Privacy
Policy
Casalink's commitment to protecting your personal data across our AI-powered property management platform.
Introduction & Scope
Casalink is an AI-powered property management platform operated by Design Aura ("we," "us," or "our"), accessible at casalink.app, including the web application, Progressive Web App (PWA), mobile interfaces, and related APIs (collectively, the "Platform").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use our Platform, whether as a property owner, property manager, tenant, resident, contractor, service provider, or visitor (collectively, "Users" or "you").
This Privacy Policy applies to all Users globally, with additional jurisdiction-specific provisions outlined in Section 18 for users in the EEA, United Kingdom, United States, Canada, Nigeria, India, and other applicable jurisdictions.
Definitions
Information We Collect
Account & Identity
- ◆Full name, email address, phone number, and profile photograph
- ◆Business name, registration number, and business address (for property managers and service providers)
- ◆Government-issued identification (where required for identity verification or regulatory compliance)
- ◆Role designation: property owner, property manager, tenant, contractor, or service provider
Property & Portfolio
- ◆Property addresses, descriptions, type, age, size (square metres), and zoning classification
- ◆Portfolio composition and property health scores
- ◆Property photographs and floor plans
- ◆Equipment and infrastructure inventories (generators, boreholes, HVAC systems, and other critical assets)
- ◆Occupancy status, lease terms, and historical maintenance records
Financial & Payment
- ◆Bank account details, mobile money numbers, and card information (processed through PCI-DSS compliant payment processors)
- ◆Rent amounts, payment schedules, and payment history
- ◆Expense records, invoices, receipts, and budget allocations
- ◆Service charge breakdowns and shared cost calculations
- ◆Financial reports and tax-related documentation
Verification & Integrity Data
Technical & Device
- ◆IP address, device type, operating system, and browser type
- ◆Device identifiers and mobile network information
- ◆PWA installation status and push notification preferences
- ◆Network connectivity status (online, offline, 2G/3G/4G/5G)
- ◆Usage logs, session duration, feature engagement, and error reports
How We Collect Information
Directly From You
We collect information you voluntarily provide when you create an account, add properties, submit maintenance requests, upload photographs, make or receive payments, communicate with other users, or contact our support team.
Automatically
When you access the Platform, we automatically collect technical data through cookies, log files, and similar technologies — including device information, network data, usage patterns, and performance metrics — helping us optimise the Platform for varied network conditions, including low-bandwidth environments.
Through Verification
Our verification system analyses photographs submitted for work completion purposes. This processing generates verification scores, quality assessments, authenticity indicators, and compliance reports using image content, contextual integrity signals, and comparative before-and-after analysis.
From Third Parties
- ◆Payment processors (transaction confirmations and payment status)
- ◆Weather data providers (for predictive maintenance and seasonal alerts)
- ◆Identity verification services (where applicable)
- ◆Public property records and regulatory databases (where available)
How We Use Your Information
Core Platform Services
- ◆Providing, operating, and maintaining the property management platform
- ◆Processing property registrations, tenant onboarding, and user account management
- ◆Facilitating work order management from request through completion and payment
- ◆Enabling rent collection, payment processing, and financial tracking
- ◆Generating property health scores, dashboards, and portfolio analytics
AI-Powered Features
- ◆Conducting verification of task completion photographs using computer vision
- ◆Validating submission authenticity through contextual integrity analysis
- ◆Generating predictive maintenance schedules based on property profiles, climate data, and historical patterns
- ◆Providing intelligent contractor recommendations based on specialty, performance, and workload
- ◆Automating task escalation, smart scheduling, and weather-based alerts
Communication & Notifications
- ◆Sending automated maintenance reminders, payment due date alerts, and task notifications
- ◆Delivering contractor assignment notifications via WhatsApp, SMS, or email
- ◆Providing real-time status updates to property owners, tenants, and contractors
Legal & Compliance
- ◆Complying with applicable laws, regulations, and legal obligations
- ◆Establishing, exercising, or defending legal claims
- ◆Preventing fraud, abuse, and unauthorized access to the Platform
- ◆Maintaining audit trails for regulatory and insurance purposes
AI & Automated Processing
Verification System
Casalink employs AI-powered computer vision to analyse task completion photographs. The system evaluates work completion status, material quality, workmanship standards, and submission authenticity by cross-referencing visual content with contextual integrity signals — ensuring submitted evidence is genuine and reflects actual work performed.
Human Oversight
Predictive Maintenance AI
Our predictive maintenance engine uses machine learning to analyse property age, type, climate conditions, equipment lifecycle data, historical maintenance records, and weather forecasts to generate maintenance schedules and cost forecasts. The system continuously refines its predictions based on actual property performance data within your account.
No Training on Your Data
Casalink does not use your Personal Data, photographs, Verification Data, or any user-submitted content to train, fine-tune, or improve AI or machine learning models. Your data is processed solely to deliver the Platform services described in this Privacy Policy and is never repurposed for model development, including through anonymisation or aggregation techniques.
Right to Contest Automated Decisions
You have the right to request human review of any automated decision that significantly affects you, obtain an explanation of the logic involved in automated processing, and contest the outcome of automated decisions through our support channels at [email protected].
