Terms of use

Last updated: [Pending: last-updated date]

Draft with pending details

This document still has controller details to be completed, marked as "[Pending: …]".

These terms govern the use of casflows (https://casflows.com). By creating an account you accept them, together with the privacy policy and the data processing agreement that forms part of them. If you do not agree, do not use the service.

Who provides the service#

casflows is provided by [Pending: controller's full name] (CUIT [Pending: controller's CUIT (tax ID)]), with address at [Pending: controller's postal address] and contact email info@casflows.com ("casflows", "we", "us").

To use casflows you must be 18 or older and able to enter into contracts. If you use it on behalf of a company, you confirm you can bind it and "you" also refers to that company.

What casflows is#

casflows is software as a service for people who manage Airbnb listings. In short:

It periodically reads the iCal calendar of each listing you configure.
For each reservation it creates a cleaning on the check-out day and flags it as urgent if another reservation checks in that same day.
If you connect Google Calendar, it creates a casflows calendar in your Google account with those cleanings and invites your staff and reception contacts.
It sends reminders and notices via Telegram to people who link the bot.

casflows is an organisation tool. It is not a cleaning service or an agency, and it is not affiliated with Airbnb, Google or Telegram; it does not replace your own oversight of your reservations.

Your account#

The information you give us must be true and up to date.
You are responsible for keeping your password confidential and for activity under your account, including people you give access to.
Tell us immediately if you suspect unauthorised access.

Free trial, price and payment#

When you sign up you get a 15-day free trial, no card required.
If the trial ends without a subscription, syncing and reminders are paused but nothing is deleted straight away: if you subscribe, everything resumes.
If you do not subscribe, we will delete the account 90 days after the trial ends, notifying you by email 15 days beforehand.
Once billing is enabled, the price, applicable taxes and billing period will be shown clearly before you subscribe. Payments are handled by Stripe. The subscription renews automatically until you cancel it, and cancellation takes effect at the end of the paid period.
If you contract as a consumer, you keep the rights granted to you by applicable consumer law, including, where applicable, the right of withdrawal.

Acceptable use#

When using casflows you agree not to:

Use it for unlawful purposes or to process personal data without a legal basis.
Enter calendar URLs that do not belong to you or that you are not authorised to manage.
Send illegal, offensive or spam content through the service, or content that infringes third-party rights.
Try to access other accounts’ data, bypass limits or security measures, reverse engineer or overload the service.
Resell or assign the service to third parties without our written permission.

Your responsibilities for the data you enter#

For the data about your cleaning staff, reception contacts and reservations, you are the controller and casflows is your processor. Therefore:

You must have a valid legal basis (for example, the employment or service relationship with those people) to enter their data and for them to receive calendar invitations and messages.
You must inform them about the processing (Arts. 13 and 14 GDPR), including that casflows and the providers listed in the privacy policy act as processors.
Telegram linking is always done by the person themselves by opening the bot link: do not force it or do it on their behalf.
Do not include unnecessary guest data or special categories of data in notes.
The iCal URL gives access to your accommodation’s occupancy: treat it like a password.
Comply with the Airbnb, Google and Telegram terms that apply to you.

Airbnb and iCal limitations#

Airbnb does not offer casflows an API: only each listing’s iCal calendar. This brings limitations that are outside our control:

Airbnb updates the iCal feed with a delay (sometimes hours), so a reservation, change or cancellation may take time to show up.
The iCal feed only has dates, not times, and mixes reservations with blocked dates; casflows uses the times you configure and some rules to tell them apart.
A cancellation means the event disappears from the feed; when there are anomalous mass changes, casflows may pause syncing as a safety measure.
Airbnb may change or stop offering iCal at any time.

We do not guarantee that the iCal feed is complete, accurate or timely. Check important reservations in Airbnb, especially last-minute ones.

Third-party services#

casflows integrates with Airbnb (iCal), Google (Calendar and sign-in) and Telegram. Those services are governed by their own terms and privacy policies, may change or fail, and we are not responsible for how they work. In particular:

The calendar and events casflows creates in your Google Calendar are yours: if you disconnect Google or close your account, they stay in your Google account until you delete them.
Telegram does not let a bot start a conversation: each person has to open the bot with their link to receive notices.
If a third party blocks, limits or changes its integration, we may have to modify or withdraw the affected feature.

Availability and changes to the service#

We work to keep casflows available and working well, but it is provided "as is" and "as available": there may be interruptions due to maintenance, failures or external causes. To the extent permitted by law, we do not guarantee that the service will be uninterrupted or error-free, or that reminders or events will always arrive on time.

We may improve, change or withdraw features. If a change substantially reduces what you have subscribed to, we will notify you in advance and you may cancel.

Liability#

casflows is not liable for damage caused by incomplete, wrong or late information in the Airbnb iCal feed or from other third parties, for the operation of Airbnb, Google or Telegram, or for your use of the service in breach of these terms.
To the extent permitted by law, we are not liable for indirect damage, loss of profit, lost bookings or income, or penalties arising from your rental activity.
To the extent permitted by law, our total liability to you for any claim is limited to the amount you paid for the service in the 12 months before the event giving rise to it.
Nothing above limits or excludes liability for wilful misconduct or gross negligence, for death or personal injury, or any other liability that cannot be limited under applicable law; and, if you are a consumer, it does not affect your statutory consumer rights.

