CasaOS Privacy Policy

Who is responsible

CasaOS processes information for participating organizations and authorized users while beta features are tested. The responsible legal entity and privacy contact appear below when they have been published. Until a privacy contact is available, use the communication channel provided by the organization that invited you for an urgent privacy request.

Information processed

• Account and contact information, including name, email address, phone number, organization, role, and notification preferences.
• Property and operational information, including addresses, rooms, access-related details, task instructions, schedules, checklists, inventory, photos, issue reports, and completion evidence.
• Reservation and guest information made available by participating organizations or integrations, including information needed for an authorized operational task.
• Communications and operational records, including messages, comments, acceptance and completion records, audit logs, and security events.
• Payment-related records needed to administer payment features. Card or bank information may be collected and processed by the applicable payment provider rather than stored by CasaOS.
• Technical information such as device, browser, IP address, logs, and activity needed for account security, troubleshooting, and service operation.

Sources and uses

CasaOS receives information from the person who provides it, the organization that administers the account, authorized users, property-management and payment integrations, and automated platform logs. CasaOS uses it to provide and secure the platform, manage access, coordinate authorized work, communicate about platform operations, process requested integrations and payments, prevent fraud, respond to support requests, comply with law, and improve the service.

Sharing and service providers

CasaOS makes information available to the participating organization and users with authorized access. It may also disclose information to service providers that support the platform, including hosting and database services, property-management integrations, payment processors, email delivery providers, analytics and error-monitoring providers, and—if activated—SMS providers. Information may also be disclosed when required by law, to protect rights and safety, or in connection with a business transaction.

CasaOS will not share mobile information with third parties or affiliates for their marketing or promotional purposes.

SMS communications

SMS is not currently an active CasaOS transport. If CasaOS activates SMS, a user’s phone number or acceptance of these Terms alone will not be treated as SMS consent. Consent will be requested separately, will identify the sender and message purpose, and may be withdrawn at any time.

Where SMS is available, message frequency may vary and message and data rates may apply. Recipients will be able to reply STOP to opt out and HELP for assistance. Transactional and promotional messages will be separately managed; promotional messages require separate consent. CasaOS will not place door codes, lockbox combinations, payment-card information, or detailed guest or reservation information in SMS.

Retention and security

CasaOS retains information for as long as reasonably necessary for the operational purpose, security, legal obligations, dispute resolution, and applicable retention settings, then deletes or de-identifies it when appropriate. Backups and records subject to a legal hold may persist for longer.

CasaOS uses administrative, technical, and organizational measures intended to protect information. No system can promise absolute security. Users and organizations must protect credentials and promptly report suspected unauthorized access.

Choices and requests

Subject to applicable law, a person may request access to, correction of, deletion of, or portability of personal information, and may appeal a denied request where a law provides that right. Users may also be able to update profile information through CasaOS. Submit a request to the privacy contact listed below. The request process will verify identity and may be limited where information is controlled by a participating organization, another law applies, or retention is required.

Cookies, local storage, and analytics

CasaOS and service providers may use cookies, local storage, and similar technologies to keep a session working, remember preferences, protect against misuse, measure performance, and troubleshoot errors. Browser controls can limit some technologies, but doing so may affect platform features.

Children, changes, and contact

CasaOS is not directed to children and is not intended for anyone under the age required to form a binding agreement in their jurisdiction. CasaOS may revise this policy and will post a new version with its effective date.