Privacy Policy

This Privacy Policy describes how Cabana ("we," "us," or "our") handles information when you use our websites, products, and services (collectively, the "Services"). By using the Services, you agree to this policy.

Information we collect

We may collect:

• Account and profile data — such as name, work email, organization, and role, including information you provide when you sign up or that your employer supplies when provisioning access.
• Leave and HR-related data — such as time-off requests, approvals, balances, policies, and calendar-related metadata needed to operate leave management features.
• Usage and technical data — such as device type, browser, IP address, log data, and diagnostic information to secure and improve the Services.
• Communications — such as messages you send us (for example, support requests) and, where enabled, notifications sent through integrated tools like Slack.

How we use information

We use information to:

• Provide, maintain, and improve the Services;
• Authenticate users, prevent fraud, and protect security;
• Communicate about the Services, including service and policy updates;
• Comply with law and enforce our agreements; and
• Analyze usage in aggregate or de-identified form where permitted.

Legal bases (where applicable)

If you are in a region that requires a legal basis for processing (for example, the EEA or UK), we rely on bases such as contract performance, legitimate interests (for example, securing our Services and improving reliability), consent where required, and legal obligation.

Sharing of information

We may share information with:

• Your organization — administrators and managers may access data needed to administer leave policies and approvals.
• Service providers — vendors that help us host, secure, analyze, or deliver the Services (for example, cloud infrastructure, authentication, email delivery, analytics), subject to confidentiality obligations.
• Integrations you enable — such as Slack or calendar providers, according to the permissions and settings your organization configures.
• Legal and safety — when required by law, legal process, or to protect rights, safety, and security.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

We do not sell your personal information as that term is commonly understood.

Retention

We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may depend on your organization's settings and applicable law.

Security

We implement technical and organizational measures designed to protect information. However, no method of transmission or storage is completely secure.

Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, or to data portability. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. If your account is managed by an employer, that organization may need to approve certain requests.

International transfers

We may process information in countries other than where you live. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Children

The Services are not directed to children under 16, and we do not knowingly collect their personal information.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date.

Contact

Questions about this Privacy Policy: hello@cabanapto.com.