Privacy Policy

Introduction

CasaButler is a product of Winito Inc. ("Winito," "we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CasaButler mobile application and services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Account Information

When you create an account, we collect:

• Name
• Email address
• Phone number (if provided)
• Authentication credentials

Email Content

When you CC or forward emails to your butler address (@casabutler.ai), we collect and store the complete email content, including:

• Sender and recipient information
• Subject line and email body
• Attachments
• Metadata (dates, headers)

Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, interaction patterns, time spent in app
• Log Data: IP address, access times, app crashes and errors

Cookies and Tracking

Our website uses cookies and similar tracking technologies to analyze traffic and improve your experience. These include:

• Essential cookies: Required for basic website functionality
• Analytics cookies: Help us understand how visitors use our website

You can control cookies through your browser settings, though some features may not function properly if cookies are disabled.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process emails using AI to extract vendor information, billing details, and communication summaries
• Send transactional notifications (bill reminders, service updates)
• Send marketing and promotional communications (you can opt out anytime)
• Analyze usage patterns to improve the app
• Respond to customer support requests
• Detect and prevent fraud or abuse

AI Processing and Third-Party Services

Important: To provide our core email analysis features, we share email content with third-party AI service providers (such as OpenAI or Anthropic). These providers process your emails to:

• Identify vendors and service providers
• Extract billing amounts and due dates
• Generate communication summaries
• Categorize communications by purpose

Our AI providers are contractually obligated to protect your data and not use it for their own purposes. However, by using our Services, you acknowledge that your email content will be processed by these third-party AI systems.

AI processing is essential to the functionality of CasaButler and cannot be disabled while using the Services.

Third-Party Services

We use the following categories of third-party services:

• Cloud Hosting: To store and process your data
• AI Providers: To analyze email content (as described above)
• Analytics: To understand app usage and improve our Services
• Email Services: To send notifications and marketing communications
• Authentication: To securely manage your login

These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.

Data Storage and Location

All user data is stored on servers located in the United States. By using our Services, you consent to the transfer and storage of your data in the United States, regardless of your location.

If you are located outside the United States, please be aware that data protection laws in the US may differ from those in your country.

Data Sharing

We do not sell your personal information. We may share your information in these circumstances:

• Service Providers: With vendors who help us operate our Services (as described above)
• Legal Requirements: If required by law, court order, or government request
• Safety: To protect the rights, safety, or property of Winito, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Data Retention and Deletion

We retain your information for as long as your account is active. When you delete your account:

• Your data will be permanently deleted within 30 days
• This includes emails, extracted data, and account information
• Some data may be retained longer if required for legal compliance

You can request account deletion at any time through the app settings or by contacting us.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your account and data
• Opt out of marketing communications
• Lodge a complaint with a data protection authority

To exercise these rights, contact us at privacy@casabutler.ai.

Marketing Opt-Out

You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or by updating your preferences in the app settings. Note that you will still receive transactional emails (bill reminders, account notifications).

International Users

Our Services are available worldwide. If you access our Services from outside the United States:

• Your data will be transferred to and stored in the United States
• By using our Services, you consent to this transfer
• We process data based on your consent and our legitimate business interests

European Users (GDPR)

If you are in the European Economic Area, you have additional rights under GDPR including data portability and the right to restrict processing. Our legal basis for processing is:

• Consent: For marketing communications and AI processing of emails
• Contract: To provide the Services you've requested
• Legitimate Interest: For analytics and service improvement

Children's Privacy

Our Services are intended for users who are at least 13 years old. If you are between 13 and 18, you should review this policy with a parent or guardian. We do not knowingly collect personal information from children under 13.

If we learn we have collected information from a child under 13, we will delete it promptly. If you believe we have collected information from a child under 13, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top
• Notify you through the app for material changes

Your continued use of the Services after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@casabutler.ai