Suspension and termination#

You may cancel your subscription and close your account at any time.
We may suspend or close your account if you seriously breach these terms, if the law requires it, or to protect the service or third parties. Unless urgent or legally prohibited, we will notify you first and give you a chance to fix it.
After closure, you have 30 days to ask us to export your data; then we delete it, except what we must keep by law (see the privacy policy).

Intellectual property#

casflows, its software, brand and content belong to its owner or licensors. We grant you a limited, non-exclusive, non-transferable licence to use it while you have an active account.

Your data is yours. You only grant us the permission needed to process it to provide the service. If you send us suggestions, we may use them freely to improve casflows.

Data processing agreement (Art. 28 GDPR)#

This section is the data processing agreement between you, as controller, and casflows, as processor, and is accepted together with these terms. On data protection matters, it prevails over the rest of the terms.

Subject matter, nature and purpose#

casflows will process the personal data needed to provide the service described in these terms: collection (reading the iCal feed and data you enter), recording, storage, consultation, organisation and disclosure (creating events in your Google Calendar and sending messages via Telegram and, once enabled, by email), and erasure.

Duration#

For as long as you have a casflows account and, afterwards, during the 30-day return and deletion period set out below.

Types of data and categories of data subjects#

Data subjects	Data
Cleaning staff	Name, Google email, Telegram chat identifier, assigned cleanings and messages received.
Reception contacts	Name, email (optional), Telegram chat identifier, assigned properties and notices received.
Guests	Only the reservation identifier and check-in and check-out dates, plus whatever you write in notes.
Users of your account	Name and email, to the extent processed on your behalf.

No special categories of data are processed. You must not enter them.

casflows’ obligations as processor#

Process the data only on your documented instructions, which are these terms and the configuration you set in the app, including with regard to international transfers, unless the law requires otherwise (in which case we will inform you beforehand, if the law allows). If we believe an instruction infringes data protection law, we will tell you.
Ensure that people authorised to process the data have committed to confidentiality.
Apply the Article 32 GDPR security measures described in the privacy policy.
Not use the data for our own purposes, not sell it and not disclose it except to authorised sub-processors.
Assist you, taking into account the nature of the processing, in responding to data subject requests; if we receive one directly, we will forward it to you without answering on your behalf unless you instruct us to.
Assist you in complying with Articles 32 to 36 GDPR (security, breach notification, impact assessments and prior consultation), with the information available to us.
Notify you without undue delay and in any case within 48 hours of becoming aware of any security breach affecting that data, with the information available so you can notify the authority.
Keep a record of processing activities as processor where applicable (Art. 30(2) GDPR).

Sub-processors#

You give us a general authorisation to engage the sub-processors listed in the privacy policy (Supabase, Vercel, Cloudflare, Google, Telegram and, once enabled, Resend and Stripe). We will impose on them by contract data protection obligations equivalent to those in this section and remain liable to you for their compliance.

We will notify you of any new or replacement sub-processor at least 30 days in advance. You may object on reasonable data protection grounds; if we cannot find a solution, you may cancel the service without penalty.

International transfers#

Data is hosted in the European Union. Any access or transfer outside the European Economic Area will be made with the Chapter V GDPR safeguards described in the privacy policy (the adequacy decision for Argentina, Standard Contractual Clauses and/or the EU-US Data Privacy Framework).

Return and deletion at the end#

When the service ends, you can request an export of your data for 30 days. After that period we will delete it, including copies, unless the law requires us to keep it; encrypted backups will purge it within a further 30 days at most.

Information and audits#

We will make available the information needed to demonstrate compliance with these obligations and allow for and contribute to audits, including inspections, carried out by you or an auditor you appoint who is bound by confidentiality. Unless required by an authority or following a security breach, audits must be requested 30 days in advance, at most once a year, during business hours, without compromising security or other customers’ data, and at your expense. We will normally address them first through documentation and written answers.

Your obligations as controller#

You warrant that you have a legal basis for the processing, that you have informed data subjects and that your instructions comply with the law, as set out in Your responsibilities for the data you enter.

Changes to these terms#

We may amend these terms due to changes in the service or the law. If the change is material, we will notify you at least 30 days in advance and, where appropriate, ask you to accept them again. If you do not agree, you may cancel before they take effect.

Governing law and jurisdiction#

These terms are governed by [Pending: governing law]. For any dispute, the parties submit to [Pending: competent courts].

If you are a consumer, nothing above deprives you of the protection afforded by the mandatory rules of the country where you live, and you may bring claims before the courts of your place of residence. Before going to court, please write to us: we will try to resolve it amicably.

Other provisions#

If any clause is void, the rest remains in force.
Not exercising a right at a given time does not mean waiving it.
These terms, the privacy policy and the data processing agreement form the entire agreement between the parties about the service.
We publish these terms in Spanish and English; in case of discrepancy the Spanish version prevails, unless applicable law provides otherwise.

Contact#

For any question about these terms: info@casflows.com.