1. Who we are
This Privacy Policy explains how NoorLyfe, a sole proprietorship established in Denmark, trading as Casacabe (“Casacabe,” “we,” “us,” or “our”), handles personal data when you use casacabe.com, buy a license, email us, or download the desktop app. CVR-nr. 37575852 (DK37575852). Address: Lyngbyvej 83A, 2100 Copenhagen Ø, Denmark.
For GDPR and UK GDPR, NoorLyfe is the data controller of the personal data described here (not of the restaurant records you keep inside the app on your own computer).
Contact: support@casacabe.com. Put “Privacy” in the subject for access, deletion, or other rights requests.
This policy is meant to meet common notice rules in the European Economic Area, the United Kingdom, and US states that have consumer privacy laws (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and others as they come into force). Mandatory local law still applies if it gives you more rights than this page.
2. Restaurant data we never see
Casacabe is a desktop app. Sales, expenses, invoices, staff records, inventory, and similar information you enter stay on your computer. The app does not send that information to us. License checks are local. We do not get a copy, we cannot open your file, and we cannot restore it if your computer fails.
If you store personal data about other people in the app (for example employees or vendors), you are the controller of that data. That processing is your responsibility, not ours.
3. Personal data we collect
When you buy
Stripe processes checkout. Depending on what Stripe shows you, that can include name, email address, payment method details, billing address, and device or fraud-prevention signals. Stripe sends us confirmation that you paid, plus the identity and contact details we need to fulfill the order (typically your name and email). We do not receive or store your full card number or CVC.
When we deliver the license
We keep the email address, the fact that you bought, the license we issued, and enough purchase metadata to prove the order, handle support, and meet tax and bookkeeping rules.
When you email us
We receive whatever you write, including your email address and any files you attach. Use that only if you are comfortable sending it.
When you use the website
The site is hosted by Vercel. Vercel and the site may process technical data such as IP address, browser type, pages viewed, and approximate location derived from IP, as needed to serve the page and keep it secure.
We use Vercel Web Analytics for anonymous page-view counts. It is designed not to use tracking cookies and not to identify you across sites. It still counts visits. See Vercel’s analytics privacy information.
The theme toggle stores “light” or “dark” in your browser’s localStorage. That stays on your device. It is not used to identify you.
When you download the app
Installers may be hosted on GitHub or a similar provider. That host may log the download under its own policy.
We do not collect from inside the app
We do not collect restaurant data, crash reports, or in-app analytics from the desktop software.
4. Why we use it and legal bases
If GDPR or UK GDPR applies, we rely on these bases:
- Contract. Taking payment, sending the license, providing the download, and answering support about your purchase.
- Legal obligation. Keeping invoices and bookkeeping records under Danish and EU rules, and responding to lawful requests.
- Legitimate interests. Securing the site, preventing fraud, understanding which pages are used (anonymous analytics), and sending service messages about the product you already bought (for example a security or compatibility notice).
- Consent. Emails about new products or optional marketing, where the law requires consent. You can withdraw consent at any time.
If you are in a US state with a privacy statute, we use the same categories for the business purposes listed in this policy. We do not use your data for cross-context behavioral advertising.
5. Email after you buy
We email you the license key, receipt, and support replies. Those are transactional. You cannot opt out of emails needed to deliver what you paid for, but you can ask us to use a different address if you still own the license.
We may later email existing customers about updates to Casacabe or about new products. Where US CAN-SPAM or similar rules apply, those emails will identify us, include a working unsubscribe, and include the required sender information. Where GDPR, ePrivacy, or Canada’s CASL require consent, we will ask before we send marketing.
Unsubscribe links or an email to support@casacabe.com with “Unsubscribe” will stop marketing. They will not delete your purchase record.
6. Sharing
We do not sell your personal data. We do not rent it. We do not share it for cross-context behavioral advertising. We do not share it for money.
We use service providers who process data for us:
- Stripe for payment
- Vercel for hosting and anonymous web analytics
- Email and domain providers that carry support@casacabe.com
- A download host such as GitHub, if you fetch the installer from there
They may only use the data to provide their service to us, except where they are independent controllers (Stripe is a controller of payment data under its own policy).
We may disclose data if the law requires it, to protect rights and safety, or to a buyer if NoorLyfe or Casacabe is sold, under the same kinds of limits.
7. International transfers
We are in Denmark. Stripe, Vercel, and GitHub may process data in the United States and other countries. Where GDPR requires a safeguard for a transfer out of the EEA or UK, we rely on the provider’s lawful mechanism (typically Standard Contractual Clauses and any extra measures they publish).
