Privacy policy

Who we are

Kaluara Group Pty Ltd (ABN 77 702 159 573), Melbourne and Victoria. For anything about your details, email contact@kaluara.com.

What we collect

When you ask a question or book

• Your name, email and phone number.
• Your event: the date, times, venue address, type of event and anything you write to us.
• Your design: the choices you made, and any files you uploaded (a logo, a template, a screen background).
• Whether you agreed to hear from us by email.

When you pay

Card payments are taken by Stripe. Your card number goes straight to Stripe and never reaches us; we keep a record of what was paid and when.

When you use the designer

• Your design is kept in your own browser so it is still there next time. It is not sent to us until you share it, email it to yourself or book.
• “Take photos” uses your camera inside your browser. The photos, and the cut-out of the background, are made on your device and are never uploaded.
• “Share” saves your design’s settings under a short link. It holds no files and nothing about you.
• “Email me this design” keeps your email address against that design so we can send the link and one reminder two days later. Every email has an unsubscribe link.

Design in Canva

Design in Canva is for your Kaluara account, so you sign in first. If you connect Canva, Canva gives us a token that lets this site create, open and export the designs you start here, and your Canva display name, which the designer shows so you can see which Canva account is connected. Both are kept only in an encrypted cookie in your browser, tied to your Kaluara account and shared by kaluara.com and booking.kaluara.com; we do not store them anywhere else, and signing out removes them. The exported image of your design goes straight to your browser. You can disconnect at any time from the designer, or by revoking Kaluara in your Canva account settings.

The Kaluara app in Canva

The Kaluara app inside Canva puts the start screen’s buttons and the print’s photo windows on your design. Everything it changes is on your design in Canva. It sends us only where the buttons sit on the page and which session each one starts, or where the photo windows sit and how many there are, with the design’s id and Canva’s ids for your Canva user and team, which Canva signs so we know the request came from the app. We use them to put the buttons on the booth’s screen and the photos in their windows for that design, and to limit how often one person can save. No name, email or picture is sent, and you do not need a Kaluara account to use it.

Your account

Your bookings and your account live at booking.kaluara.com, our own site for customers. If you sign in to see your bookings, your account is your email address. We also keep a mobile number you add and prove is yours, and, if you continue with Google, your Google account’s id, name and email address (nothing else from Google). A sign-in code goes only to an address already on a booking, or one invited to a team, and only when you ask for one. If you join a team, its other members see your name and email and the bookings you choose to share with it; nothing of yours is shared until you choose. Designs you save to your account are kept until you remove them.

Analytics

We may count how the site is used (for example, which designer features are opened) with PostHog. We record named events and the design choices behind them, never anything you type into a field.

Why we use it

• To answer your question, quote, confirm and run your booking.
• To print your design and set up the booth’s screen for your event.
• To take payments, issue receipts and refund when needed.
• To send the emails you asked for, and marketing only if you agreed to it.
• To improve the site.

We do not sell your details, and we do not use them for anything unrelated to your event.

Who else sees it

Only the services we need to run the booking, each under its own privacy terms:

• Supabase, which stores our bookings and the files behind them.
• Stripe, for card payments.
• Resend, which sends our emails.
• Google Maps, which is sent the venue address to work out the travel distance.
• Vercel, which hosts this site.
• PostHog, for site analytics.
• Canva, only if you choose to design there.
• Google, only if you choose to sign in with Google.
• Twilio, which sends a sign-in code by text when you ask for one.

Some of these services store data outside Australia, including in the United States. We choose providers that protect it to a standard comparable to the Australian Privacy Principles. We may also disclose details where the law requires it.

Photos from your event

Your event’s gallery is stored privately and reached by a link that only you receive. Anyone you share it with can see it. Ask us and we will take the gallery down.

Cookies and storage

The site keeps your design, your booking in progress and your place in the designer in your browser’s storage, so they survive a refresh. “Start over” clears all of it. Canva’s cookies are set only if you connect Canva. Signing in to your account sets one cookie that keeps you signed in on that device until you sign out (or 60 days without a visit). It is shared by kaluara.com and booking.kaluara.com, so you are signed in on both; our other sites under kaluara.com receive it too and do not use it. We do not use advertising cookies.

How long we keep it

Booking and payment records are kept for as long as Australian tax law requires (generally seven years). Enquiries that never became a booking, design follow-ups and event galleries are deleted when no longer needed, or sooner if you ask.

Your rights

You can ask to see the details we hold about you, correct them, or have them deleted where we are not required to keep them. Email contact@kaluara.com and we will reply within 30 days.

If you are unhappy with how we handled a privacy matter, tell us first. If we do not resolve it, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

We will update this page if anything here changes, with the date at the top.