Privacy Policy

This policy explains what CasaSheet (“we”) does with personal information when you visit casasheet.com, create an account, generate a sheet, or open a sheet someone shared with you. It covers the whole service.

• Account information. Your email address and, if you sign in with Google or Microsoft, the basic profile they return (name, email, an account identifier). We never receive your password: sign-in runs through our authentication provider, which stores passwords hashed. They never touch our own code.
• Addresses and sheets. The addresses you enter, the sheets generated from them, and when. This is how the product works, and how your history and share links exist at all.
• Billing information. If you subscribe, our payment processor collects your payment details directly. We receive a customer reference, your plan, and whether payment succeeded, never your full card number.
• Technical information. Ordinary server and security logs: IP address, browser and device type, pages requested, timestamps and errors.
• What you send us. Anything you put in an email to support.

We do not ask for, and do not want, your clients’ personal information. Please keep it out of address fields and support emails.

Your browser also keeps a short list of your recent sheets in local storage on your own device, so the home page can show them to you. That list stays on your device; clearing site data removes it.

• Run the service: look up an address, build the sheet, deliver PDFs, images and links.
• Keep your account and your history of sheets working.
• Take payment and manage subscriptions.
• Protect the service: rate limiting, abuse and fraud prevention, debugging.
• Talk to you: service and billing notices, replies to your support emails and, only if you opt in, occasional product news, which every message lets you unsubscribe from.
• Improve the product: which sections get used, which addresses fail, where things break. We use aggregated or de-identified figures for this wherever we can.

We do not use your information to make automated decisions that have legal effects, and we do not use it to build advertising profiles.

We use a small number of strictly necessary cookies, chiefly the session cookie that keeps you signed in, and the tokens that protect forms from cross-site abuse. We do not currently run third-party analytics, advertising or social media trackers. If that ever changes we will update this policy and ask for consent where the law requires it.

Only the companies that make the product work, and only so they can do that work for us:

• Hosting and delivery. Our application host serves the site and processes request logs.
• Authentication and database. Our platform provider stores accounts and generated sheets.
• Payments. Our payment processor handles subscriptions and card data.
• Property data providers. To build a sheet we send them the address you entered. We do not send them your name, your email, or anything about your clients.
• Email delivery. The provider that sends account and support mail.

We may also disclose information where the law requires it, to protect our rights or someone’s safety, or as part of a merger, acquisition or sale of assets, in which case this policy keeps applying until you are told otherwise.

We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not rent, trade or hand your address history, your sheets or your contact details to data brokers, lead sellers or marketers.

A sheet’s URL is unlisted, but it is public: anyone who has the link can open the sheet without signing in. That is what makes a sheet shareable. Anything visible on a sheet is visible to whoever receives the link, so do not put anything private on one, and be deliberate about who you send it to. Email info@casasheet.com to have a sheet taken down.

Account information stays while your account is open. Sheets and the addresses behind them stay so your history and share links keep working. Logs are kept briefly, for security and debugging. Billing records are kept as long as tax and accounting law requires. Close your account and we delete or de-identify what we no longer need, normally within 30 days, except where the law requires us to keep something for longer.

Traffic is encrypted in transit. Access to production systems is limited, sign-in is handled by a specialist provider, and card data never touches our servers. No system is perfectly secure and we cannot promise absolute security, but if a breach affects you, we will tell you as the law requires.

You can ask us to show you what we hold, correct it, delete it, send you a portable copy, or stop emailing you. Write to info@casasheet.com from the address on your account and we will respond within 30 days, or sooner where the law is stricter. We will never treat you differently for exercising a right.

Under the CCPA and CPRA you have the right to know, delete and correct the personal information we hold, and to opt out of its sale or sharing. We do not sell or share personal information as those laws define it, so there is nothing to opt out of. In the past 12 months we collected the categories described in What we collect(identifiers, commercial information and internet activity) for the purposes described in What we do with it. Use the contact address above to exercise any right; an authorized agent may act for you with proof of authority.

CasaSheet covers US addresses and is operated in the United States. If you use it from elsewhere, your information is processed in the US, where privacy law differs from your own. Where the UK or EU GDPR applies, our legal bases are performance of a contract (running the service), legitimate interests (security and improvement), consent (marketing) and legal obligation. Use the contact address for any request under your local law.

CasaSheet is not for children. We do not knowingly collect information from anyone under 18. If you believe a child has given us information, email us and we will delete it.

If this policy changes we will post the new version here with a new effective date, and for material changes we will tell you in the product or by email before they take effect.

CasaSheet, info@casasheet.com. Privacy questions and requests go to the same place as everything else.