Privacy Policy
Last updated: 31 August 2026
This Privacy Policy explains what information Carabo ("Carabo", "we", "us") collects, how we use it, and the choices you have. It applies to your use of the Carabo web app, mobile app, and public business pages.
1. Information we collect
Account & business profile — your name, email, phone, business name, trade type, GST details, and any logo or profile content you upload.
Customer and job data you enter — customer contact details, job notes, quotes, invoices, and photos you add while using Carabo to run your business.
Usage & device data — basic log and diagnostic information (e.g. error reports) that helps us keep the service reliable.
Payment information— payments are handled by Stripe; we don't collect or store full card numbers ourselves.
2. How we use information
- To provide and operate the Carabo platform for your workspace
- To send quotes, invoices, booking confirmations, and reminders on your behalf, by email or SMS
- To provide customer support and respond to enquiries
- To monitor and improve the reliability and security of the service
- To meet our legal and accounting obligations
3. Who we share information with
We share information with service providers who help us run Carabo, only as needed to provide the service:
- Supabase — database hosting and authentication
- Stripe — payment processing and payouts
- Twilio — SMS confirmations and reminders
- Resend — transactional email delivery
- Sentry — error monitoring, to help us fix bugs
We don't sell your information or your customers' information to third parties.
4. Your customers' data
When you add a customer's details to Carabo, you're acting as the data controller for that information, and we process it on your behalf to provide the service — for example, to send the quotes, invoices, and reminders you create. You're responsible for having your customers' consent, or another lawful basis, to hold and process their information.
5. Cookies and similar technologies
We use essential cookies to keep you signed in and to remember basic preferences. We don't use third-party advertising trackers.
6. Data security
We use industry-standard access controls and encryption in transit to protect your data. No system is completely secure, but we work to keep your information safe and to respond quickly if something goes wrong.
7. Data retention
We keep your account and business data for as long as your workspace is active, and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution needs. You can request deletion of your account data at any time, subject to those obligations.
8. Your rights
Under the New Zealand Privacy Act 2020 (and, where applicable, Australian privacy law), you have the right to access, correct, or request deletion of your personal information. To make a request, email support@carabo.app.
9. Children's privacy
Carabo isn't directed at children, and we don't knowingly collect personal information from anyone under 18.
10. International data transfers
Our service providers may store or process data outside New Zealand. Where that happens, we rely on providers with appropriate safeguards in place.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or in-app before they take effect.
12. Contact us
Questions about this policy, or want to exercise your privacy rights? Email us at support@carabo.app. See also our Terms of Service.