Privacy Policy

Information on how personal data is collected, used, and protected.

1. Data Controller

Bynevo Labs, SASU, 200 rue de la Croix Nivert, Paris, France, acts as data controller for personal data processed through CasaNova Labs.

Registration ID (SIREN): 945 110 237 - SIRET: 945 110 237 00019 - VAT number: FR62945110237.

2. Data Collected

Account data: email, hashed password, session information, language preferences.

Usage data: uploaded images, generated outputs, technical metadata, operational logs.

Billing data: Stripe customer/subscription identifiers and subscription status (card data is processed by Stripe).

3. Purposes and Legal Bases

Contract performance: account creation, authentication, service delivery, and support.

Legitimate interest: security, abuse prevention, technical monitoring, and service improvement.

Legal obligations: retention of certain accounting/billing records.

4. Processors

The service relies on technical providers, including Stripe (payments), fal.ai (AI inference), Google OAuth (authentication), Hostinger (SMTP email), and VPS/Coolify infrastructure.

These providers process only data required to perform their services.

5. Retention

Account data is kept while the account is active, then archived/deleted according to legal obligations and technical constraints.

Generation data (images, outputs, logs) is retained to provide property history unless deletion is requested or internal purge policies apply.

6. Security

Bynevo Labs applies reasonable technical and organizational measures to protect data (in-transit encryption, access controls, environment separation).

7. Data Subject Rights

Where legally applicable, you may request access, rectification, erasure, restriction, objection, or portability of your personal data.

You can exercise these rights at: contact@casanovalabs.com.

8. Cookies

The service uses essential technical cookies (session, language preference) required for it to function.

Optional cookies (analytics via PostHog, marketing) are only activated with your explicit consent. A cookie banner is displayed on first visit allowing you to accept, decline, or customise your preferences. You may change your choices at any time via the 'Manage cookie preferences' link in the footer.

Legal basis for optional cookies: consent (Article 6(1)(a) GDPR).

9. International Transfers

Some processors may involve transfers outside the European Union. Where applicable, appropriate safeguards (e.g., SCCs) are implemented in accordance with regulations.

10. Updates

This policy may be updated. Material changes will be communicated appropriately on the service.