Privacy

    casafor.me is an early preview. This page says exactly what we keep, what we don't, and how to make us delete it. Last updated 29 October 2026.

    What stays on your device

    Your list of searches. The conversations you can scroll back through — their titles, the homes you were shown, your shortlist — live in your browser. Clearing it deletes your copy, and we cannot restore it for you. The messages themselves we do also keep, on our servers: see below.

    A random visitor code. A meaningless string like 3f8b…, so the assistant remembers your conversation between messages and so nobody can use the preview without limit. It isn't a tracking cookie, it isn't shared with anyone, and it says nothing about who you are.

    The language you read in. If you arrived by a link that names a language, or wrote to us in one, your browser remembers it so the next visit opens the same way.

    Your answer to the cookie banner, and Google's cookies if you accepted. Google Analytics runs on this site to tell us where visitors come from. Before you answer the banner it sets no cookie and receives only anonymous, cookieless counts of what happens on the page. If you accept, it sets its own cookies, may link your visit to your Google account for audience statistics and advertising, and keeps that for up to 14 months. If you decline, it stays cookieless. Either way your answer is remembered on this device, and you can change it at the bottom of this page.

    How far you got with the questions about how you will pay or rent. Your browser remembers which questions you have answered or skipped, whether you are buying or renting, and your yes-or-no answers, so you can pick up where you left off; it never keeps an amount. If you opened the questions from a link in one of our messages, that link's code is kept only while this tab is open.

    What we keep on our servers

    Your messages and our answers, with what each one cost us and how long it took. This is how we tell whether the assistant is actually any good — and it is the only way to tell a right answer from a confidently wrong one.

    They are stored against a random visitor code, not your name. We do not know who you are unless you choose to sign in; if you do, your conversations are linked to your account so they follow you between devices. What you write is kept as you wrote it, including any address or place you mention — an office, a school, a street — because whether the assistant judged the journey correctly cannot be checked without it. We keep it to check and improve the answers, never to build an advertising profile, and it is never sold.

    The assistant's own working notes — while it searches, the assistant writes notes to itself about how it is reading your request: why it widened a search, why it left a home out. We keep those notes for 14 days so we can check its judgement and improve it, and then they are deleted automatically.

    What we learn about what you're looking for. From the conversation we keep a working note: the budget, areas and must-haves you stated, who is moving and when, how you plan to pay — and, only when your own words say so, a rough sense of who you are: an age bracket, gender, where you are moving from, what you do, the stage your family is at. Each of those carries how sure we are and which message it came from. It exists so that the assistant, and the person who handles a request of yours, do not make you repeat yourself. It is never shown to a seller, never used for advertising, and you can ask to see it or delete it. Nothing about health, religion, politics or sexuality is ever inferred: the note has no place for it, by design. The language you write in is kept with it.

    How you used the app — which screens you reached, whether you typed or spoke, which quick replies you tapped, and anything you write in the feedback box. Your words there are kept as you wrote them, because that's what tells us where we went wrong.

    The city you connected from — the city, never the street and never the address itself, and on a mobile connection only the country, because a phone's address points at the network's gateway rather than at you. We keep it, with the name of your network, so we can see where interest in this is actually coming from, and because the assistant should assume where you're looking instead of interrogating you. It's a guess made from your connection, it is often wrong by a town or two, and the assistant will tell you it's guessing.

    Your email address, if you choose to sign in — or if you ask us about a home. Nothing else asks for it.

    Your request about a home — the question you typed, your name, your e-mail, a phone number if you gave one, and which purposes you ticked. We keep it until it is answered and for a while after, so that an answer that arrives late still finds you. The message we write to the seller's side on your behalf is kept too, with who sent it and when, and so is their reply.

    How you plan to pay or rent, if you tell us — on the page “Your buyer profile”: your own money for the purchase, whether you need a mortgage, a bank's pre-approval and its amount, and, if you ask for help getting one, how many people would apply, with their age band, kind of work, monthly income, existing repayments and whether any is overdue; for renting, how many months you can pay up front, whether you have a guarantor and your household's income. We use it to help you find a home and to give you priority with agencies. It is kept apart from the working note above, and the assistant never sees it.

