How workspace data is handled

Updated October 15, 2026. This page describes the application’s current data flows.

Your workspace

Account identity, client records, saved outputs, usage reservations and model jobs are stored in MongoDB. Active team members access the workspace they have joined. Private browser caches are separated by workspace and cleared when server sign-out succeeds.

AI processing and source media

When you request AI analysis, the relevant property facts, authorized photo URLs or uploaded document content are sent to OpenAI. Property models use GPT-6.1 Sol. Listing-image references can become unavailable; Studio provides a source-photo repair flow. Images are not measurements, and unseen geometry remains inferred.

Service providers

Vercel hosts the application and its API. MongoDB stores application records. OpenAI processes AI requests. Stripe handles checkout and billing; CasaCortex does not store raw card numbers. Resend delivers account verification, recovery and team invitations. Listing providers may receive requests when their source images are loaded. Authorized imported artifacts may use Vercel Blob. Existing and newly uploaded source-media links are accessible to anyone who has the link; workspace authorization protects the records and listing APIs, not the contents of these public file links. Avoid uploading confidential documents through the source-photo upload control.

Operational diagnostics

Studio reports viewer readiness, failed loads and source-image failures as bounded event types. These reports exclude photo URLs, client names and exception text, are deduplicated by workspace and minute, and expire after 30 days. Generation jobs retain provider request identifiers and reported token totals for troubleshooting; token totals are not dollar charges. Model comparison reviews and correction history are saved in your workspace.

Retention and removal

Saved client data, outputs and version history remain until removed through an account-level data request. Removing a client from the interface archives the record; it does not immediately erase its saved history. Password recovery and verification links expire after 30 minutes. Sessions expire after seven days and can be revoked earlier.

For an export, correction, account deletion or data-handling question, contact CasaCortex support. Include your account email and the affected request or artifact ID; do not send passwords or API keys. Billing records may have separate retention requirements.

Review before sharing

AI documents, closing recommendations and 3D scenes require human review. Do not upload media or client documents you lack permission to use. This operational description does not replace the Terms of Service.