Who we are
Nous Casa builds AI virtual staging software for real estate agencies. This policy explains what we do with personal information when you visit nous.casa, fill in a form, book a call, or email us at contact@nous.casa
We are the controller for the information described in this policy. Where we handle photographs and listing data on behalf of an agency, we act as a processor instead, which is explained in the next section.
What this policy covers
This policy covers our website and our dealings with you as a visitor, enquirer or customer contact.
It does not govern the staging service itself. When an agency connects its CRM to us, we receive and process listing photographs and associated data on that agency's instructions. The agency decides what is sent, why, and for how long; we only act on it. In data protection terms the agency is the controller and we are the processor, and the terms are set by the agreement and data processing agreement between us, not by this page.
The practical consequence for a member of the public: if your property is listed with an agency that uses Nous Casa and you want to know what happens to the photographs of your home, the agency is the right first point of contact. We will help them answer, and you can contact us directly if you prefer.
Information we collect
When you ask us to stage a listing. The form on our site asks for a work email address and a link to a live listing. We receive both, plus anything else you choose to put in the fields.
When you book a call. Bookings run through Cal.com. When you book, Cal.com collects your name, email address, the time you chose and any notes you add, and passes them to us. Cal.com also processes this information under its own privacy policy.
When you email us. The content of your message, your email address, and anything in the thread. We keep correspondence so we can pick up where a conversation left off.
When you browse the site. We do not track you. Our host, Framer, processes the technical information needed to serve the site, including your IP address in its server logs, and gives us aggregate visitor counts that do not identify anyone.
Listing photographs. Photographs of a property may show personal belongings, vehicles, house numbers and occasionally people. Where an agency sends us photographs, we treat them as described in the section on listing photographs below.
We do not buy personal information from data brokers, and we do not ask for special category data — health, beliefs, ethnicity and the like. Please don't send it to us.
Why we use it, and our lawful basis
Under the UK GDPR and the EU GDPR we must have a lawful basis for each use. Ours are:

Where we rely on legitimate interests, we have considered whether our interest is overridden by your rights and concluded it is not, because the processing is limited to business contact information in a business context and you can object at any time. You can ask us for the detail of that assessment.
Cookies
We do not use analytics or tracking cookies. Nothing on this site follows you between visits or builds a profile of you.
Our host sets only what is strictly necessary to serve pages, keep the site secure and hold form state while you are filling one in. Cookies of that kind do not require consent under the UK Privacy and Electronic Communications Regulations or the EU ePrivacy Directive, which is why you will not see a cookie banner here.
You can block or delete cookies in your browser at any time. Nothing on this site will stop working if you do.
Who we share information with
We do not sell personal information and we do not share it for anyone else's advertising. We use a small number of suppliers who process information on our behalf, under contract:

We may also disclose information where the law requires it, to professional advisers, or to a buyer if the business is sold — in which case we would tell you first.
Sending information outside the UK and EEA
Some of our suppliers are based in the United States, so your information may be transferred there. Where that happens we rely on the safeguards the law requires: the UK International Data Transfer Agreement or Addendum for transfers from the UK, and the European Commission's Standard Contractual Clauses for transfers from the EEA, together with the EU–US and UK–US Data Privacy Framework where the supplier is certified under it.
You can ask us for a copy of the safeguards that apply to a particular transfer.
How long we keep it

Where we act as a processor for an agency, their retention instructions apply to listing photographs rather than this table.
Listing photographs and property data
This is the part agencies and sellers care about most, so it is stated plainly.
The photographs remain the agency's. We receive them to stage them and we return staged versions. We claim no ownership and no right to use them for anything else.
We do not train AI models on your photographs. Images sent to us are used to produce the staged output for that listing and nothing more.
We never alter the property itself. Our process adds furnishings. Walls, windows, dimensions, fixed features and proportions are left as photographed, and every staged image carries a label marking it as virtually staged. This is a product commitment as much as a legal one — misrepresenting a property would create problems for the agency under consumer protection law, which is precisely what the service exists to avoid.
Deletion. An agency can ask us to delete photographs and staged outputs at any time, and we will do so within 30 days across our systems and backups.
If a photograph shows a person. Occasionally a listing photograph captures someone, or something identifying like a vehicle registration. If you believe an image of you is being processed and you want it removed, contact the agency marketing the property, or us at contact@nous.casa, and we will act on it.
Your rights
You have the right to:
Access a copy of the personal information we hold about you
Correct anything inaccurate
Delete information where we no longer have a reason to keep it
Restrict or object to our use of it, including any direct marketing — object to marketing and we will stop, with no questions asked
Portability — receive information you gave us in a machine-readable format
Withdraw consent where consent is our basis, such as analytics cookies
To exercise any of these, email contact@nous.casa. We will respond within one month. We will not charge you, and we will not treat you differently for asking.
If your request concerns photographs of a property marketed by an agency, we will usually need to pass it to that agency, since they decide what happens to that material. We will tell you when we do.
Security
We keep information on reputable hosted services, limit access to the people who need it, and use encrypted connections. No service can promise perfect security, and we won't pretend otherwise — but if a breach affects your information and presents a risk to you, we will tell you and the relevant regulator within the time the law allows.
If you find a security problem with our site or service, please tell us at contact@nous.casa. We would rather hear it from you than not hear it.
Children
Our service is sold to businesses and is not intended for children. We do not knowingly collect information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.
Changes to this policy
We will update this page when what we do changes — a new supplier, a new product, a new use of information. The date at the top shows when it last changed. If a change materially affects how we use information you have already given us, we will tell you directly rather than relying on you to notice.
Contact and complaints
For anything in this policy, email contact@nous.casa.
If you are not satisfied with how we have handled a privacy matter, you can complain to a data protection regulator. We would appreciate the chance to put it right first, but you do not have to come to us before going to them.
United Kingdom — Information Commissioner's Office, ico.org.uk, 0303 123 1113
Sweden — Integritetsskyddsmyndigheten (IMY), imy.se
Elsewhere in the EEA — the supervisory authority in the country where you live or work