This policy applies to the Karoobar public website, account registration, product delivery, authentication, support, and explicitly contracted managed-cloud services. Labverse operates Karoobar and is responsible for the account information described here.
Important local-data boundary: Demo and paid local Main Workspace plans keep operational business records on your computer. Registration or local-plan purchase does not authorize Karoobar to upload your sales, purchases, inventory, parties, accounts, payroll, reports, attachments, or local backup files.
1. Information we collect
- Registration information: company name, owner or administrator name, email address or WhatsApp number, optional additional contact, and account credentials.
- Account and security information: company membership, device activation, access entitlements, authentication events, security logs, support/update status, and commercial-service status.
- Support information: correspondence and diagnostic information you deliberately provide. Please remove unnecessary personal or financial information before sharing diagnostics.
- Website technical information: ordinary server/CDN logs such as IP address, user agent, requested URL, timestamp, and security events. We do not currently use advertising cookies.
- Managed-service information: only the categories defined in the applicable proposal, service agreement, or data-processing terms when cloud synchronization, managed backup, mobile access, or a custom hosted workspace is activated.
2. Passwords and authentication
Passwords are transmitted to the Karoobar API over the deployment's secure connection and are stored as one-way password hashes, not as readable passwords. Never send a password, recovery code, access token, or private key by email.
If you select WhatsApp verification, Karoobar sends your selected number and a short-lived authentication code to Meta's WhatsApp Business Platform. It does not send your password or business records. A verified phone does not verify an optional email. Pending registration details are encrypted and retained for up to one day plus the hourly cleanup interval; consumed code material is removed on verification. Hashed contact identifiers and delivery-attempt metadata are retained for up to 40 days plus the cleanup interval to enforce abuse and spending limits. Enter codes only on Karoobar's verification page; staff do not need your code.
3. How we use information
- Create and administer company accounts and authorized memberships.
- Authenticate users, activate devices, enforce service entitlements, and prevent abuse.
- Provide downloads, updates, support, security notices, and contracted services.
- Diagnose reliability and security incidents and maintain audit evidence.
- Meet applicable contractual, accounting, legal, and regulatory obligations.
We do not sell account or registration information.
4. Demo and paid local plans
The desktop application stores operational records in its local database. Demo may retain one rolling safety copy on the same device; it does not provide portable restore, backup history, scheduled backup, or cloud recovery. Paid plans provide the local backup controls described on the pricing page. You control the computer, local access, and storage and remain responsible for device protection and tested backups. Removing an online account does not automatically delete records that exist only on your computers or backup media.
5. Custom and Managed Cloud Workspaces
Cloud synchronization, managed backup, mobile access, integrations, and custom hosted workflows are not activated automatically. Before activation, the commercial agreement identifies the enabled services, expected data categories, responsibilities, retention, support, and any customer-specific security requirements.
6. Service providers and disclosure
We may use vetted infrastructure, email, monitoring, support, and delivery providers to operate Karoobar. Providers receive only the access reasonably needed for their role and remain subject to contractual or technical controls. We may disclose information when required by applicable law, to protect users or the service, or as part of a lawful corporate transaction with appropriate safeguards.
7. International processing
Cloud providers and support systems may process information outside your province or country. Where relevant, managed-service terms describe the selected hosting region and customer-specific restrictions.
8. Retention
Registration, security, entitlement, billing, and support records are retained only for as long as reasonably necessary for service delivery, security, dispute handling, contractual requirements, or applicable law. Backup copies may remain for a limited rotation period before deletion.
9. Your choices and requests
You may request access to, correction of, or deletion of eligible account information, or object to non-essential communications. We may need to verify your identity and preserve records that must be retained for security, legal, or contractual reasons. Contact privacy@karoobar.org. Product-support questions may be sent to support@karoobar.org.
10. Security and limitations
We use layered technical and organizational safeguards appropriate to the service, but no system can guarantee absolute security. Use a unique password, protect your email account and devices, restrict staff access, install verified updates, and test local backups.
11. Children
Karoobar is a business product and is not directed to children. Do not create an account for a child or submit children's information unless it is lawful and genuinely necessary for an authorized business process.
12. Changes
We may update this policy as the product, providers, or legal requirements change. Material changes will be identified by a revised date and, when appropriate, an account notice.
This policy is a transparent product statement, not a claim of certification under a particular privacy framework. Customer-specific privacy, residency, and processing requirements must be agreed before a managed service is activated.