Privacy Policy
1. Who we are
Cabinet Project is made by Design Master Solutions LLC, Yarmouth, MA 02664, United States ("we", "us"). This policy explains what information we collect when you use the website at cabinetproject.app, the app at app.cabinetproject.app, the mobile and desktop apps, the client portal at <dealer>.cabinetproject.app and the API (the "Service"), and what we do with it. Questions and requests: info@designmastersolutions.com.
2. Dealers, their clients and us
Cabinet dealers and installer companies ("dealers") hold accounts and decide what information about their own clients, such as homeowners and contractors, goes into the Service. For that client information, the dealer is responsible for it and we process it on the dealer's behalf, only to run the Service. If you are a dealer's client and want to see, correct or delete your information, contact that dealer; we will help them answer you.
3. Information we collect
- Account and team data: name, business name, e-mail, phone, business address, password (stored hashed), role, language and settings of each team member.
- Your clients' data: names, e-mail addresses, phone numbers and job site addresses of the people you quote and install for, and the approvals and signatures they give in the client portal.
- Job data: manufacturers, price lists and multipliers, quotes, layouts, orders, delivery checks and claims, schedules, punch lists, invoices, notes and messages.
- Photos and files: jobsite and damage photos, kitchen photos sent for a render, PDFs and spreadsheets you upload.
- Payments: for your subscription, our processor (Stripe, or Apple and Google in their app stores) handles your card; we keep only the payment status, plan and the last four digits. When your clients pay you through the portal, the payment goes through your own payment account (for example, your own Stripe account); we see the amount and status, never the full card number.
- Sign-in with Google or Apple: your name and e-mail address (Apple may give a relay address).
- Technical data: IP address, device and browser type, app version, and error reports needed to keep the Service working and secure.
The marketing website sets no cookies and loads no analytics or advertising scripts. The app uses only the storage needed to keep you signed in and remember your settings.
4. How we use it
- to create and run your account and your team's access;
- to provide the features you use: quotes, layouts, the client portal, orders, deliveries, installs and invoices;
- to send transactional e-mails, such as invitations, quotes, portal links, password resets and receipts, and push notifications on the mobile apps;
- to bill your subscription;
- to provide support, fix errors, prevent fraud and keep the Service secure;
- to comply with the law.
We do not sell personal information, we do not share it for advertising, and we do not use your data or your clients' data to train AI models.
5. Who processes it for us
We use these providers to run the Service. Each receives only what its job needs:
- Railway: application servers and database (United States).
- Amazon Web Services (S3): storage of photos and files (United States, us-east-1).
- Cloudflare: hosting of the website and the web app, and network protection.
- Resend: delivery of the e-mails the Service sends.
- Sentry: error reports, which can include the account and page where an error happened.
- Google and Apple: sign-in, when you choose it; Firebase Cloud Messaging for push notifications on the mobile apps.
- Stripe, Apple and Google (app stores): subscription payments; Stripe also processes payments to dealers who connect their own Stripe account.
- Anthropic and Google (Gemini): AI that reads uploaded price lists and renders a kitchen photo in a chosen door style. Only the file or photo being processed is sent.
- Photon (komoot, using OpenStreetMap data), the U.S. Census Bureau geocoder and, where enabled, Google Maps Platform: address suggestions, map positions and install routes. Only the address text is sent.
- Intuit QuickBooks Online: only if you connect it, to sync invoices and payments.
We may also disclose information when the law requires it, to protect rights and safety, or to a successor if the business is sold, under this policy.
6. Google user data
Cabinet Project's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. With Google sign-in we receive your name and e-mail address and use them only to create and sign in to your account. If you connect Google Calendar, we use it only to show your calendar in the app and to create, move and remove the events for your jobs. We do not sell Google user data, use it for advertising, or use it to train AI models.
7. Security
Data travels over encrypted connections (HTTPS/TLS). Passwords are stored hashed. Access is limited by role inside each company, and every company's data is kept separate from every other company's. No system is perfectly secure; if a breach affects your data we will notify you within 72 hours of confirming it.
8. How long we keep it
- While your account is active, we keep your data so the Service works.
- After you cancel, we keep it for 90 days so you can come back or ask for an export, then delete it.
- Backups are overwritten within 30 days after deletion.
- Error reports and technical logs are kept for up to 90 days; billing records as long as tax law requires.
9. Your choices and rights
You can see and correct most of your information in the app. You can also ask us, at info@designmastersolutions.com, to:
- send you a copy (export) of your account and company data;
- correct information you cannot change yourself;
- delete your account, or your whole company's data.
We answer within 30 days, or sooner where the law requires. Depending on where you live, such as California (CCPA/CPRA), the European Union (GDPR) or Brazil (LGPD), you may have further rights, including to object to or restrict processing and to complain to a data protection authority. We do not discriminate against anyone for using these rights.
10. Where data is stored
The Service is run from the United States. If you use it from another country, your information is transferred to and processed in the United States.
11. Children
Cabinet Project is a business service for adults. We do not knowingly collect information from children under 13, and accounts require users to be 18 or older. If we learn we have such information, we delete it.
12. Changes to this policy
We will tell account holders about material changes by e-mail and in the app before they take effect, and we update the date at the top of this page.
13. Contact
Design Master Solutions LLC, Yarmouth, MA 02664, United States. E-mail: info@designmastersolutions.com.