Privacy Policy

Last updated: March 2026

1. Overview

Casa Intelligence Pty Ltd (ABN pending) is committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This policy describes how we collect, use, disclose, and protect personal information.

2. Information We Collect

Account Information

When you create an account: name, email address, phone number (optional), business name, and professional segment (town planner, buyer's agent, or real estate agent).

Usage Data

How you interact with the Platform: pages visited, reports generated, features used, session duration, and browser/device information.

Payment Information

Payment details are processed by Stripe and are never stored on our servers. We retain transaction records (amount, date, plan) for billing purposes.

Property Data

Property addresses and search queries you submit. This data is used to generate reports and improve our services.

3. How We Use Your Information

We use your information to: provide and maintain the Platform and its features; process payments and manage subscriptions; generate property reports and analysis; send transactional emails (report delivery, account notifications); improve and develop new features; comply with legal obligations; communicate service updates and changes.

4. Legal Basis for Processing

Under Australian Privacy Principles, we process your information based on: your consent (account creation, marketing communications); contractual necessity (subscription services); legitimate interests (service improvement, security); legal obligations (tax records, compliance).

5. Data Sharing

We share personal information only with the following service providers, each under appropriate data processing agreements:

  • Stripe — Payment processing
  • Supabase — Database hosting and authentication
  • Anthropic — Intelligence engine provider for report generation (property data only, no personal information)
  • Vercel — Website hosting
  • Resend — Transactional email delivery

We do not sell personal information to third parties.

6. Data Retention

Account data is retained while your account is active and for 12 months after closure. Generated reports are retained for 24 months. Payment records are retained for 7 years as required by Australian tax law. Usage analytics are retained in aggregated, de-identified form indefinitely.

7. Your Rights (APPs)

Under the Australian Privacy Principles, you have the right to: access your personal information held by us; request correction of inaccurate information; request deletion of your personal information (subject to legal retention requirements); opt out of marketing communications at any time; lodge a complaint about our handling of your information.

8. Cookies and Tracking

We use essential cookies for authentication and session management. Analytics cookies (Google Analytics) help us understand how the Platform is used. You can disable non-essential cookies through your browser settings. The Chrome Extension does not use cookies.

9. Children's Privacy

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

10. International Transfers

Some service providers (Stripe, Anthropic, Vercel) may process data outside Australia. We ensure appropriate safeguards are in place through contractual agreements that provide equivalent privacy protection.

11. Security

We implement industry-standard security measures including: encryption in transit (TLS) and at rest; secure authentication via Supabase Auth; API key hashing (SHA-256); regular security reviews. No system is completely secure — we cannot guarantee absolute data security.

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email at least 14 days before taking effect. The "last updated" date at the top indicates the most recent revision.

13. Contact Us

For privacy enquiries or to exercise your rights, contact our Privacy Officer at hello@casaintelligence.com.au.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.