Privacy Policy

When you ask Casalupa for a dossier, our Chrome extension reads the listing page you are currently viewing on Idealista, Fotocasa, or Habitaclia. We send to our servers:

• The listing URL
• Listing fields: price, square meters, rooms, floor, orientation, address text, description, agency name, and photo URLs (we do not upload images themselves)
• Your chosen language for the dossier
• Your authentication token (issued after email verification)

We do not collect:

• Browsing history
• Other tabs you have open
• Cookies from any website
• Form data
• Any data from non-listing pages

When you create an account or pay, Stripe collects your payment information on its own servers. Your card never touches Casalupa's servers or our extension. We store only your email, your Stripe customer ID, and your subscription status.

To produce the dossier you requested. That is the only purpose.

• Dossiers and listing data: 90 days, then anonymized (address truncated to street level, agency name dropped) and retained only as part of our anonymized comparable-properties dataset.
• Account data (email, subscription status): until you delete your account.
• You can delete any dossier or your entire account at any time from your account dashboard. Deletion completes within 24 hours.

All data is stored in the European Union. Database in Frankfurt (EU). AI processing (when AI features are active) on EU-region endpoints only. Email via Resend EU.

Nobody, for marketing purposes — full stop. We do not sell, rent, or share your data with advertisers, brokers, or data aggregators. Operational subprocessors (Stripe, Resend, our EU-region AI provider when AI features are active, our hosting provider) process specific data only as needed to provide the service, under standard data-processing agreements.

• Right of access (Art. 15): export all data we hold about you at any time, from your account dashboard.
• Right to erasure (Art. 17): request hard deletion at any time, from your account dashboard. Completes within 24 hours.
• Right to rectification, portability, restriction, and objection also apply. Email hello@casalupa.es to exercise any of these.

Our website uses Plausible Analytics — cookieless, GDPR-compliant by default, hosted in the EU. We do not use Google Analytics, Facebook Pixel, Hotjar, LinkedIn Insight Tag, or any advertising or behavioral tracking technology.

Casalupa accepts payment only from buyers and parties whose interests align with buyers (buyer-side firms, mortgage lenders). We never accept payment from listing agencies, portals, or any party paid by the seller. This is a structural commitment, not a marketing line.

Casalupa — Barcelona, Spain
Data controller: Mohammad Peyman (autónomo)
General: hello@casalupa.es
Data protection inquiries: privacy@casalupa.es

You can also lodge a complaint with the Spanish data protection authority (AEPD) at any time.