Legal Bases for Processing
International Data Transfers
Casalink operates across multiple countries. Your data may be transferred to and processed in countries other than your country of residence. Where we transfer data internationally, we implement appropriate safeguards:
- ◆Standard Contractual Clauses (SCCs) approved by the European Commission
- ◆Adequacy decisions where applicable
- ◆Encryption in transit and at rest using industry-standard protocols
- ◆Contractual commitments with sub-processors requiring equivalent levels of data protection
Data Retention
Upon account deletion, we anonymise or delete your Personal Data within 30 days, except where retention is required by law or legitimate business purposes as described above.
Data Security
Technical Measures
- ◆256-bit SSL/TLS encryption for all data in transit
- ◆AES-256 encryption for data at rest
- ◆Daily encrypted backups with geographic redundancy
- ◆Two-factor authentication (2FA) available for all user accounts
- ◆Role-based access controls ensuring users only access data relevant to their role
- ◆Regular penetration testing and vulnerability assessments
- ◆Secure cloud infrastructure with SOC 2 Type II certified providers
Organisational Measures
- ◆Mandatory data protection training for all Casalink personnel
- ◆Background checks for employees with access to Personal Data
- ◆Data processing agreements with all third-party processors
- ◆Incident response plan with 72-hour breach notification commitment
- ◆Regular privacy impact assessments for new features and data processing activities
Offline Security
Data cached for offline functionality is encrypted and protected by the device's native security mechanisms. Offline data syncs securely when connectivity is restored and is purged from local storage according to configurable retention settings.
Your Rights & Choices
Depending on your jurisdiction, you may have some or all of the following rights regarding your Personal Data:
Children's Privacy
The Platform is not directed to individuals under the age of 18 (or the applicable age of majority in your jurisdiction). We do not knowingly collect Personal Data from children. If we become aware that we have collected Personal Data from a child without appropriate parental consent, we will take steps to delete such data promptly.
Where tenants include minors as members of their household, we process only the minimum information necessary for property management purposes, managed through the adult tenant's account.
Third-Party Links & Services
The Platform may contain links to third-party websites, services, or applications (such as payment gateways or weather services). This Privacy Policy does not apply to any third-party services. We encourage you to review the privacy policies of any third-party services you access through the Platform.
PWA & Device Permissions
The Casalink Platform (including the Tenant PWA) may request the following device permissions:
All permissions are requested on an as-needed basis with clear explanations and can be revoked through your device settings at any time. Revoking permissions may limit certain Platform functionality.
Offline Functionality & Data Sync
- ◆The Platform caches essential data locally on your device to enable offline access to tasks, reports, and decision-making tools
- ◆Locally cached data is encrypted using the device's native security capabilities
- ◆When connectivity is restored, data syncs automatically with our servers using encrypted connections
- ◆Conflict resolution for offline edits follows a last-write-wins protocol, with full audit logging of all changes
- ◆Users can configure which data is cached for offline access through Platform settings
- ◆Local cached data is periodically purged according to configurable retention policies
Jurisdiction-Specific Provisions
EEA & United Kingdom
If you are located in the EEA or UK, you have rights under the General Data Protection Regulation (GDPR) and the UK GDPR, respectively. These include the rights outlined in Section 12, along with the right to lodge a complaint with your local supervisory authority. For international transfers outside the EEA/UK, we rely on Standard Contractual Clauses or adequacy decisions as appropriate.
United States (CCPA/CPRA)
California residents have the right to know what Personal Data is collected and how it is used, the right to delete Personal Data, the right to opt out of the sale or sharing of Personal Data (we do not sell or share your data), and the right to non-discrimination. We also comply with VCDPA, CPA, CTDPA, and other applicable state privacy laws.
Canada (PIPEDA)
We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. You have the right to access and challenge the accuracy of your Personal Data, be informed of the purposes for collection, and withdraw consent.
Nigeria (NDPA 2023)
We comply with the Nigeria Data Protection Act 2023 and regulations issued by the Nigeria Data Protection Commission (NDPC). We conduct Data Protection Impact Assessments for high-risk processing activities, including AI-powered verification.
India (DPDP Act 2023)
We comply with the Digital Personal Data Protection Act 2023. You have the right to access information about your data processing, request correction and erasure, nominate a representative, and seek grievance redressal. Our Grievance Officer can be contacted at [email protected].
Kenya (DPA 2019)
We comply with the Data Protection Act 2019 and guidance issued by the Office of the Data Protection Commissioner. Your rights are substantially similar to those outlined in Section 12.
Ghana (DPA 2012)
We comply with the Data Protection Act 2012 (Act 843) and have registered with the Data Protection Commission of Ghana as a data controller where required.
South Africa (POPIA)
We comply with the Protection of Personal Information Act (POPIA). You have the right to lodge complaints with the Information Regulator. Our Information Officer can be contacted at [email protected].
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- ◆Post a prominent notice on the Platform
- ◆Send an email notification to the address associated with your account
- ◆Provide at least 30 days' notice before material changes take effect
Your continued use of the Platform after changes become effective constitutes acceptance of the revised Privacy Policy.