How workspace data is handled

Updated October 22, 2026. This page describes the application’s current data flows.

Your workspace

Account identity, client records, saved outputs, usage reservations and model jobs are stored in MongoDB. Active team members access the workspace they have joined. Private browser caches are separated by workspace and cleared when server sign-out succeeds.

AI processing and source media

When you request AI analysis, the relevant property facts, authorized photo URLs or uploaded document content are sent to OpenAI. Property models use GPT-6.1 Terra. Listing-image references can become unavailable; Studio provides a source-photo repair flow. Images are not measurements, and unseen geometry remains inferred.

Service providers

Vercel hosts the application and its API. MongoDB stores application records. OpenAI processes AI requests. Stripe handles checkout and billing; CasaCortex does not store raw card numbers. Resend delivers account verification, recovery and team invitations. Listing providers may receive requests when their source images are loaded. Authorized imported artifacts may use Vercel Blob. New source-media uploads are stored in MongoDB and served only to signed-in members of the owning workspace. When you authorize generation, the worker reads only that workspace's selected files and sends their contents directly to OpenAI. Each file is limited to 3 MB, with 250 MB of uploaded source media per workspace. Older Vercel Blob links remain accessible to anyone who has those links; those existing files have not yet been migrated or their public URLs retired.

Operational diagnostics

Studio reports viewer readiness, failed loads and source-image failures as bounded event types. These reports exclude photo URLs, client names and exception text, are deduplicated by workspace and minute, and expire after 30 days. Generation jobs retain provider request identifiers and reported token totals for troubleshooting; token totals are not dollar charges. Model comparison reviews and correction history are saved in your workspace.

Optional website and conversion analytics

We use Vercel Web Analytics to understand page visits and events such as trial clicks, completed signups, verified trials, successful AI results, checkout starts, and confirmed checkout returns. Events contain only fixed labels such as the tool, plan, button location, or acquisition source (Google search, Google ads, another Google-tagged campaign, another referral, or direct/unknown). We do not include your email, client details, property information, document contents, payment details, or authentication tokens. Page URLs are reduced to known paths without query strings or fragments. We do not use advertising pixels or cross-site tracking cookies for this measurement.

A browser-session marker prevents duplicate success events; it is not sent as an identifier. To connect a visit to a signup in the same tab, session storage keeps only a source label and a last-activity time, expiring after 30 minutes of inactivity. Raw search terms, referral URLs, campaign values and ad click IDs are not included in these custom event labels. Cross-device journeys, new tabs, blocked analytics and missing referrers can leave attribution incomplete. Our analytics respects Do Not Track and Global Privacy Control. You can also disable optional analytics for this browser below. Necessary authentication, billing, and operational diagnostics continue to work.

Retention and removal

Saved client data, outputs and version history remain until removed through an account-level data request. Removing a client from the interface archives the record; it does not immediately erase its saved history. Password recovery and verification links expire after 30 minutes. Sessions expire after seven days and can be revoked earlier.

For an export, correction, account deletion or data-handling question, contact CasaCortex support. Include your account email and the affected request or artifact ID; do not send passwords or API keys. Billing records may have separate retention requirements.

Review before sharing

AI documents, closing recommendations and 3D scenes require human review. Do not upload media or client documents you lack permission to use. This operational description does not replace the Terms of Service.