Privacy Policy

Last Updated: January 2026

OpenCasa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Costa Rica rental marketplace platform.

By using OpenCasa, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Personal Information

We collect information you provide directly to us, including:

• Name and contact information (email, phone number)
• Account credentials (encrypted password, OAuth tokens)
• Profile information (avatar, bio, preferences)
• Property details (when listing a property)
• Payment information (processed securely by third-party providers)

Automatically Collected Information

We automatically collect certain information when you use our platform:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on pages
• Referring website

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Authenticate your account
• Analyze usage patterns to improve our service
• Personalize content and recommendations

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and security alerts
• Respond to comments, questions, and customer service requests
• Communicate with you about products, services, and events
• Monitor and analyze trends, usage, and activities
• Detect, prevent, and address technical issues and fraud
• Match users with relevant rental properties using AI algorithms

3. Information Sharing

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with third-party companies to help us operate our platform:

• Supabase: Database and authentication services
• Resend: Email delivery and notifications
• Mapbox: Maps and location services
• Cloudflare R2: Image storage and CDN
• Anthropic: AI-powered rental matching and chat features

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of sensitive data in transit and at rest
• Secure authentication with Supabase Auth
• Regular security audits and penetration testing
• Access controls and principle of least privilege
• Row-level security (RLS) on all database tables

Despite our efforts, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

5. Your Rights (GDPR & CCPA)

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Portability: Receive your data in a structured format
• Objection: Object to processing of your data
• Restriction: Request restriction of processing

To exercise these rights, please contact us at privacy@opencasa.co. We will respond within 30 days.

6. Data Retention

We retain your personal information only as long as necessary:

• Account data: While your account is active
• Transaction records: 7 years for legal compliance
• Communications: 2 years
• Analytics data: Aggregated and anonymized after 25 months

When you delete your account, we will delete or anonymize your personal information within 30 days, except where required by law.

7. Children's Privacy

OpenCasa is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable data protection laws.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@opencasa.co
• Website: https://opencasa.co
• Address: Costa Rica (registered office details available upon request)