Privacy Policy

Casa. is the self-serve product of Casa Studios — these apply to both.

Casa Studios · casa-studios.com · In force from 13 September 2026

What we collect

Your email address (for passwordless sign-in), your name if you give it, the photographs and property details you submit, the films we generate from them, and a record of your credit purchases and usage. Sign-in links and sessions are stored as one-way hashes — we never store passwords because there are none.

What we use it for

Making your films, running your account and balance, sending the emails that operate the service (sign-in links, film-ready notifications), and improving generation quality — our system learns from quality-check results on generated footage. That learning is about how camera moves succeed or fail per room type; it is not advertising profiling, and your photos are never used to market to anyone else.

Who processes it

We use a small number of specialist providers, each engaged for one job and nothing else: taking payments, hosting the service and storing your media, generating and quality-checking the film from your photographs, and sending the service emails above. They act on our instructions, may not use your data for their own purposes, and are bound by contract to keep it confidential.

Two things worth being plain about. Your photographs are shared with the providers that generate and check your film — that is how a film gets made from them. And some of those providers operate outside the UK, so your data may be processed abroad.

We don't publish the list of providers, because which tools we use and how we combine them is the craft we sell. But you have every right to know who handles your data: ask us and we will tell you, in full.

How long we keep it

Your projects, photos and films stay in your account so your films remain re-editable and downloadable. Delete your account (from your profile page, or by asking us) and your personal data, photos and films are removed immediately; anonymous quality-check learnings (which contain no photos and no personal data) are retained, and anonymised payment records are kept as long as tax law requires. Sign-in emails that never became an account are deleted after 30 days.

Your rights

Under UK GDPR you have the right to a copy of your data, correction, deletion, and restriction of processing. The first three are self-service on your profile page — Export my data downloads everything we hold as one file, your name is editable in place, and Delete account is immediate. For anything else: leah@casa-studios.com. You can also complain to the ICO (ico.org.uk) if you think we've handled your data badly — though we'd rather you told us first.

Cookies

One cookie: your sign-in session. No analytics cookies, no advertising trackers, no third-party cookies.