Who we are
Cazavera is operated by Alwyn Ventures LLC, a California limited liability company located at 2108 N St, Ste N, Sacramento, CA 95816. When this policy says "Cazavera," "we," "us," or "our," it means Alwyn Ventures LLC.
Cazavera is a mobile-first rental finance and property management app for self-managing landlords. This Privacy Policy explains what information we collect, how we use it, and what rights you have over it.
Information we collect
Account information
When you create an account we collect your email address and the password you choose (stored as a salted hash — we never see it in plain text). If you fill out your profile we also store your name, phone number, and any alert contact preferences you set.
Phone numbers and SMS notifications: if you provide a phone number to receive text alerts (for example, an emergency maintenance notification or a safety-alarm replacement reminder), that number is used solely to send you those account-related messages and is never sold or shared with third parties for marketing or advertising purposes. Message frequency varies based on your account's activity. Message and data rates may apply. You can opt out of text alerts at any time from your account settings, or by replying STOP to any message.
Property and financial data
Cazavera stores the information you enter about your rental properties: addresses, rental type, tenant details, lease terms, rent amounts, income payments, and expense records. We do not sell or share this information with third parties for advertising or marketing purposes.
Subscription and billing data
Cazavera offers a 3-month free trial and does not require a payment method to start one. We store your subscription status (trialing, active, paused, or cancelled), plan type, trial end date, and Stripe customer ID. We never store your full card number or other complete payment details — those are entered directly with Stripe and held by Stripe under its own privacy policy.
If no payment method is added by the end of your free trial, your subscription is paused rather than charged — we never bill a card we don't have. You can cancel anytime from the Stripe billing portal (Settings > Billing > Manage Subscription); cancelling stops future charges but does not refund amounts already billed for the current period.
Photos and scanned documents
When you upload a photo or document through Cazavera's scanning features — receipt capture, appliance scan, paint color scan, or business card scan — the image is sent to Anthropic's Claude API for processing (see "Third-party services" below). Scan photos themselves (the label, barcode, or business card you photograph) are processed in memory and are not stored after the extracted details are saved — only the structured result (e.g. appliance brand and model) is kept in your account.
Photos attached to a maintenance request — including those a tenant submits through their maintenance portal — are stored for as long as the request stays open, and for 12 months after it is closed, after which they are automatically deleted. The request's text history (title, description, comments, status changes) is retained after the photos are removed.
Receipts and other supporting documents you attach to expense or income records are stored in your account for as long as your account remains active, so they stay available for your reports, including Schedule E summaries. You can delete individual images from your account at any time.
Household member data
If you invite a partner, co-owner, or advisor to your Cazavera account, we collect their email address in order to send the invitation and link their account once accepted. Invited household members, co-owners, or advisors can be granted access to properties you choose to share. Depending on the role you assign — view-only or full edit access — they may be able to view or also add, edit, and delete records for those shared properties.
Usage and device data
We collect standard server logs including IP addresses, browser or device type, pages visited, and timestamps. We use Google Analytics (GA4) to understand aggregate usage patterns — such as which pages are visited and how often — so we can improve the product. This data is used for analytics only; we do not use it for personalized advertising or cross-app/cross-site tracking, and we do not share it with advertising networks.
How we use your information
- To provide and operate the Cazavera app and its features
- To generate financial statements, reports, and year-end summaries
- To send maintenance alerts, safety alarm reminders, and filter replacement notifications you have opted into
- To send transactional emails (receipts, invitation links, account notices)
- To process your subscription payments
- To respond to your support requests
- To detect fraud and maintain security
- To improve the product based on aggregate, anonymized usage patterns
Cazavera does not train its own AI models on user data. Content submitted through AI-powered scanning features is processed via Anthropic's Claude API. Anthropic's handling of that data is governed by Anthropic's own Privacy Policy and Data Processing terms at anthropic.com. Cazavera is not responsible for Anthropic's data practices.
Third-party services
Cazavera uses or may use the following services to operate the app. Additional third-party services may be added in the future with an updated notice.
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database, authentication, and file storage | All app data (stored in a US-region Postgres instance) |
| Anthropic (Claude API) | Receipt, appliance, paint, and business card scanning | Images you upload for scanning; structured results returned and stored. Anthropic's handling of submitted data is governed by Anthropic's own Privacy Policy and Data Processing terms. |
| Vercel | App hosting and edge delivery | Standard request logs (IP, headers, URL paths) |
| Stripe | Subscription billing and payment processing | Your name, email, and the payment method details you enter directly with Stripe. Property, tenant, and financial records you keep in Cazavera are never sent to Stripe. |
| Resend | Transactional email delivery (invites, receipts, account and billing notices) | Recipient email address and the content of the specific email being sent. |
| Twilio | SMS delivery for opted-in text alerts (emergency maintenance notifications, status updates, and safety-alarm reminders) | The notification phone number and message content for the specific text being sent. Not sold or shared for marketing or advertising purposes. |
| Google Analytics (GA4) | Aggregate usage analytics to help us understand and improve the product | Standard usage/device data (pages visited, session length, device type). Not used for personalized advertising or cross-app tracking. |
Data retention
We retain your account data for as long as your account is active. To delete your account, go to Settings > Account > Delete Account inside the app. Deletion is immediate: your Stripe subscription is cancelled, your property, tenant, and financial records are permanently removed from our database, and you are signed out, all as part of the same action — except where we are required by law to retain certain records (such as billing history) for a limited period afterward.
We retain server logs and usage data for as long as reasonably necessary to fulfill the purposes described in this policy, including security monitoring, debugging, legal compliance, and business operations. Retention periods may vary depending on the type of data and applicable legal requirements.
California privacy rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act:
- Right to know — you may request a summary of the personal information we have collected about you and how we have used or disclosed it.
- Right to delete — you may request that we delete your personal information, subject to certain legal exceptions. You can also delete your own account and all associated data at any time from Settings > Account > Delete Account inside the app.
- Right to opt out of sale or sharing — Cazavera does not sell or share your personal information with third parties for monetary or other valuable consideration, so there is nothing to opt out of. If this ever changes, we will update this policy and provide an opt-out mechanism before doing so.
- Right to non-discrimination — we will not penalize you for exercising any of these rights.
To exercise any of these rights, email us at support@cazavera.com. We will respond within 45 days.
Security
All data is transmitted over TLS (HTTPS). Your database is hosted on Supabase with row-level security enabled — each user can only access their own data. Passwords are hashed and never stored in plain text. We perform regular security reviews and will notify you promptly if a breach affects your account.
Children's privacy
Cazavera is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date at the top of this page and, for material changes, notify you by email or by an in-app notice. Continued use of Cazavera after a change takes effect constitutes your acceptance of the updated policy.
Contact us
Questions about this Privacy Policy or your data? Reach us at:
Alwyn Ventures LLC2108 N St, Ste N, Sacramento, CA 95816
support@cazavera.com