Privacy Policy

1. About this policy

Casa Contacts ("we," "us," or "our") provides property maps, public permit information, and field-work tools for business users. This policy describes our handling of personal information on casacontacts.com, the Casa Contacts web application, related Casa Contacts pages on slackpick.com, and the Casa Contacts iPhone application where available.

Contact Casa Contacts at support@casacontacts.com with privacy questions or requests. Our customers may also collect information through their own business activities and decide how to use information they add to their workspace. Contact your organization about those practices and its access to your team account.

2. Information we collect

• Inquiries and support. When you contact us, we receive your name, email address, selected topic, message, and any optional company or phone number you provide. Contact-form messages are delivered to our support mailbox. Do not include passwords, full payment card numbers, government identification numbers, or other sensitive information in a message.
• Accounts. We process your email address, optional display name, password during authentication, verification and session records, account role, and plan or access settings. Stored passwords are protected with password hashes.
• Workspace activity. The app stores information you and your team add or generate, including saved properties, notes, visit statuses, appointments, goals, work sessions, activity statistics, and team invitations. Notes can contain personal information you choose to enter.
• Location. If you allow a location feature, the browser or app can obtain your coordinates. Team location sharing is a separate setting that can make your location visible to authorized team users. The iPhone application's location watch stops when the app is backgrounded or the map closes. You can turn off sharing and revoke permission in your browser or device settings.
• Technical and security information. Website hosting and security services can process IP addresses, requested URLs, timestamps, browser/device information, errors, and request activity. The protected contact form also uses reCAPTCHA as described below.
• Billing, when enabled. Stripe processes payment details on its hosted checkout and billing pages. Casa Contacts receives customer/subscription identifiers, plan and payment status, and related billing records; we do not receive your full card number through our contact form or store it in the app's account database.
• Public-source information. We obtain property and permit information from government records and other published sources, as described in Public property records.

3. How we use information

We use information to respond to inquiries; create, verify, secure, and support accounts; provide property and team workflows; maintain service and billing records; prevent spam, fraud, and unauthorized access; diagnose problems; and meet applicable legal obligations. Team activity and statistics support the workspace features your organization uses.

Sending an inquiry does not subscribe you to an advertising mailing list. We use the information in that inquiry to handle your request and related follow-up. We may send necessary account, security, billing, and service communications.

4. Google reCAPTCHA

Our contact form uses Google reCAPTCHA v3 to detect automated submissions and protect against spam and abuse. We load the reCAPTCHA browser service when you interact with the form, and generate a verification token when you submit. It is not loaded on our homepage or this privacy page.

reCAPTCHA can process technical information such as your IP address, browser and device characteristics, cookies, and interactions with the protected page to assess whether a request appears legitimate. It can set the _GRECAPTCHA security cookie. We use the resulting token and risk assessment to decide whether the form may send a message. Our server's verification request sends the token and a server credential; it does not include your contact message or other form fields.

Under Google's current reCAPTCHA data-processing arrangements, Casa Contacts is responsible for the customer data processed for our form, and Google processes that data under the Google Cloud terms, service-specific terms, and Cloud Data Processing Addendum. Google describes this processing as limited to providing and securing the service, not personalized advertising. See Google's reCAPTCHA privacy guidance.

If verification does not work, or you prefer not to use the protected form, email support@casacontacts.com directly. Email uses the ordinary email services involved in delivering your message.

5. Cookies and browser storage

Account and security cookies

The app uses cookies for sign-in sessions and, during a private rollout, site access. Blocking these can prevent sign-in or access to protected features.

Local preferences

Browser or app storage can retain settings such as map filters, address-search history, a selected signup plan, and local sign-out state. These settings are separate from the workspace records stored by our server.

Google security cookies

reCAPTCHA uses security-related storage when the protected form loads. Cookie controls or content blockers may affect verification; direct email remains available.

The current public marketing pages do not include advertising pixels or targeted-advertising cookies. They load fonts from Google Fonts, which can receive the network and browser information needed to serve those files. Google's Privacy Policy provides general information about Google's other services; reCAPTCHA customer-data processing is addressed separately above.

