How we handle your data.

• Account info — your email, name (if provided), and password hash (managed by Supabase Auth).
• Preferences — your council areas, opportunity types, and budget range, used to curate your daily brief.
• Activity — listings you save, pipeline stages, AI conversation content per property, and lifecycle events (signup, first brief opened, etc.). This powers your dashboard and helps us improve curation.
• Billing — Stripe handles all payment data. We store your Stripe customer ID and subscription status; we never touch your card number.
• Documents — anything you upload to the document-checker flow is stored in Supabase Storage, encrypted at rest, scoped to your user.

• To deliver your daily brief and dashboard intelligence.
• To improve Casa AI curation quality, in aggregate. We never train external AI models on your data; AI inference uses Anthropic's API under their no-training data-use policy.
• To send transactional emails (welcome, billing receipts, trial reminders) and the daily digest.
• To monitor service health (errors, performance) via Sentry, with user IDs but no sensitive payload data.

• Stripe — payment processing.
• Resend — email delivery.
• Supabase — database, auth, file storage hosting (in the Seoul region).
• Anthropic Claude and Google Gemini — AI inference. Both providers contractually do not train on our API requests.
• Vercel — application hosting.

We never sell your data to advertisers, data brokers, or other third parties.