Privacy Policy
Last updated: August 2026
This Privacy Policy explains how Casa Vision Inc. (operating as "Casa Express", "we", "us", or "our") collects, uses, and shares your personal information when you use Casa Express at thecasaexpress.com (the "Service").
We are based in British Columbia, Canada, and we handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia's Personal Information Protection Act (PIPA).
By using the Service, you agree to the practices described in this policy.
1. Information we collect
Account information. When you sign up, we collect your email address, name, phone number, company name, and brokerage. If you sign in with Google, we receive basic profile information from your Google account. Your password is stored only in an encrypted (hashed) form by our authentication provider; we never see or store it in plain text.
Content you provide. To use the Service, you upload property photos and enter listing details such as the property address, price, and features. You may also upload an agent headshot. Please note that property photos may incidentally contain personal information — for example, addresses, the interior contents of a home, and occasionally people, faces, or vehicle license plates.
Payment information. Payments are processed by Stripe. We do not collect or store your full payment card details. We retain only a payment reference and a record of your purchases and subscription.
Usage information. We collect basic information about how you use the Service, such as the listings you create, your usage against your plan, and standard server logs and session cookies needed to keep you signed in.
2. How we use your information
We use your information to:
- provide the Service — enhancing your photos, generating your listing description, and generating social media posts;
- create and manage your account and sign you in;
- process payments and manage your subscription and usage limits;
- send you transactional emails such as sign-up confirmation, password resets, and completion notices;
- prevent abuse and fraud (for example, by checking that an email, phone number, or agent identity is not being used to create duplicate free trials);
- comply with our legal obligations and resolve disputes.
3. How we share your information
We do not sell your personal information. To provide the Service, we share information with the following third-party providers who process it on our behalf:
-
Autoenhance.ai Ltd (United Kingdom) — receives the property photos you upload, in order to enhance them. Under Autoenhance.ai's own terms, uploaded images may also be used by Autoenhance.ai to improve and train its image-processing models. We do not train any AI models on your photos ourselves.
What enhancement changes in your photos. Enhancement alters how your photos look. On every photo we correct lighting, colour, and window detail, apply privacy blurring to faces and licence plates that are detected, and remove reflections of the photographer or camera from mirrors and windows. Two further edits run only if you switch them on for a listing: replacing a grey sky, and greening a patchy lawn. We do not add or remove furniture, and we do not generate rooms or property features that were not in your photo. You decide which photos to publish and you are responsible for the listing you publish; some listing platforms and real estate boards ask you to disclose that a photo has been digitally edited.
-
OpenAI (United States) — receives the listing details you enter (such as address, price, and features) to generate listing copy. OpenAI does not use information submitted through its API to train its models. Except for the screenshot import feature described below, we do not send your photos to OpenAI.
Screenshot import (AI field extraction). If you use our screenshot import feature, the images you upload are transmitted to OpenAI (United States) solely to extract listing details and pre-fill your listing form. Casa Vision Inc. does not store these images; they are processed in transit and discarded once extraction is complete. Under OpenAI's API data policies, OpenAI may retain these inputs for up to 30 days for abuse monitoring and then deletes them, and does not use data submitted through its API to train its models. Because screenshots may contain information relating to third parties, you may only import listings that you are authorized to use.
-
Stripe (United States) — processes payments securely. We do not store your full card details.
-
Resend (United States) — delivers our transactional emails.
-
Supabase and Vercel — host the Service and store your data. Your account data and uploaded files are stored on Supabase servers located in Canada (Central Canada region). Vercel provides global application hosting and delivery.
We may also disclose information if required to do so by law, or to protect our rights, our users, or the public.
4. International transfer of information
Your account data and uploaded files are stored primarily in Canada. However, to provide the Service, some of your information is processed by the providers listed in Section 3 and may be transferred to, stored, or processed in other countries, including the United States (for payments, email, hosting, copy generation, and screenshot field extraction) and the United Kingdom (for photo enhancement). These countries may have data-protection laws that differ from those in Canada and British Columbia, and your information may be accessible to courts, law enforcement, and government authorities in those countries in accordance with their laws. By using the Service, you consent to this transfer, storage, and processing.
5. How long we keep your information
We keep your account information and content for as long as your account is active. If you delete your account or ask us to delete your data, we will delete it from our systems within 30 days, except where we are required to retain certain records (such as payment and tax records) for longer to comply with the law.
Please note that deleting your data from our systems does not automatically remove copies that may be retained by the third-party providers listed above, in accordance with their own policies.
6. How we protect your information
We use reasonable technical and organizational measures to protect your information, including encryption of passwords, access controls on our database, and restricting administrative access to authorized accounts only. Payments are handled by Stripe, which maintains PCI-DSS-compliant security. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access, use, or disclosure.
7. Your privacy rights
Under PIPEDA and BC PIPA, you have the right to:
- access the personal information we hold about you;
- correct information that is inaccurate or incomplete;
- withdraw your consent and request that we delete your account and associated data, subject to legal retention requirements;
- ask how your information is used and with whom it is shared.
To exercise any of these rights, contact us at info@casavision.ca. We will respond within a reasonable time as required by law.
8. Cookies and Analytics
We use two categories of cookies.
Essential cookies. These are required for Casa Express to work — they keep you signed in and maintain your session. They are always active and cannot be turned off.
Analytics and advertising cookies. With your consent, we use Google Analytics 4 (Google LLC, United States) and the Meta Pixel (Meta Platforms, Inc., United States) to understand how Casa Express is used and to measure the effectiveness of our advertising. These tools may set cookies and collect information such as the pages you visit, your approximate location, your device and browser type, and the site that referred you. This information is processed in the United States.
These scripts are not loaded unless you accept them. On your first visit, a banner asks for your choice. If you decline — or if you make no choice at all — no analytics or advertising script is loaded, and no analytics cookie is set.
You can change your decision at any time using the Cookie preferences link in the footer.
9. Children
Casa Express is a business tool intended for real estate professionals. It is not directed at children, and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Your continued use of the Service after a change takes effect means you accept the updated policy.
11. Contact us and complaints
If you have questions about this policy or how we handle your information, contact us at info@casavision.ca.
If you are not satisfied with our response, you have the right to make a complaint to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, for matters under BC law, to the Office of the Information and Privacy Commissioner for British Columbia (oipc.bc.ca).