Privacy Policy

Data controller

CasaBook is the data controller responsible for the personal data processed through this site. You can contact us at privacy@casabook.app.

What we collect

Account data: email address and hashed password.

Content you create: property details, photos and guidebook text.

Technical data: IP address and browser metadata in server logs, kept for security and debugging.

Why we process it

To create and secure your account, host your guidebooks, deliver translations, and respond to support requests.

Legal basis

Performance of the contract you enter into when you sign up (Art. 6(1)(b) GDPR), our legitimate interest in keeping the service secure (Art. 6(1)(f) GDPR), and your consent where required (Art. 6(1)(a) GDPR).

Processors and sub-processors

We use Supabase (EU region) for database, authentication and storage, and a Large Language Model provider for on-demand translations. Data is only sent to these processors to the extent needed to deliver the service.

Retention

Account and content data are kept for as long as your account is active. You can delete your account at any time, which removes your personal data within 30 days, except where retention is legally required.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to processing. You can also lodge a complaint with your local supervisory authority.

Cookies

We only use cookies and local storage strictly necessary to keep you signed in and remember your language preference. We do not use advertising or analytics cookies.

Contact

Questions about this policy? Email privacy@casabook.app.