Privacy Policy
Last updated: July 10, 2026
Who we are
Mighty Casa is a bilingual portal that helps Costa Rica property owners manage expenses, documents, contacts, and maintenance. It is operated by YPV LLC (Your Pura Vida). This policy explains what personal data we collect, why, and the choices you have. Questions about this policy can be sent to support@mightycasa.com.
Data we collect
Account data: your name, email address, optional WhatsApp number, and language preference. Property data you enter: property names and addresses, expenses and amounts, contact details for the people who service your properties, maintenance records, and any documents you upload (for example deeds, insurance policies, or permits). Utility account details: the provider name and account or contract number you enter are labels for your own records. We never ask for, store, or use passwords or sign-in credentials for your utility, bank, or government accounts. Payment data: if you subscribe to a paid plan, payment is handled by Stripe on their own pages. We never see or store your card number — we keep only your subscription status and a Stripe customer reference. Technical data: authentication session cookies and basic request information needed to operate the service securely.
How we use your data
We use your data solely to provide the service: showing you your own records, sending the reminders you have enabled, and letting you share access to a property with people you invite. We do not sell your data, and we do not use it for advertising. We send marketing email (the newsletter) only if you opt in, and every such email includes an unsubscribe link.
Who processes your data
Your data is stored and processed by our service providers, each acting on our behalf under their own security and privacy commitments: Supabase (database, authentication, and file storage), Vercel (application hosting), Resend (email delivery), Stripe (subscription payments), Sentry (error monitoring — technical error reports only; we keep session recording and personal-data capture switched off), and Fathom Analytics (cookieless, privacy-first site statistics that do not identify or track individual visitors). If you save a WhatsApp number and opt in to WhatsApp reminders, those messages are delivered through Meta Platforms' WhatsApp Business service, which receives your number and the reminder text.
Where your data lives
Our service providers store and process data in the United States. By using Mighty Casa you consent to your data being transferred to and processed in the United States, which may be outside your country of residence. The protections described in this policy apply wherever your data is processed.
How we protect your data
All data is encrypted in transit and at rest. Access to property data is deny-by-default: only the members you invite to a property can see its records, according to their role. Uploaded documents are stored in private storage and served only through short-lived signed links; uploads are limited by file type and size, and sensitive actions are rate-limited. If we become aware of a security incident affecting your personal data, we will notify affected users by email without undue delay.
No AI processing of your documents
We do not use your data or documents to train AI models, and no automated system reads the contents of the files you upload. Documents are stored as-is and shown only to you and the people you have shared the property with.
Sharing within the product
If you invite someone to a property (for example a property manager or accountant), they can see the data for that property according to the role you give them. You can revoke access at any time from the People page. Invitations to people who haven't signed up yet expire after 60 days.
Retention and deletion
Your data is kept for as long as your account exists. You can delete your account yourself under Account → Delete account: properties only you own are permanently deleted along with their documents and records, and your login is removed. Properties co-owned with others remain with the other members — records and files you added to them stay with the property but are no longer attributed to you. Housekeeping data is deleted on a schedule: security rate-limit records, which include IP addresses, after 1 day; reminder-send history after 90 days; unaccepted invitations after 60 days; update-list email addresses after 24 months; and internal operator activity logs after 1 year.
Cookies
We use essential cookies only: your sign-in session, your language choice, and your light/dark theme preference. We do not currently use analytics or advertising cookies.
Your rights
You can view and correct your profile information in the app, download a copy of your data at any time under Account → Export my data, and delete your account at any time. If you want to exercise any other right under the law that applies to you — including Costa Rica's Law 8968, the GDPR, or a U.S. state privacy law — contact us and we will respond as quickly as we can, and at most within the time your law requires.
Changes and contact
If this policy changes in a way that matters, we will tell you by email or in the app before the change takes effect. Contact: support@mightycasa.com.