casanumbersRoom by room. Everything clear.Room by room. Everything clear.
CasaNumbers processes personal information to provide rental record management, secure access and support. The operator’s contact details appear below.
Last updated:
The service operator is responsible for purposes it determines, including account security, operating the service and responding to enquiries. Your landlord or portfolio manager determines the purpose and content of its rental records. Contact that manager about the tenancy data it manages; contact the operator about the service and privacy requests.
Information may include name, email, login-provider identifiers, hashed authentication credentials and session records; portfolio memberships; property and tenancy details; charges, recorded payments and deposit events; uploaded documents; support messages and limited technical/security logs. Do not send passwords, bank evidence or tenant documents through the public contact form.
We use account and rental information to provide the agreed service and its authorized workflows. Security and limited diagnostic processing support the legitimate interest in protecting accounts and operating a reliable service. Enquiries are used to answer the request, including steps requested before a possible service agreement. Where processing requires consent, it must be obtained for that specific purpose; this notice is not a blanket consent.
Access is constrained by portfolio, role and tenancy. Infrastructure providers support hosting, the database, private object storage and email. Google participates when its sign-in or location features are used. Optional Street View sends the address from our server to Google only on request and opens an interactive Google viewer in the browser; CasaNumbers does not cache panorama data or imagery. When an administrator requests extraction, relevant document content is sent to the configured OpenAI service. Extraction proposals require review and do not post financial records automatically.
Extraction requests use store:false. This does not itself guarantee zero retention by the provider. Provider processing locations, applicable safeguards and any international transfers must be assessed for the configured services. The reviewed provider details below form part of this notice.
Financial records preserve confirmation and correction history; deleting an account does not necessarily erase records the portfolio manager must retain. Source documents, operational backups and the contact inbox have their own retention requirements. The specific reviewed retention details below apply. Access controls, private document storage, verified transport encryption and restricted logs protect the service; no system can guarantee absolute security.
Where applicable, you can request access, correction, erasure, restriction, portability or object to processing. You can withdraw consent where processing is based on consent, without changing the lawfulness of earlier processing. Contact the responsible portfolio manager or the operator using the details below; identity verification may be necessary. You may complain to your competent data-protection authority, including Switzerland’s FDPIC or Spain’s AEPD, as applicable.
We use contact-form information to respond to the enquiry, not to subscribe you to marketing. Requests are emailed to the configured support inbox rather than stored in a contact database. This notice’s revision date identifies the current version. Material changes should be communicated in a way appropriate to their effect.
Contact messages contain the details you enter and, if you are signed in, your account ID, account/sign-in email and active portfolio roles. Subscription status can be included once a billing service exists; today it is unavailable. We do not determine whether an anonymous visitor is registered by looking up their entered email. This information is sent to the support inbox and used to respond, not to enroll you in marketing.
The contact form uses Cloudflare Turnstile to reduce automated spam. It loads when you interact with the form. Your browser contacts Cloudflare, which receives technical information such as your IP address and browser signals. CasaNumbers sends the verification token to Cloudflare for validation; we do not send the message contents or account metadata to this verification endpoint. Blocking Turnstile prevents form submission; you can contact us by email instead.
Administrators manage private property and room galleries. Authorized tenants can view their own room and common areas during upcoming/current tenancies. Images are resized, embedded metadata is removed, and only display and thumbnail variants are stored. Avoid including people or unnecessary personal information in property photos. Deletion removes active storage files and gallery records; historical encrypted backups follow the retention schedule.
We use Google Analytics after website consent and Mixpanel for app usage sharing, enabled by default with a browser-local opt-out in Settings. They help us understand navigation and completed workflows. We exclude names, emails, rental amounts, documents, addresses and form text. Website and app identifiers are separate. Changing a preference stops future collection, not data already received; contact us about previously collected data. Mixpanel uses its EU region; this does not exclude international support or subprocessor access. Provider-side retention and transfer terms apply.
Private house guides may contain network passwords and entry instructions. Their payload is encrypted in storage and released only to authorized managers and current authorized occupants. Tenant conversations use anonymous room labels while the service retains internal participant mappings for access control, blocking and abuse handling. Owners do not automatically participate in or read tenant chats. Reporting shares the previewed messages with App Administrators, who can review that evidence and restrict chat access. This is not an end-to-end encrypted messaging service. Private guide values and message contents are excluded from product analytics and browser-persistent application caches.
When configured, loading nearby places sends the saved property address to Google for location resolution when needed, and property coordinates and category criteria for Places searches. Requests and permitted photos pass through our server; tenant names, contact details and chat content are not sent with those requests. CasaNumbers retains place identifiers and time-limited coordinates rather than a persistent collection of Google names or photos. Google Maps and photo-author attribution are displayed. Opening external navigation or attribution links contacts the external provider directly under its own terms. Outdoor places are points of interest, not verified hiking routes.
