Privacy Policy
Last updated: May 28, 2026
Propzy ("we," "our," or "us") operates the Propzy real estate management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information
When you create an account, we collect:
- Full name, email address, and phone number
- Company name and role
- Login credentials (passwords are hashed and never stored in plain text)
Business Data
In the course of using the Service, you may provide:
- Property listings (addresses, descriptions, images, pricing)
- Contact and lead information
- Transaction and financial records
- Documents and e-signatures
- Email communications (when using the integrated inbox)
- Calendar appointments and tasks
Automatically Collected Information
- Browser type, IP address, and device information
- Usage data (pages visited, features used, timestamps)
- Cookies for session management and authentication
Third-Party Integrations
When you connect third-party services (Google Calendar, Facebook, Instagram, WhatsApp, WordPress), we may receive:
- Calendar event data (Google Calendar)
- Page and posting permissions (Facebook, Instagram)
- Message content for automated responses (WhatsApp)
- API tokens for authorized access (stored securely, never shared)
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Process transactions and manage your real estate business operations
- Send transactional emails (invoices, e-signature requests, appointment reminders)
- Provide AI-powered features (listing descriptions, lead analysis) using third-party AI services
- Sync your data with connected third-party services you have authorized
- Improve the Service and develop new features
- Respond to your requests and provide customer support
- Detect and prevent fraud, abuse, and security incidents
3. Data Isolation (Multi-Tenancy)
Propzy is a multi-tenant platform. Each company's data is strictly isolated:
- Every database query is filtered by company ID
- Users can only access data belonging to their own company
- No cross-company data sharing occurs
- Each company manages its own users, roles, and permissions
4. Data Sharing and Disclosure
We do not sell your personal information. We may share data with:
- Service providers: Hosting infrastructure, email delivery services, and AI processing services (Anthropic/Claude) — only as needed to operate the Service
- Third-party integrations: Only when you explicitly connect and authorize them (e.g., Google Calendar, Facebook, WhatsApp)
- Legal requirements: When required by law, regulation, or legal process
- Business transfers: In connection with a merger, acquisition, or sale of assets
5. AI-Powered Features
When you use AI features (listing description generation, lead analysis, email generation):
- Your property and contact data is sent to Anthropic's Claude API for processing
- Each company provides their own API key — usage and billing are separate
- AI-processed data is not used to train AI models
- AI features are optional and can be disabled at any time
6. Data Security
We implement industry-standard security measures:
- All data transmitted over HTTPS/TLS encryption
- Passwords hashed using bcrypt
- JWT-based authentication with token expiration
- API keys and access tokens stored securely on the server (never exposed to browsers)
- Rate limiting to prevent brute-force attacks
- Regular security updates and monitoring
7. Data Retention
- Your data is retained as long as your account is active
- Deleted contacts are soft-deleted and can be recovered within 30 days
- You may request full data deletion by contacting us
- Backups are retained for 90 days for disaster recovery
8. Your Rights
You have the right to:
- Access, update, or delete your personal information
- Export your data (contacts, listings, transactions)
- Disconnect third-party integrations at any time
- Opt out of non-essential communications
- Request information about how your data is used
9. Cookies
We use essential cookies for:
- Authentication and session management (JWT tokens)
- User preferences (sidebar state, view preferences)
We do not use third-party advertising or tracking cookies.
10. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.
12. Contact Us
If you have questions about this Privacy Policy or your data, contact us at: