Privacy
The short version: the CasaFinder app keeps everything on your own Mac and sends us nothing, other than the update check described below. The only personal data we hold is an email address, if you give us one, and a purchase record if you buy a licence — kept in our private storage with Vercel, with the payment itself handled by Stripe.
Who we are
CasaFinder is operated by [Trader name — to be added before launch], [Trading address — to be added before launch]. For data protection purposes we are the data controller for the information described below. Registered with the Information Commissioner’s Office under [ICO registration number — to be added once registered]. Contact: [contact email — to be added before launch].
What the app sends us: only an update check
This is the part most worth understanding, because it is unusual. CasaFinder runs entirely on your Mac. The properties it finds, the preferences you set, the ratings you give and the notes you write are stored in a database file on your own computer. None of it is sent to us, and we have no way to see it.
The one thing the app does send to our server is its update check, about once a day and whenever you choose “Check for updates”. It sends only which release channel (stable or beta) it is on. As with any web request, our hosting provider, Vercel, sees the request’s IP address in its server logs.
When the app reads a listing it sends that listing’s text to whichever AI provider you configured — either using your API key, or, if you chose the zero-setup option, through whatever Claude Code or Codex CLI subscription is already signed in on your machine (no key is pasted into the app in that case). Either way, that is a direct relationship between you and that provider, governed by their privacy policy, not ours. If you use Basic mode, no AI provider is involved at all.
Telegram messages go from your own bot to your own Telegram account. We are not a party to them.
Optional diagnostics
The app can send anonymous diagnostics. It is off by default, must be switched on deliberately, and shows you the exact list of fields before you agree. It contains no listings, no addresses, no preferences and no personal details — only a random install identifier, app and OS version, which sources ran, whether a run succeeded, and bucketed counts and durations.
You can turn it off at any time in the app. At the time of writing it is not yet switched on for anyone and the receiving endpoint is not live, so no diagnostics are being collected at all.
The email address you give us
If you join the beta or ask to be told about updates, we store your email address and the platform you told us you use (Mac, Windows or not sure), along with the time you signed up, to do that and nothing else. Our lawful basis is your consent, given by submitting the form — you can withdraw it at any time by writing to us at [contact email — to be added before launch].
Right now that is all that happens: each signup is stored as a private record in Vercel Blob storage, which is only readable with our server credentials and is not reachable by any public link. We have not yet chosen an email-sending service and we have not sent any emails to the list. If we adopt one, we will name it here before your address is passed to it. Vercel, our hosting and storage provider, acts as our processor and may process data in the United States, under appropriate transfer safeguards. We do not sell, rent or share your address with anyone else, and we will delete it on request or when the list is no longer in use.
If you buy a licence
Payments are processed by Stripe. We never see or store your card details — they go directly to Stripe and never touch our servers.
We keep a record of the purchase so we can re-issue your licence if you lose it and handle refunds. It holds your email address (if Stripe gave us one), the Stripe session reference, the amount and date of the purchase, when you gave the consent shown at checkout and the wording you agreed to, and whether your licence was issued. Stripe also keeps its own record of the payment. Our copy is stored as a private record in Vercel Blob storage, readable only with our server credentials and not reachable by any public link; Vercel, our hosting and storage provider, acts as our processor and may process data in the United States, under appropriate transfer safeguards. Our lawful basis is performance of our contract with you, and for the retention period below, our legal obligation to keep business records.
Your licence file itself contains your email address, so that a licence is traceable to the person who bought it. It stays on your computer. The app does not send it to us: when the app checks for updates it sends only which release channel (stable or beta) it is on — no licence, no email address, and nothing else that identifies you.
The website
We do not run any analytics on this website: no analytics service, no page-view counting of our own, no advertising network and no tracking pixel. The site sets no non-essential cookies, so there is no cookie banner. As with any website, our hosting provider, Vercel, processes technical request data such as your IP address in its server logs to deliver pages and keep the service secure.
How long we keep things
- Email list entries: until you ask us to delete them or the list is no longer in use.
- Purchase records: six years, as UK tax law requires for business records.
- Diagnostics, if you ever enable them: 12 months.
Your rights
You can ask us for a copy of what we hold, to correct it, to delete it, or to stop using it, and we will respond within one month. Email [contact email — to be added before launch].
In practice, for most people the honest answer to “what do you hold about me?” is an email address, a purchase record, or nothing at all.
If you think we have handled your data badly, you can complain to the Information Commissioner’s Office at ico.org.uk. We would rather you told us first so we can put it right.
A note on the property sites
CasaFinder reads publicly visible listings from Rightmove, OnTheMarket and SpareRoom from your own computer, at a low, deliberately slow rate, in the same way you would if you were browsing them. It does not create accounts, log in, or submit anything on your behalf. Zoopla is not read at all.
Changes
If we change this notice we will update the date at the top. If a change materially affects you and we hold your email address, we will tell you.