Privacy Policy

NestCalc.ai LLC dba CasaWise.ai ("CasaWise.ai," "we," "us," or "our") is a Wyoming limited liability company. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the CasaWise.ai application (the "Service"). By using the Service, you consent to the practices described in this policy.

1. Information We Collect

Account Information

When you create an account, we collect your email address and an encrypted password. Authentication is managed by Supabase. We do not store your password in plaintext.

Property & Deal Data

You may enter property details such as address, purchase price, loan terms, rental income estimates, operating expenses, and investment strategy preferences. This data is stored in your Supabase account so you can save and retrieve analyses.

Payment Information

If you subscribe to a paid tier on the CasaWise.ai website, payment is processed by Stripe. We do not receive or store your full credit card number. Stripe provides us with a tokenized reference, your subscription status, and billing history. See Stripe's Privacy Policy for details on how Stripe handles your payment data.

If you purchase a paid subscription or pass inside one of our mobile apps, payment is processed by the app store you bought through - the Apple App Store or Google Play - under that store's own privacy policy. Stripe is not involved in those purchases. We do not receive or store your card details; the store provides us only your purchase and subscription status.

Usage Data

We automatically collect technical information such as browser type, device type, pages visited, and timestamps. This data helps us improve performance and diagnose issues.

Location-Related Data

When you enter a property address, we send it through our server-side proxy to two third-party geocoding providers: LocationIQ (locationiq.com) receives address fragments as you type to power autocomplete suggestions, and Smarty (smartystreets.com) receives the address when verification runs to confirm it against the US postal registry. These providers receive the address only - we do not share your IP address with them.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your subscription and manage your account
• Run investment calculations and generate deal projections
• Generate AI-powered deal narratives, market intelligence, and macro dashboards
• Fetch real-time economic data (mortgage rates, treasury yields) for your analyses
• Improve, personalize, and expand the Service
• Communicate with you about your account, updates, or support requests
• Detect and prevent fraud or abuse

3. Third-Party Services

We rely on the following third-party services to operate CasaWise.ai. Each service receives only the minimum data required to perform its function:

• Supabase - Authentication and database. Stores your account credentials (hashed), saved deals, and cached API responses. Hosted in the United States.
• Stripe - Payment processing for paid subscriptions purchased on the CasaWise.ai website. Receives your email and payment method. We never see or store your full card number.
• Apple App Store / Google Play - Payment processing for subscriptions and one-time purchases made inside our mobile apps. We receive your purchase and subscription status, never your payment card details.
• Perplexity Sonar - Market intelligence for paid tiers. Receives the property city and state to generate local market analysis. No personal data is sent.
• Anthropic Claude (Haiku) - AI deal narratives for paid tiers. Receives anonymized property metrics (numbers only, no address or personal data) to generate investment commentary.
• Google Gemini - Powers macro economic dashboards for all tiers. Receives economic indicator queries. No personal or property-specific data is sent.
• FRED API (Federal Reserve Economic Data) - Provides real-time treasury yields and mortgage rate data for all tiers. No personal data is sent.
• LocationIQ - Autocomplete typeahead, accessed through our server-side proxy. Receives partial address strings as you type. Your IP address is not forwarded.
• Smarty - Address verification, accessed through our server-side proxy. Receives addresses entered into the calculator. Your IP address is not forwarded.
• Netlify - Hosting and serverless functions. Serves the application and processes API requests. See Netlify's Privacy Policy.

4. Cookies & Local Storage

CasaWise.ai uses browser local storage (not traditional cookies) to:

• Maintain your authentication session (Supabase JWT token)
• Store your current deal inputs so they persist between page reloads
• Remember UI preferences (e.g., last active tab)

We do not use third-party tracking cookies. We do not use advertising cookies. If Stripe or Supabase set cookies for session management, those are governed by their respective privacy policies.

5. Data Retention

We retain your account data and saved deals for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law (e.g., payment records for tax compliance).

Cached API responses (market data, macro dashboards) are stored in our database with a 6-hour time-to-live and are automatically overwritten. These caches contain no personal data.

6. Data Security

We implement reasonable technical and organizational safeguards to protect your data:

• All data in transit is encrypted via HTTPS/TLS
• Passwords are hashed by Supabase (bcrypt)
• API endpoints validate JWT tokens and request origin
• Payment data is handled entirely by our payment processors - Stripe (PCI-DSS compliant) for website purchases, and the Apple App Store or Google Play for in-app purchases
• Serverless functions enforce origin validation and authentication

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access - Request a copy of the personal data we hold about you.
• Correction - Request correction of inaccurate or incomplete data.
• Deletion - Request deletion of your personal data, subject to legal retention requirements.
• Portability - Request your data in a portable, machine-readable format.
• Opt-Out of Sale - We do not sell your personal data. We do not share your data with third parties for their marketing purposes.

California Residents (CCPA): You have the right to know what personal information we collect, request its deletion, and opt out of any sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@nestcalc.ai.

European Residents (GDPR): If you are located in the European Economic Area, you have additional rights including the right to lodge a complaint with your local data protection authority. Our lawful basis for processing is contract performance (providing the Service) and legitimate interest (improving the Service).

8. Children's Privacy

CasaWise.ai is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at support@nestcalc.ai.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or an in-app notice. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

• Email: support@nestcalc.ai
• Mailing Address: NestCalc.ai LLC dba CasaWise.ai, 30 N Gould St Ste R, Sheridan, WY 82801
• Entity: NestCalc.ai LLC dba CasaWise.ai - a Wyoming limited liability company

Effective Date: March 30, 2026