Carcasso (carcasso.com.au) is a joinery quoting and PDF generation SaaS operated by KABBOUT, TAHA, trading as Carcasso. ABN 62 912 909 739. Liverpool NSW 2170 Australia.
We are a sole trader operating in Australia. Although businesses under $3 million annual turnover are currently exempt from the Australian Privacy Act 1988 (with that exemption scheduled for removal by December 2026), we voluntarily comply with the Australian Privacy Principles (APPs) and the Privacy and Other Legislation Amendment Act 2024 because we collect personal information from our users and believe in handling it properly.
Account information: Your email address and name when you register for an account.
Job data: Room measurements, materials, door styles, and configurations you create and save in Carcasso. This is your professional work data, not sensitive personal information.
Payment information: When you subscribe to a paid plan, your payment is processed entirely by Stripe, Inc. We never see, store, or have access to your card numbers, bank details, or CVV codes.
Usage data: Pages visited, features used, errors encountered, and session duration — collected to improve the product. This is not linked to identifiable individuals beyond your account.
Device and technical data: Browser type, operating system, and IP address — collected automatically in server logs as standard practice for any web application.
Marketing emails: If you subscribe via our Beehiiv email form to receive our sample PDF or newsletter, we collect your email address for that purpose only.
We use Stripe for payment processing. When you purchase a subscription, Stripe collects and processes your payment information directly. We do not store payment card data.
The following disclosure is provided as required by Stripe's merchant requirements:
Our email list is managed via Beehiiv (beehiiv.com). If you submit your email through our website form, you are opting in to receive our newsletter and product updates. In compliance with the Spam Act 2003 (Cth):
Beehiiv is a US-based service. By subscribing to our email list you consent to your email address being stored on Beehiiv's servers in the United States.
Stripe, Inc. — payment processing — United States. stripe.com/privacy
Supabase — database and authentication — Sydney, Australia region. Your account and job data is stored in Australia.
Beehiiv — email marketing — United States. Email addresses of newsletter subscribers only.
We do not sell your personal information to any third party. We do not share your data with advertisers. We do not use your job designs or measurements for any purpose other than providing the service to you.
Stripe (USA): Payment processing data is transferred to and stored in the United States by Stripe, Inc. By using Carcasso and subscribing to a paid plan, you consent to this transfer.
Beehiiv (USA): Email addresses of newsletter subscribers are stored in the United States by Beehiiv. By subscribing to our email list, you consent to this transfer.
All other data (your account, jobs, designs) is stored in Australia on Supabase's Sydney infrastructure and does not leave Australia.
Active account: Retained for the lifetime of your account.
Cancelled account: Account data retained for 90 days after cancellation, then permanently deleted on request. You can request deletion at any time by emailing [email protected].
Payment records: Retained for 7 years as required by the Australian Taxation Office.
Server logs: Retained for up to 90 days for security and debugging purposes, then automatically deleted.
You have the following rights in relation to your personal information:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, and disclosure:
No system is completely secure. In the event of a data breach that is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme under the Privacy Act 1988.
Carcasso uses session cookies for authentication only — these are required for the service to function and cannot be opted out of while using the app. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We do not use Google Analytics or similar tracking services.
Carcasso is a professional trade tool for use by adults in the building and joinery industry. We do not knowingly collect personal information from persons under 18 years of age. If you believe a minor has provided us with personal information, contact [email protected] and we will delete it promptly.
Carcasso uses automated calculation to generate cut lists, quotes, and PDF drawings from the measurements you enter. These calculations are tools to assist your workflow — no automated decisions are made about you as a person. You remain fully in control of all outputs.
If you have a complaint about how we have handled your personal information, please contact us first:
Email: [email protected]
We will acknowledge your complaint within 5 business days and respond fully within 30 days.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
Website: oaic.gov.au
Phone: 1300 363 992
We may update this Privacy Policy from time to time. When we make material changes, we will notify all registered users by email at least 14 days before the changes take effect. The date at the top of this page reflects the most recent update. Continued use of Carcasso after notification constitutes acceptance of the updated policy.