Privacy Notice

1. Who is responsible for your data?

[legal business name], trading as Casa Soft, is the controller of personal data described in this notice. Contact: casasoftsupport@gmail.com. Postal address: [business address]. Add your data-protection contact and registration details, if applicable, before launch.

2. Where this notice applies

This notice is intended for Casa Soft users in the United States, United Kingdom and United Arab Emirates. Privacy rules may vary by US state and by UAE federal, emirate or free-zone jurisdiction. Where mandatory local law gives you additional rights or requires us to provide extra information, that law applies alongside this notice.

3. Information we collect and why

We collect account information such as your email address and sign-in data. We also process portfolio information you choose to enter, including property details, tenant contact information, lease information, payment records, maintenance notes and documents. If you contact us, we process your message.

We use this information to provide, secure and support Casa Soft; authenticate users; store and display records; respond to support requests; prevent misuse; and meet legal obligations. Our usual legal bases are performing a contract with you, legitimate interests in running a secure service, and compliance with legal obligations. Where consent is required, we will ask for it.

4. Tenant and other third-party information

If you enter another person’s information, such as tenant details, you are usually the controller for that information and Casa Soft acts as a processor on your behalf. You are responsible for having a lawful basis, giving an appropriate privacy notice, and responding to privacy requests. Do not enter more personal information than needed.

5. Service providers and Casa AI

We use selected providers for hosting, deployment, database and authentication services, and—when you choose Casa AI—an AI provider. They process information only as needed to provide services to us and under appropriate safeguards. Before launch, publish the current provider list and processing locations here.

Casa AI processes the portfolio summary or text you choose to send for a specific request. Do not submit passwords, bank details, identity-document numbers or other highly sensitive information. AI output may be inaccurate and must be reviewed. Casa AI is not used to make automated decisions about tenants or other people.

6. Retention and security

We keep account and portfolio information while your account is active and for [insert retention period and deletion process] afterwards, unless a longer period is required by law or needed to resolve a dispute. Document your backup and deletion timetable before launch.

We use reasonable technical and organisational measures designed to protect personal data. No online service can promise absolute security. Keep your password private, use a strong unique password, and contact us promptly if you believe your account has been accessed without permission.

7. International transfers and your rights

Some providers may process information outside your country. Where required, we will use an adequacy decision or appropriate contractual or other safeguards. Confirm final provider locations and transfer mechanisms before launch.

Depending on applicable law, you may have rights to access, correct, delete, restrict or object to processing of personal data, and to data portability. You may withdraw consent where we rely on it. Contact casasoftsupport@gmail.com to make a request. UK users may complain to the Information Commissioner’s Office; US and UAE users may have additional local routes.

8. Cookies and changes

Casa Soft does not use advertising cookies in this version. If we introduce non-essential cookies or analytics, we will update this notice and provide consent choices where required. We may update this notice as the service changes; the latest version will be posted here with an updated date.