Privacy Policy

1. Who we are

CasaMio is a vacation-rental management service provided via the verhuuragenda.nl website and the CasaMio mobile app.

We are the controller of your personal data as described in this policy.

2. What data we collect

Account data:

• First and last name
• Email address
• Phone number (optional)
• Company name (optional)
• Password (stored hashed)

Business data:

• Property information and photos
• Booking and guest data you enter
• Chat messages and attachments
• Financial summaries

Technical data:

• IP address and device information
• Push-notification tokens
• Error logs and crash reports

3. What we use your data for

• Operating bookings, cleaning and chat features
• Syncing calendars with external platforms (Airbnb, Booking, etc.)
• Sending push notifications about bookings and chats
• Answering your questions and improving the service
• Meeting legal obligations

4. Legal grounds

• Performance of contract — to deliver our services.
• Legitimate interest — for product improvement and fraud prevention.
• Legal obligation — for tax or other legal retention.
• Consent — for marketing and optional features.

5. Sharing with third parties

We never sell your data. We share only when strictly necessary with:

• Hosting providers (servers in the EU)
• Email and payment processors (Apple for in-app purchases)
• Apple for push notifications via APNs

All providers are bound by data-processing agreements.

6. Security

• Encrypted connections (HTTPS/TLS)
• Bcrypt-hashed password storage
• Restricted internal access and regular audit logs
• Servers and backups within the EU

On-device, the app stores your auth token in iOS Keychain / Android EncryptedSharedPreferences.

7. Retention

• Account data: up to 90 days after closure
• Booking and invoice data: 7 years (statutory)
• Chat messages: as long as the account is active
• Log files: up to 12 months

8. Your rights

• Access — request what data we process.
• Rectification — correct inaccurate data.
• Erasure — have your account and data deleted.
• Portability — receive your data in a common format.
• Objection — object to certain processing.

You can also lodge a complaint with the Dutch Data Protection Authority.

9. Export and deletion

In the app: Settings → Export data or Settings → Delete account. Available to every account.

10. User-generated content (chat)

Chat messages are user-generated content. CasaMio applies zero tolerance for hateful, abusive or threatening content:

• An automatic filter rejects messages containing slurs or threats in six languages.
• Any recipient can flag a message via long-press.
• Hosts can block a guest — the chat closes instantly on both sides.
• We review reports within 24 hours.

11. Push notifications

We send notifications for new bookings, chat messages and payment reminders. Consent is requested on first launch and revocable at any time via iOS Settings.

12. Cookies and tracking

The website only uses functional cookies. The app uses no advertising IDs and performs no cross-app tracking.

13. Children

The service is not intended for anyone under 16.

14. International transfer

Your data is stored within the European Economic Area.

15. Changes

Material changes are announced at least 30 days in advance via email or in-app.

16. Contact

For questions or to exercise rights: privacy@verhuuragenda.nl