Privacy, in plain language.

Depending on the feature, this can include:

• Name, email address, phone number, and preferred contact method.
• Rental needs such as town, budget, move-in date, lease length, bedrooms, household size, pets, and messages.
• Property facts, photos, location, pricing, and representative contact details submitted for listing review.
• Property-management, maintenance, cleaning, or other service-request details.
• Account and profile information when you create or use an account.

OpenCasa can receive browser and device information, IP address, requested pages, timestamps, referral source, landing page, and campaign parameters. These support security controls, rate limiting, attribution, and aggregate product measurement.

OpenCasa uses first-party storage for attribution and preferences and uses Google Analytics 4 for website measurement. Analytics events are designed not to include the contact details entered into lead and inquiry forms.

• Save and respond to rental inquiries, alerts, and concierge requests.
• Review property submissions before any publication decision.
• Route an authorized request to a relevant participating property contact or independent service provider.
• Send operational emails, confirmations, and lead-management links.
• Protect the site, enforce limits, investigate abuse, and improve search and conversion flows.
• Measure which pages and campaigns produce useful requests.

Rental requests may be shared with OpenCasa’s concierge and a relevant participating owner, agent, or property manager for follow-up. A property-service request is shared with an independent provider only after the requester gives the sharing consent shown in that form.

OpenCasa also relies on infrastructure providers, including Supabase for database and authentication services, Vercel for application hosting, Resend for email delivery, Cloudflare R2 for submitted and listing imagery, and Google Analytics for website measurement. These providers process data to operate their assigned service.

OpenCasa does not sell submitted contact details to unrelated advertisers.

Information is retained while it is reasonably needed to operate the relevant request, maintain security and audit records, resolve disputes, and meet applicable obligations. Retention differs by record type; OpenCasa does not promise one universal deletion schedule.

You can request access, correction, or deletion of personal information. Some records may need to be retained where deletion would conflict with security, fraud-prevention, legal, or backup requirements.

OpenCasa uses HTTPS, managed infrastructure, access controls, and application-level validation. No online service can guarantee absolute security. Do not send payment-card details, identity documents, passwords, or other unnecessary sensitive information through an inquiry or service-request message.

You may unsubscribe through an alert email, avoid optional analytics through browser controls, or ask OpenCasa to stop using your information for a pending introduction where the handoff has not already occurred.

Privacy questions and data requests can be sent to concierge@opencasa.co. Include enough information to identify the relevant request without emailing sensitive documents.

This notice may change as OpenCasa’s real workflows change. Material updates will be posted here with a revised date.