Privacy Policy
Last updated: December 2024
Your privacy matters
This privacy policy describes how CasaMio collects, uses and protects your personal data. We process your data in accordance with the General Data Protection Regulation (GDPR).
1. Who we are
CasaMio is a vacation-rental management service provided via the verhuuragenda.nl website and the CasaMio mobile app.
We are the controller of your personal data as described in this policy.
2. What data we collect
Account data:
- First and last name
- Email address
- Phone number (optional)
- Company name (optional)
- Password (stored hashed)
Business data:
- Property information and photos
- Booking and guest data you enter
- Chat messages and attachments
- Financial summaries
Technical data:
- IP address and device information
- Push-notification tokens
- Error logs and crash reports
3. What we use your data for
- Operating bookings, cleaning and chat features
- Syncing calendars with external platforms (Airbnb, Booking, etc.)
- Sending push notifications about bookings and chats
- Answering your questions and improving the service
- Meeting legal obligations
4. Legal grounds
- Performance of contract โ to deliver our services.
- Legitimate interest โ for product improvement and fraud prevention.
- Legal obligation โ for tax or other legal retention.
- Consent โ for marketing and optional features.
5. Sharing with third parties
We never sell your data. We share only when strictly necessary with:
- Hosting providers (servers in the EU)
- Email and payment processors (Apple for in-app purchases)
- Apple for push notifications via APNs
All providers are bound by data-processing agreements.
6. Security
- Encrypted connections (HTTPS/TLS)
- Bcrypt-hashed password storage
- Restricted internal access and regular audit logs
- Servers and backups within the EU
On-device, the app stores your auth token in iOS Keychain / Android EncryptedSharedPreferences.
7. Retention
- Account data: up to 90 days after closure
- Booking and invoice data: 7 years (statutory)
- Chat messages: as long as the account is active
- Log files: up to 12 months
8. Your rights
- Access โ request what data we process.
- Rectification โ correct inaccurate data.
- Erasure โ have your account and data deleted.
- Portability โ receive your data in a common format.
- Objection โ object to certain processing.
You can also lodge a complaint with the Dutch Data Protection Authority.
9. Export and deletion
In the app: Settings โ Export data or Settings โ Delete account. Available to every account.
10. User-generated content (chat)
Chat messages are user-generated content. CasaMio applies zero tolerance for hateful, abusive or threatening content:
- An automatic filter rejects messages containing slurs or threats in six languages.
- Any recipient can flag a message via long-press.
- Hosts can block a guest โ the chat closes instantly on both sides.
- We review reports within 24 hours.
11. Push notifications
We send notifications for new bookings, chat messages and payment reminders. Consent is requested on first launch and revocable at any time via iOS Settings.
12. Cookies and tracking
The website only uses functional cookies. The app uses no advertising IDs and performs no cross-app tracking.
13. Children
The service is not intended for anyone under 16.
14. International transfer
Your data is stored within the European Economic Area.
15. Changes
Material changes are announced at least 30 days in advance via email or in-app.
16. Contact
For questions or to exercise rights: privacy@verhuuragenda.nl