What we collect, and what happens to it.

casatend is a home records app, so almost everything in it is something you chose to put there. This page describes what that means in practice: what is stored, who else touches it, and how to take it back.

What casatend stores

Grouped by why it exists.

• Your account. Name, email address, password hash, and the security settings you turn on, such as two-factor. If you sign in with Google or Apple, we receive your name and email from them and no more.
• Your homes. Address, property details, rooms, and the people you have shared each home with, along with their role.
• What is in your homes. Fixtures and belongings, with brands, models, serial numbers, dates, warranties, photos, and the maintenance schedule built from them.
• Documents. Manuals, warranties, receipts, permits, inspections, and the rest, along with the text extracted from them so they can be searched.
• Work history. Repairs, projects, service visits, inspections, their costs and photos, and the contractors and other contacts you record.
• A contractor profile, if you make one. Your business name, company, trades, phone, service area and description, the homes and jobs homeowners have shared with you, and the record of any pause casatend puts on it. If you list it in the directory, the ZIP codes you serve, the license and insurance you enter, and casatend's decisions on your listing.
• Operational records. Active sessions and the device and network they were created from, so you can see and revoke them and be told about new devices. Push notification tokens, if you enable push. Server logs and error reports.

Processing your documents

Uploaded documents are read so they can be searched and so maintenance tasks can be pulled out of manuals. Concretely: a PDF that already has a text layer is read directly, and a scanned document or a photograph of an appliance label is sent to Google's Gemini model to be transcribed. Text from documents is then sent to Voyage AI to be turned into the numerical representations that make search work.

These are processing calls, not training data contributions. We do not sell your data, and we do not use it to advertise to you.

The shared manual library

casatend keeps a library of appliance manuals shared across all accounts, organized by make and model. This is what lets an appliance you add arrive with its manual already attached.

Contributing a manual you uploaded is opt in. When you contribute one, the manual document itself becomes available to other people who own the same model. Nothing else goes with it: not your name, not your home, not your serial number, and not any other document.

Who else processes it

The services casatend depends on, and what each one sees. All of them process data on our instructions only.

• Railway: hosts the application and the database.
• Cloudflare: stores uploaded files, and serves this website.
• Google (Gemini): transcribes scanned documents and photos.
• Voyage AI: turns document text into search representations.
• Brave Search: used to find manuals on the public web. Searches are for makes and models, not for anything about you.
• Resend: sends the emails casatend sends you, and receives receipts you forward.
• Expo: delivers push notifications to your device.
• PostHog: product analytics and error reporting.
• Sentry and Better Stack: error and uptime monitoring.

Sharing a home

When you invite someone to a home, they can see that home's records according to their role: owner, manager, or renter. When you transfer a home to a new owner, the records for that home go with it and you lose access to them, which is why casatend builds you a downloadable archive first. Your other homes are unaffected either way.

Sharing with a contractor

You can share one of your homes, or one job in it, with a contractor. We email the share to the address you give, naming the home, you and the job, never the street address, your fixtures or anyone else in the home. The share keeps that address until it is answered, revoked or runs out, and for 90 days after that, then we delete it, even when your account or theirs is deleted first. Once the contractor accepts, they see the home's address, the fixtures the share covers with their facts (a serial number among them), their manuals and open recalls, their history, and the open jobs with their instructions. Of the work recorded there they see the date, kind, title and contractor of each entry, and notes, costs and photos only on their own entries, and only the photos they added themselves: a photo you attach to a job stays out of their view, even once you confirm their work on it. They never see your other homes, your documents, receipts, spending or members. The work they record stays with your home. Your home's owners and managers can read an activity log of what each contractor did there and of each change to their access.

Sharing sends a few emails: the share itself; to whoever sent it, when it is accepted or declined; to the home's owners and managers, and whoever shared it, when a contractor marks a job done; and to the contractor, when a member confirms or declines that job and when a member ends their access.

If you are a contractor

Every member of a home you are shared into (its owners, managers and renters) sees your business name, company and trades beside the share, until the share is revoked. Unless you list your profile in the directory, nobody else sees any of it: not your phone, your service area or your description. casatend's administrators can read all of it, and can pause your contractor account if it is misused, which pauses what has been shared with you and leaves your own homes as they are.

Listing in the contractor directory is your choice, and casatend's administrators review a listing before anyone can find it. A listing shows signed-in casatend users your business name, company, trades, phone, service area, description, the ZIP codes you serve, the license and insurance you entered (as you entered them: casatend does not check them), and your account's email address, which is the address a homeowner's share reaches. It also shows how many homeowners confirmed a job you marked done, as a count only from 3, never which homes or who. A listing hides the moment you remove it, and an edit to it, or to what it shows from your profile (name, company, trades, phone, service area or description), hides it again until it is reviewed. The decisions on it, and any note an administrator wrote to you, are kept with it.