US state residents: your data may be processed in Denmark and in the countries those providers use.
8. How long we keep it
Purchase and invoice records are kept for as long as Danish bookkeeping and tax law require (generally at least five years after the end of the relevant financial year, longer if a dispute or audit is open).
Support email is kept as long as needed to finish the request and for a reasonable period afterward in case you write again about the same license.
Marketing lists, if you are on one, are kept until you unsubscribe or we no longer run that list.
Website logs and analytics are kept only as long as the host’s default or a short operating period, whichever we control.
Restaurant data on your computer is kept until you delete it. We never hold that copy.
9. Security
We use reasonable technical and organizational measures for the small set of data we hold (purchase and support records). No method of transmission or storage is perfectly secure. You must keep your license key, email account, and computer backups under your own control.
10. Your rights in the EEA, UK, and similar countries
If GDPR, UK GDPR, or a similar law applies, you may ask us to access, correct, delete, or export your personal data, or to restrict or object to certain processing, or to withdraw consent. Those rights have legal limits (for example we must keep tax records).
Email support@casacabe.com. We will respond within the time the law sets, after we confirm it is you.
You may complain to the Danish Data Protection Agency (Datatilsynet) or to the authority in your EU/EEA country or the UK ICO. We would rather fix the issue first if you write to us.
11. Your rights in the United States
If you are a resident of a US state that has a consumer privacy law, and that law applies to us and to you, you may have some or all of these rights:
- to know and access the personal information we have collected about you
- to correct inaccurate personal information
- to delete personal information, subject to legal exceptions
- to obtain a portable copy
- to opt out of sale, sharing for cross-context advertising, or targeted advertising (we do not do these)
- to opt out of certain profiling, if we ever did it (we do not make automated decisions that produce legal or similarly significant effects)
- not to be discriminated against for exercising a privacy right
Send requests to support@casacabe.com with “US Privacy Request” and your state. We will verify you with the email or purchase details we already have. An authorized agent may write on your behalf if the state’s rules are followed. You may appeal a denial by replying to our decision email. If your state names a different appeal or AG process, we will point you to it.
We do not sell personal information as those statutes define “sale.” We do not share it for cross-context behavioral advertising. If that ever changes, we will update this policy and provide any required opt-out, including a “Do Not Sell or Share” link.
California “Shine the Light”: we do not disclose personal information to third parties for their own direct marketing.
Nevada residents may email us to opt out of any future sale of covered information. We do not sell it today.
12. California notice at collection
In the last 12 months we have collected, or may collect, these categories from buyers and site visitors:
- identifiers (name, email, IP address, online identifiers used by our hosts)
- commercial information (purchase of a Casacabe license)
- payment information (processed by Stripe; we do not store the card number)
- internet or electronic activity (pages viewed, analytics events that are not meant to identify you)
- approximate location (from IP, if the host provides it)
- inferences: none about your restaurant or finances from app use, because we do not receive app data
Sources: you, Stripe, and our website hosts. Purposes: fulfill the order, support, security, legal compliance, site analytics, and optional product email as described above. We do not collect sensitive personal information to infer characteristics. We do not sell or share these categories. We retain them as in section 8.
13. Cookies and similar technology
We do not use advertising cookies or third-party ad networks.
The site may set a strictly necessary cookie or similar if the host needs it to deliver the page. Vercel Web Analytics is designed to work without tracking cookies. The theme preference uses localStorage, not a cookie.
Your browser may send a Global Privacy Control or Do Not Track signal. We do not sell or share data for ads, so there is nothing extra to turn off for that purpose. We do not change the anonymous page-view count based on DNT.
14. Children
Casacabe is for adult business buyers. We do not knowingly collect personal data from anyone under 16 (or under 13 where US COPPA applies). If you think a child bought or wrote to us, email us and we will delete what we can.
15. Automated decisions
We do not use automated decision-making that produces legal or similarly significant effects about you. Stripe may use its own fraud tools under Stripe’s policy.
16. Changes
We may update this policy by posting a new version here and changing the date above. If a change is material, we will also try to email buyers we have on file, where the law expects notice. Continued use of the site after the effective date means you have seen the new policy, except where mandatory law says otherwise.
17. Contact
NoorLyfe, trading as Casacabe
CVR-nr. 37575852 (DK37575852)
Lyngbyvej 83A
2100 Copenhagen Ø
Denmark
support@casacabe.com
Supervisory authority in Denmark: datatilsynet.dk.