Privacy Policy

1. Introduction

PropFlow Inc. ("PropFlow," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management platform ("Service").

We take data protection seriously and have implemented industry-leading security measures to ensure your information remains safe and confidential.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password
• Property Data: Property addresses, rental prices, unit details, photos, and descriptions
• Tenant/Applicant Data: Names, contact information, income details, employment history, and references
• Financial Information: Invoice details, payment history (we do not store credit card numbers)
• Documents: Leases, applications, ID documents, and other uploaded files

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent on the Service
• Device Information: Browser type, operating system, device type
• Log Data: IP address, access times, referring URLs
• Cookies: Session cookies for authentication and analytics cookies

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative notifications (updates, security alerts)
• Respond to your comments, questions, and support requests
• Monitor and analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We do NOT sell your personal information. We may share information only in these circumstances:

4.1 With Your Consent

We may share information when you explicitly authorize us to do so.

4.2 Service Providers

We work with trusted third-party service providers who assist us in operating the Service, including:

• Supabase: Database and authentication (SOC 2 Type II compliant)
• Vercel: Hosting and deployment (SOC 2 compliant)
• Payment Processors: For subscription billing (PCI DSS compliant)

These providers are contractually obligated to protect your information and may only use it to perform services on our behalf.

4.3 Legal Requirements

We may disclose information if required to do so by law or in response to valid legal process.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement enterprise-grade security measures to protect your data:

• Encryption in Transit: All data transmitted via TLS 1.3 (HTTPS)
• Encryption at Rest: AES-256 encryption for stored data
• Access Controls: Role-based access with the principle of least privilege
• Authentication: Secure password hashing with bcrypt
• Infrastructure: SOC 2 compliant cloud infrastructure
• Monitoring: 24/7 security monitoring and intrusion detection
• Audit Logging: Comprehensive logging of all data access
• Regular Audits: Periodic security assessments and penetration testing

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account deletion:

• Personal account data is deleted within 30 days
• Anonymized usage analytics may be retained indefinitely
• Data required for legal compliance may be retained as required by law

7. Your Rights and Choices

You have the following rights regarding your data:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Export: Request your data in a portable format
• Restriction: Request restriction of data processing
• Objection: Object to certain data processing

To exercise these rights, contact us at privacy@propflow.agency. We will respond within 30 days.

14. Contact Us