You can clear local storage, manage cookies, and control permissions in your browser or device settings. We do not alter essential account or anti-abuse processing in response to a browser's Do Not Track signal. The public marketing pages do not use advertising sale/sharing trackers for a Global Privacy Control signal to disable. You may still contact us about any privacy rights that apply to you.

6. Sharing and service providers

We share information as needed to operate the service: with hosting and backup providers; email delivery and mailbox providers; Google for contact-form security and hosted fonts; Stripe when you use billing; and map or geocoding providers when you use those features. Our app can request map tiles, searched addresses, or coordinates from providers including Esri/ArcGIS, OpenStreetMap/Nominatim, and the U.S. Census geocoder. Those services receive the data needed for the request and have their own terms and privacy practices.

Within a workspace, authorized administrators and members may see shared notes, property activity, account/team details, statistics, and location if sharing is enabled. Visibility depends on roles and workspace settings. Public-source property information is made available to authorized customers through the product; your private account credentials and contact-form messages are not published as property records.

We may disclose information when reasonably necessary to comply with law or lawful requests, protect people and the service, investigate abuse, or carry out a business transfer subject to appropriate protections and applicable notice requirements. We do not use contact-form messages to provide targeted-advertising audiences.

7. Public property records

Property and permit information can include addresses, map coordinates, parcel and permit identifiers, dates, work classifications, assessments, valuations where available, and owner or contractor details present in the source records and supported by the web interface. Coverage and available fields vary by source, county, and access level.

The iPhone property-data profile excludes owner names, owner contact/mailing details, contractor/applicant details, and identifying permit prose from the records it receives. Property addresses and identifiers remain linkable to public records, so that interface is not a guarantee of anonymous data. Information users type into notes is handled separately.

Contact us about incorrect information or a request concerning its display. We can review our own copy and presentation, but cannot change an official government record on your behalf. You may also need to contact the county or other source. Please use property and contact information lawfully and respect applicable solicitation, privacy, and do-not-contact requirements.

8. Retention and security

We retain information for the purposes described here, taking into account account activity, the need to handle inquiries and support, service operation, billing and recordkeeping requirements, legal obligations, and fraud prevention. Account/workspace records are generally retained while needed to provide the workspace; correspondence can remain in support mailboxes and related records while needed to handle the matter and maintain business records.

Deletion requests are reviewed for applicable retention requirements and other people's rights. Limited records may be retained for legal, security, or accounting purposes. Older copies can remain in protected, rotating backups until those copies expire; they are not an active public record of your account. Browser storage and records held independently by your organization or a public authority may need to be managed separately.

We use measures such as HTTPS, password hashing, access controls, and restricted service credentials to protect information. No system or transmission can be guaranteed completely secure. Protect your password, review team access, and notify us if you suspect unauthorized use.

9. Your privacy choices

You can manage available profile, workspace, location-sharing, and browser/device settings. Depending on your location and applicable law, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain uses.

Send requests to support@casacontacts.com with the subject "Privacy request." Identify the account or record involved and the action you want. Do not send a password or unnecessary identity documents. We may ask for proportionate information to verify your identity and authority before acting. An authorized agent may contact us where permitted by law. If you disagree with a response, reply to request a further review or an appeal where applicable.

Privacy requests do not require using reCAPTCHA. We handle them subject to applicable law, verification, lawful exceptions, and our role in processing the information. Contact your workspace administrator about organization-managed records; we can help identify the appropriate route. You may also contact the relevant privacy regulator where you have that right.

10. Children and international use

Casa Contacts is intended for business and professional use and is not directed to children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

We and our providers may process information in the United States or other countries where we or they operate. Those countries may have different privacy laws. Where applicable law requires safeguards or a specific legal basis for a transfer, those requirements apply to our handling of the information.

11. Updates and contact

We will post changes to this policy here and update the effective date. When required by law, we will provide additional notice of material changes. Review this page when choosing how to use the service.