    Any link you make to share a home, a list or a search — the link's own code, which homes it carries, when you made it, and whether you have switched it off. We count how many times it was opened, never by whom. If you have given us a name, your first name is stored with the link, because the page tells whoever opens it who sent it.

    What we deliberately don't keep

    Your IP address. It reaches our relay, which uses it for a moment to work out which city you're near — so the assistant can assume where you're looking instead of interrogating you — and to stop one person flooding the preview. The address itself is never written down: not in our database, not in a log. The city it produces we do keep, and it's listed above.

    Voice recordings. If you speak a brief, the audio is transcribed and discarded immediately. Only the text remains, and you can correct it. The recording is never uploaded to storage and never reaches another device.

    Payment details. We take none.

    Who else sees it

    To answer you, what you write is sent to the company that runs the AI model (currently Venice, and Anthropic for reading photographs). Don't put anything in the chat you wouldn't want a third party to process.

    To work out which city you're near, your IP address is sent to a geolocation service (currently ipinfo.io), which returns a city name and the name of your network. That is all it is asked and all it is told — no message, no visitor code, nothing that ties the address to you or to anything else you do here.

    When you ask us about a home, we write to the estate agent ourselves. They receive the home, your question, and how many people asked — never your e-mail or phone, and your name only once they have signed our agreement and you have allowed it on the form. Every answer comes back through us, in writing. We may later work with other partners (a mortgage broker, for instance) in the same way — each with its own line on the form, and nothing goes to them unless you tick it.

    If you say yes on “Your buyer profile”, we may tell an agency that you are ready to buy or to rent — that one fact, never an amount, a date or any other answer. Say no, or change your mind on the same page, and we tell them nothing. If you asked for help with a pre-approval, we keep those answers for a credit partner we may work with later; today nobody else receives them.

    E-mail is sent through Resend — the link that confirms your address, our note that your question has gone to the seller's side, and the answer when it comes. Resend sees the address and the text of those messages, as any mail provider would. The team is told about a new request on Telegram; that message carries your name and the home, not the conversation.

    Google Analytics (Google Ireland Ltd) receives what happens on the page — which screens you reach, whether you sent a message or saw homes — under a random visitor code. It never receives what you wrote, your e-mail, or your request about a home. Before you accept the banner it keeps no cookie and counts anonymously; after, it may connect your visit to your Google account and to advertising. Google may move that data outside the EU under the EU-US Data Privacy Framework.

    Our database and this site are hosted by Supabase in Paris; the assistant runs on fly.io, also in Paris. Nothing is sold.

    Anyone you send a link to. A shared link needs no account: whoever has the address can open it, and can pass it on. It carries the homes and — only if you chose that when you made it — what you wrote in the conversation; the default is the homes alone. Switch a link off from your searches and it stops opening for everyone who already has it.

    Why we're allowed to

    Keeping your conversation is necessary to provide the thing you asked for. The visitor code and the limits protect the service from abuse. The usage data, and the working note about what you're looking for, are our legitimate interest in finding out whether an early product works and in answering you well — and if you'd rather we didn't, say so and we'll stop and delete it.

    How long

    While the preview runs, and then only as long as it's still teaching us something. Ask us to erase your data and we will, without needing a reason.

    What you tell us about how you plan to pay or rent is deleted 12 months after you last changed it, and at once if you ask us to erase your data.

    This is an early product: usage limits and features may change.

    Your rights

    You can ask for a copy of what we hold, ask us to correct or delete it, or object to us using it at all. Email privacy@casafor.me and include the visitor code shown below, which is how we find your data — we have no other way to identify you unless you've signed in.

    If you think we've handled this badly you can complain to your national data protection authority.

    Your visitor code

    not set yet

    Quote this if you ask us to delete your data. Clearing your browser gives you a new one and leaves the old data unlinkable to you.

    You have not answered the cookie banner on this device yet.