Customer owns customer data
When commercial products launch, customer operational data will belong to the customer. Cara & Bao would process it to provide requested services — not to claim ownership of the customer’s business information.
Data Processing Principles
Principles for handling information entrusted to us.
These principles describe how Cara & Bao thinks about data stewardship. They are not a signed data processing agreement for paid SaaS. DPAs and product processing terms will be introduced before commercial product services are offered.
Last updated: 2026-07-19
Data portability philosophy
Customers should be able to retrieve meaningful exports of their operational data in practical formats as products mature.
Specific export capabilities will be documented per product as they become available — not promised ahead of implementation.
Deletion requests
Individuals may request deletion of personal data where applicable law and operational constraints allow.
Contact info@carabao.digital. We will assess requests carefully and explain any lawful retention that must remain.
Operational transparency
We prefer documentation that matches reality. If a control, subprocess or transfer path is not yet established, we will not describe it as if it were.
International visitors and future customers
We expect to serve people across regions. Cross-border processing for customer product environments will be handled with appropriate safeguards once commercial and technical arrangements are in place.
Future subprocessors
As products scale, Cara & Bao may engage infrastructure or service providers to process data on our behalf.
When subprocessors are used for customer environments, we intend to maintain an accurate list and appropriate contractual terms. No invented vendor list appears here.
Contact
Questions: info@carabao.digital.