Privacy Policy

Introduction

Cadobook, Inc. ("Cadobook", "we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our services, including our quotes and invoicing tools (the "Services"), through our website and platform.

1. Information We Collect

We may collect and process the following types of personal data:

a. Information you provide directly:

• Name, email address, and contact details
• Business information (name, address, industry, etc.)
• Invoice and quote content

b. Information collected automatically:

• Log data (e.g. IP address, browser type, access times)
• Usage information (features used, pages visited)
• Cookies and similar technologies (see Section 7)

c. Payment information:

We do not process or store credit card details. All payments are securely handled by Stripe Connect. See Stripe's Privacy Policy.

d. AI-processed information:

When you use our AI-powered features (such as AI Command Mode, quote/invoice generation from text, or workflow suggestions), certain data you provide may be processed by our AI service provider, Anthropic. This includes text inputs and business context necessary to generate responses. See Anthropic's Privacy Policy.

2. How We Use Your Information

We use your information to:

• Provide and operate our Services
• Allow you to generate quotes and invoices
• Facilitate payments through Stripe
• Communicate with you, including support
• Improve platform functionality and security
• Comply with legal and regulatory obligations

3. Legal Bases for Processing (UK GDPR)

Under the UK GDPR, we rely on the following legal bases:

• Contractual necessity: To provide the services you sign up for
• Legitimate interests: For security, product improvement, and business analytics
• Consent: For optional communications or marketing
• Legal obligation: To meet tax or financial reporting requirements

4. Sharing Your Information

We may share your personal data with:

• Stripe, for processing payments
• Anthropic, for AI-powered features (text inputs are processed to generate quotes, invoices, and suggestions)
• Trusted service providers (e.g. analytics, hosting)
• Legal authorities, where required
• A buyer or successor in case of merger or acquisition

We do not sell your data to third parties.

5. International Data Transfers

Some data may be stored or processed outside the UK (e.g., by Stripe or cloud providers). In such cases, we ensure that adequate safeguards (such as Standard Contractual Clauses) are in place.

6. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil service obligations
• Comply with legal and tax requirements
• Resolve disputes and enforce agreements

When no longer needed, data is securely deleted or anonymised.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Enable core functionality
• Track usage patterns
• Improve the user experience

You can manage or disable cookies via your browser settings or cookie banner preferences.

8. Your Rights

Under UK data protection law, you have the right to:

• Access your data
• Correct inaccurate data
• Request deletion or restriction
• Object to processing
• Data portability
• Withdraw consent (where applicable)
• Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, email [email protected].

9. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration, or disclosure.

10. Changes to This Policy

We may update this policy from time to time. Significant changes will be communicated via email or our platform.

11. Contact Us

If you have any questions about this Privacy Policy or your data rights, please contact: