Privacy Notice

• Dealer account data — business name, owner name, city, phone, email, login credentials. Used to create and secure your account and provide the service (performance of our contract with you).
• Homeowner enquiry data — name, phone, optional email, city, project category, budget and timeline, submitted by homeowners requesting quotes. With the homeowner's consent it is shared with a small number of matching dealers so they can respond, and used to follow up on outcomes (contract and legitimate interests in operating the platform). We never sell, rent, licence or enrich this data, and it is never made available as a marketing list.
• Business content — your catalog, pricing, quotes and project notes. Used to provide the tool (contract).
• Usage and technical data — device and browser information, IP address, and coarse activity logs, including hashed identifiers used for rate limiting. Used for security, fraud and abuse prevention, and to improve the product (legitimate interests).
• Support and review data — messages you send us, and reviews submitted through review links. Used for support and reputation features (contract and legitimate interests).
• Billing records — plan, credit ledger and subscription status. Used for entitlement and accounting (contract and legal obligation).

Where we rely on consent — for example optional marketing email — you can withdraw it at any time.

• Dealers — homeowner enquiry details are shared with the dealers a lead is routed to, so they can quote.
• Paddle, our Merchant of Record, for sale of our products, subscription management, payments, tax compliance and invoicing.
• Service providers — hosting, database, email delivery and analytics providers acting on our instructions.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where required by law.

We do not sell personal data.

We keep account and lead data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and dispute-resolution obligations, after which it is deleted or anonymised. Rate-limiting and abuse logs are kept only in hashed form and for a short period.

Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of or objection to processing, and a portable copy; and you may withdraw consent where processing is based on it. To exercise these rights, email customercare@cubekrafts.com. We aim to respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority; any transfers outside the UK/EEA are protected by appropriate safeguards such as standard contractual clauses.

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database, and least-privilege access for staff.

We use only essential cookies and local storage needed to keep you signed in and to operate the checkout. We do not use advertising cookies. You can clear or block these in your browser, though the app may stop working correctly.

Cubekrafts is not intended for anyone under 18. We do not knowingly collect data from children; if you believe a child has provided us data, contact us and we will delete it.

Data controller: Cubekrafts, Karnal, Haryana, India. For privacy requests email customercare@cubekrafts.com. Under India's IT Rules, 2021 and the Digital Personal Data Protection Act, 2023, complaints may be sent to The Grievance Officer at customercare@cubekrafts.com; we acknowledge within 48 hours and aim to resolve within 30 days. General support: customercare@cubekrafts.com.

Cubekrafts is operated as a sole proprietorship and is not a registered company.