A pause is stored with your profile: when it was made, the administrator who made it, and the reason they gave. Only administrators see that record; you are told your account is paused, never why, and you can askprivacy@casatend.com for it. While your account is paused, your profile cannot be changed or deleted. Deleting your account removes your profile, any pause on it and what was shared with you, along with everything else. Otherwise, deleting your profile ends every share; the work you recorded in a homeowner's home stays with that home.

A share sent to you keeps your address for 90 days after you answer it or it runs out. You can decline one from its link without an account. Once a homeowner confirms a job you marked done, the entry is part of their home's record, and only they can change it.

If you use the contractor directory

You can search the directory with a trade and a ZIP code once your email is verified. casatend limits how often you search, to keep the directory from being copied, and records that you searched and for which trade, never the ZIP code. Saving a listing copies the contractor's name, company, phone, email and trades into the home's private contacts, which the directory never reads back. If you report a listing, the report and any note go to casatend's administrators, and the contractor is never told who reported them. A report you filed stays with the listing, without your name, after you delete your account.

If you work for a builder

A builder's business on casatend is set up by casatend's administrators, with the name and kind of the business and the people in it. Everyone in the business sees each other's name, email address and role, and the homes it holds. The work you record on those homes is recorded under your account while the business holds them. Those homes are not in your account's export, since they are the business's, not yours. casatend's administrators can read all of it, as they can read every home, and see the business's people and how many homes and handovers it has. They can pause the business, with a reason only they read; while it is paused, nobody in it can open its homes, and those homes stay as they are.

When you leave the business, or an owner removes you, or you delete your account, you stop reaching its homes at once. The receipt addresses of those homes change, so the ones you knew stop working, and the shared prep sheets and exports you made of them end.

When the buyer accepts a home your business hands over, the home and everything recorded for it becomes theirs, and nobody in your business can open it any more. Your name is taken off everything you recorded there, from its work, files and receipts to the manuals you linked, and the notes on its contacts are not handed over. A manual you uploaded stays in casatend's shared manual library under your account, as anyone's does. A change you were saving at the very moment the buyer accepts can still land, with your name on it. The buyer can share the home or a job with your business later, as with any contractor.

Your business can save a home it holds as a template, to start other homes from. A template holds that home's rooms and its fixtures' names, kinds, models, counts, notes and manuals, and the name of the person who saved it, which the business's people see. It holds no one's personal data otherwise: no serial number, date, history, document, photo, receipt or contact, and nothing of a buyer's. It goes when the business does.

The only owner of a business that still holds homes cannot delete their account until another owner is added; once it holds none, deleting that account removes the business too.

Buying a home from a builder

A builder hands you a home by email, from their business. Until you accept, the link shows the home's name, its town, its year and size, how many of each kind of record it holds, a score of how complete those records are, who sent it and from which business, their message if they wrote one, the date the link stops working, and the address it was sent to with most of it hidden.

Accepting makes the home and its records yours at once: its fixtures, manuals, history, documents, receipts and contacts, the contacts without the builder's notes on them. Nobody from the builder's business can open it after that, and their names are taken off what they recorded. You can share the home or a job with the builder later, as with any contractor.

Getting your data out, and deleting it

• Export. Account and data settings gives you an export of everything in your account as a single file, any time, without asking us, your contractor profile and what has been shared with you included, and your directory listing and the reports you filed. It leaves out the record of a pause on your contractor account (the reason an administrator gave, when, and by whom), which you can ask us for. An older share is listed without the name of its home or its job, since the homeowner may have changed them since: a share is named while it is live, and for 90 days after it was revoked or, for a share that ended on its own, after it was made.
• Archives. A home you have handed over leaves you a downloadable archive of its records.
• Deletion. Account and data settings will delete your account. We send a confirmation link to your email address first, so a deletion cannot be triggered by someone who briefly has your phone. Deleting removes your account, the homes only you belong to, and your contractor profile with any pause on it and what was shared with you. Manuals you chose to contribute to the shared library stay in it, because other people's appliances now depend on them, and they carry nothing that identifies you. A share you sent, or one sent to you, keeps the address it went to for its 90 days.

How long things are kept

Records are kept while your account exists, because that is the point of the product: a receipt from six years ago is more useful than one from six weeks ago. Deleting a record removes it. Deleting your account removes the rest, except the address a share went to, kept for the 90 days described above. Backups are kept for a limited window and then rotate out.

Children

casatend is not directed at children and is not for anyone under 13.

Changes

If this page changes in a way that matters, we will say so here and email account holders rather than quietly editing the date.

Getting in touch

Questions about any of this, including a request to see or correct what we hold, go toprivacy@casatend.com.