Home Technologies Inc. (d/b/a Casa) · Effective at launch
Welcome to Casa. We built Casa to help home buyers and real estate agents connect through a video-first experience. We know that your home search is personal, and we take our responsibility to protect your privacy seriously.
This Privacy Policy describes what personal information Casa collects, how we use and store it, who we share it with, your rights and choices, and how you can contact us. It applies to the Casa mobile application (iOS and Android) and any related services that link to this policy.
By using Casa, you acknowledge that your personal information will be handled as described in this Privacy Policy.
The information we collect depends on how you use Casa. We collect information you give us directly, information that is generated by your use of the app, and a limited amount of information from third-party sources.
Account and Identity. When you create a Casa account, we collect:
Home Search Preferences. If you set up a home search, we collect:
Neighbor Profile. You may optionally create a neighborhood-specific display name and bio. This information is associated with your account.
In-App Messages. When you message an agent through Casa, we store the full content of those messages, including sender identity, timestamps, delivery and read status, and any property context. Please see Section 5 for important information about message accessibility.
Activity and Engagement Data. As you use Casa, we collect information about your interactions with the app, including:
Presence Data. We record the time of your last authenticated activity in the app (last_seen_at). This is updated on every authenticated request.
Server Logs. Our servers automatically log your IP address, the HTTP method and route you accessed, response status codes, and request timing for every API request. These logs are retained for 7 days and are used to monitor service health and diagnose problems.
Casa does not collect the following, and the app does not include any SDKs that would collect them:
Casa ingests publicly available MLS data, including agent names, phone numbers, email addresses, brokerage information, DRE license numbers, bios, and headshots. This is professional licensee data used to populate agent profiles — it is not consumer personal information. Casa pulls this data from third-party sources; we do not send your personal information to those sources.
We use the information we collect to:
We do not use your information for interest-based advertising, targeted advertising, or to build advertising profiles. We do not sell your personal information.
We share personal information with the following third-party service providers who process data on our behalf. These parties are contractually restricted from using your data for any purpose other than providing services to Casa:
Amazon Web Services (AWS) — Our primary infrastructure provider. All Casa data is stored and processed on AWS in the United States (us-west-2 / Oregon). This includes: Amazon RDS (database), Amazon S3 (file storage), Amazon Cognito (authentication), Amazon API Gateway, Amazon SES (email), AWS Secrets Manager, and Amazon CloudFront (video delivery). CloudFront may cache video content at edge nodes in the US, Canada, and Europe; all other data remains in the US.
The Casa app uses Apple Maps (iOS) and Google Maps (Android) to display property pin maps. When you view a map, your device sends property coordinates and map interaction data directly to the map provider. Casa does not attach your account identity to this data. The map providers' own privacy policies govern their use of this information.
When a buyer messages an agent who has not yet claimed their Casa profile, the message content and the agent's email address on file may be forwarded to an internal Casa address via Amazon SES so that our team can route the inquiry. This is a transitional feature under active development. We do not share your message content with unrelated third parties.
Casa does not sell or share your personal information with advertising networks, data brokers, social networks, or any other third parties for advertising or marketing purposes. We have no advertising SDK or ad-network integration.
Before launch, we plan to add crash-reporting and product-analytics tools. These vendors have not yet been selected. When added, this Privacy Policy will be updated to identify them, describe the data they collect (which may include device identifiers, OS and app version, IP address, crash logs, and in-app events), and disclose their data storage regions. We will choose privacy-first tools that do not collect advertising identifiers or session recordings.
Casa does not currently process payments. When we launch paid subscriptions, billing will be handled through Apple In-App Purchase and/or Google Play Billing. In that model, Apple and Google act as the payment processors. Casa will not receive or store your credit card or other financial account information — only your subscription status.
If Casa is involved in a merger, acquisition, financing, or sale of assets, your personal information may be transferred as part of that transaction, subject to applicable law.
We may disclose your personal information when required to do so by law, regulation, or valid legal process (such as a subpoena, court order, or government request), or when we believe in good faith that disclosure is necessary to protect the rights, property, or safety of Casa, our users, or the public.
All personal information that Casa controls is stored in the United States, on Amazon Web Services infrastructure in the us-west-2 (Oregon) region. This includes your account information, search preferences, saved listings, messages, and activity data.
As noted above, CloudFront may cache property video content at edge locations in the US, Canada, and Europe. The authoritative copy of all videos and all account/database data remains in the US.
We use industry-standard security practices, including:
Important: We are committed to enabling database encryption at rest before launch. No payment data is stored in the database (no payments are processed today). While we use commercially reasonable safeguards, no system can be guaranteed completely secure.
Casa does not use HTTP cookies. Authentication is handled via JWT bearer tokens transmitted in the Authorization header and stored on your device in iOS Keychain or Android Keystore. On web builds only, tokens fall back to browser localStorage.
Messages you send through Casa are stored as plaintext in our database. They are not end-to-end encrypted. Authorized Casa personnel with database access can read message content for purposes of operating and supporting the service, investigating abuse, and complying with legal obligations.
As described in Section 3.3, when a buyer messages an unclaimed agent, the message content may be forwarded to an internal Casa email address to facilitate routing.
By using Casa's messaging feature, you acknowledge that messages are accessible to authorized Casa staff and are not end-to-end encrypted.
We retain your personal information for as long as your account is active and for a reasonable period thereafter, or as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Specific retention periods:
When you delete your account, the following data will be permanently deleted: your account record, saved and liked properties, followed agents, followed neighborhoods, search preferences, and all message threads and messages.
Certain aggregated or de-identified analytics records (such as property view-duration events) may be retained in a form that is no longer associated with your identity after account deletion. We are evaluating whether these records will be hard-deleted or de-identified in response to deletion requests — this policy will be updated when that decision is finalized.
Note: An in-app account deletion flow is in development and will be available before launch. Until then, please contact us at the address below to request deletion of your account and data.
You may access and update most of your account information directly within the Casa app, including your name, phone number, and profile photo.
You have the right to delete your account and associated personal information. Users may request deletion of their account directly within the Casa application by navigating to Settings → Privacy & Security → Delete Account. Upon verification, Casa will delete or anonymize personal information consistent with applicable legal, security, and operational retention obligations.
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
To exercise your California privacy rights, please contact us at the address in Section 10. We will verify your identity before processing your request and respond within the timeframes required by law.
Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, and port their personal information, and to opt out of the sale of personal data or its use for targeted advertising. Casa does not engage in the sale of personal data or targeted advertising. To exercise any applicable rights, please contact us at the address in Section 10.
We currently send only transactional and service-related communications. If we send marketing emails in the future, each will include an unsubscribe link.
Casa is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will promptly delete it. If you believe a child under 13 has provided personal information to us, please contact us at the address in Section 10.
The Casa app may display property tour videos sourced from YouTube, Vimeo, or broker websites. These are third-party services governed by their own privacy policies. Casa downloads and hosts these videos on our servers and does not send your personal information to those third parties in connection with video playback.
If we add links to third-party websites or services in the future, their privacy practices are governed by their own policies, and we encourage you to review them.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email (if we have your email address) and update the Effective Date at the top of this policy. Your continued use of Casa after changes take effect constitutes your acceptance of the updated policy.
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to request deletion of your account or data, please contact us:
© Home Technologies Inc. All Rights Reserved.