Privacy Policy
Last updated: June 7, 2026 — DRAFT, pending attorney review.
1. Who we are
Propveo ("we", "us") operates the Propveo property-management platform at propveohq.com. We are the data controller for personal data of our paying customers (organization admins, owners, and team members). For data about your tenants, owners, and vendors that you upload, you are the controller and we are the processor — see our DPA.
2. Data we collect
- Account data: name, email, phone, language preference, role.
- Organization data: organization name, properties, leases, tenants, vendors, tickets, bills.
- Usage data: IP address, browser, pages viewed, actions taken.
- Communications: emails and WhatsApp/SMS messages we send on your behalf or to support you.
- Payment data: processed by Stripe; we never see card numbers.
3. How we use it
- To deliver, maintain, and improve the Service.
- To send transactional emails, in-app notifications, and (with your consent) WhatsApp messages.
- To bill you and prevent fraud.
- To respond to support requests.
- To comply with legal obligations.
4. Sharing
We share data with sub-processors who help run the Service: Supabase (database + storage), Vercel (hosting), Stripe (payments), Anthropic (AI assistance), Meta/WhatsApp (messaging), Google (Maps, optional email delivery), and email senders. We do not sell personal data. See the DPA for the current sub-processor list.
5. Retention
We retain Customer Data for the life of your account plus 30 days after termination, after which we delete it unless legally required to retain it. You may export your data at any time.
6. Your rights
Depending on your jurisdiction, you have rights to access, correct, delete, port, or object to processing of your personal data. Email privacy@propveohq.com to exercise these rights.
7. Security
We use TLS in transit, encryption at rest, role-based access controls, and Postgres row-level security to protect data. No system is perfectly secure; we will notify you of any incident affecting your data without undue delay.
8. International transfers
Our infrastructure is hosted in the United States and the European Union (via Supabase / Vercel regions). By using the Service you consent to transfers across borders, subject to safeguards.
9. Children
The Service is not directed at children under 13. We do not knowingly collect personal data from children.
10. Changes
We may update this policy from time to time. Material changes will be notified at least 30 days in advance.
11. Contact
Privacy questions: privacy@propveohq.com.