stolen session can be spotted, and it is deleted when you sign out. Changes to clients, designs, the team and the account are logged with who made them, so your team can see who did what.

What you put in the app is your shop’s: your clients’ names, phone numbers, email addresses and addresses, the shop details you type for the title block, and your designs. It is stored in the app’s database on Cloudflare, only the people your shop account invites can open it, and we don’t use it for anything but running the app for you. Your clients’ details are yours to keep accurate and lawful to hold; delete a client or a design in the app and it is gone from the database.

Payments go through Stripe. You type your card into Stripe’s own checkout page, not this site; we keep the Stripe customer and subscription numbers and the subscription’s status, never the card. Stripe handles the card under its privacy policy. When the app emails you — an invitation to a shop account, a password reset — it goes through Cloudflare’s email service; Stripe sends the receipts.

To close your account and have its data deleted, cancel the subscription from Billing and email [email protected].

The contact form

The form asks for your name and email address, the shop or company, the service you choose and whatever you write in the message. When you press Send message, the site saves what you entered in its own database on Cloudflare, with the page you sent it from and the country your connection is in. Then it emails the same details to [email protected] through Cloudflare’s email service, so a reply can come straight back to you. That’s ordinary email, so leave anything sensitive out of it.

Our own record of visits

Each time a page loads, the site makes a note of it on Cloudflare’s servers, before anything runs in your browser:

which page it was, and the website, search or ad that brought you, if there was one;
whether you’re on a phone, tablet or computer, and which browser;
the town, state and country your connection is in and its internet provider, as Cloudflare estimates them.

It doesn’t store your IP address or anything with your name on it. It also notes when someone taps the email address or sends the form, and how many seconds each page is on screen. A tap or a sent form is kept with how that visit began, the browser’s language and time zone, and the same rough location, down to the ZIP code. That’s how we see which pages lead people to get in touch.

Visits from outside the United States are turned away, and the country Cloudflare reports for your connection is what decides it.

Cookies

The site sets one cookie of its own, ts_src, on the first page of a visit. It remembers how the visit began (the site, search or ad that sent you, the page you landed on, the kind of device and the time) so a call or a message can be traced back to it. It holds no identifier and is set to expire when you close your browser.

Who else is involved

Cloudflare runs the site, the app and its database and the form’s email, and like any host it sees your IP address when it sends you a page. The typefaces come from Google Fonts, so your browser fetches them from Google’s servers, which see your IP address as they send them. The pictures are served from this site itself.

Your information

To find out what the site holds about you, or to have it deleted, email [email protected].

Privacy policy