Legal

Privacy Policy

Effective date: March 2026 · Operator: Max Greenaway, Ontario, Canada · Contact: maxgreenaway1@gmail.com

This Privacy Policy explains how Casa (operated by Max Greenaway, "we", "us") collects, uses, stores, and protects your personal information when you use agenticcasa.com and its services. By using this site you agree to the practices described below.

1. Who We Are

Casa is an independent studio based in Ontario, Canada, offering AI app development services, an SEO analysis tool, executive furnished condo placement in Toronto, and English language teaching. We are the data controller for all personal information collected through this website.

2. Information We Collect

2.1 Information you provide directly

Account registration — email address and password when signing up for the SEO Analysis Tool.
Housing intake form — city, group type, industry, duration, suite preferences, contact name, company name, and email address.
App commission checkout — app idea description entered in the Stripe payment form.
Email correspondence — any information you include when contacting us directly.

2.2 Information collected automatically

Usage data — pages visited, time on site, browser type, device type, and referring URL, collected via analytics tools.
IP address — collected by our hosting provider (Vercel) for security and performance purposes.
Cookies — session cookies used by Supabase for authentication. We do not use advertising or tracking cookies.

2.3 Payment information

All payment processing is handled by Stripe. We do not store card numbers, CVVs, or bank details on our servers. Stripe's privacy policy applies to payment data: stripe.com/privacy.

3. How We Use Your Information

To deliver the services you have requested (housing placement reports, SEO analyses, app builds).
To manage your account and credit balance for the SEO Analysis Tool.
To process payments and send receipts via Stripe.
To contact you regarding your housing enquiry, app commission, or support request.
To improve the site and services based on usage patterns.
To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your data on the following legal bases:

Contract performance — to deliver the service you purchased.
Legitimate interests — to improve our services and communicate about your enquiry.
Legal obligation — to retain transaction records as required by law.
Consent — for any optional marketing communications (we do not currently send marketing emails).

5. Third Party Services

We use the following third-party services which may process your data:

Supabase — authentication and database (servers in the US). supabase.com/privacy
Stripe — payment processing. stripe.com/privacy
Vercel — hosting and infrastructure. vercel.com/legal/privacy-policy
Anthropic — AI analysis (content you submit for SEO analysis is processed by Claude). anthropic.com/privacy
Resend — transactional email delivery.

6. Data Retention

Account data — retained for as long as your account is active. Deleted within 30 days of account closure upon request.
Housing intake submissions — retained for 12 months then deleted.
Payment records — retained for 7 years as required by Canadian tax law.
SEO analysis content — not stored. Content is processed in real time and discarded.

7. Your Rights

Depending on your location, you may have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Request a portable copy of your data.
Withdraw consent where processing is based on consent.

To exercise any of these rights, email maxgreenaway1@gmail.com. We will respond within 30 days.

8. Cookies

We use only essential cookies required for authentication (Supabase session token). We do not use advertising cookies, third-party tracking cookies, or analytics cookies that identify you personally. You can disable cookies in your browser settings, but this will prevent you from logging in to the SEO Analysis Tool.

9. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted data transmission (HTTPS), secure authentication via Supabase, and access controls. No system is 100% secure and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of the page will reflect the most recent revision. Continued use of the site after an update constitutes acceptance of the revised policy.

12. Contact

For any privacy-related questions, requests, or complaints:
Max Greenaway
Ontario, Canada
maxgreenaway1@gmail.com

If you have a complaint about how we handle your data and are located in the EU, you have the right to lodge a complaint with your local data protection authority. In Canada, complaints may be directed to the Office of the Privacy Commissioner of Canada.