Privacy Policy

1. Information We Collect

PropFlow collects information you provide directly: account information (name, email, password), property and tenant data you enter into the platform, and payment information processed through Stripe. We also collect usage data (pages visited, features used) and technical data (IP address, browser type) to improve the service.

2. How We Use Your Information

We use your information to provide and improve the PropFlow service, process payments via Stripe, send transactional emails and text messages (invoices, maintenance updates, lease notifications, payment reminders), and communicate about your account. We do not sell your personal information to third parties.

3. SMS / Text Messaging

If you opt in to receive text messages from PropFlow, we may send you SMS messages related to your account, including payment reminders, maintenance updates, lease notifications, and community announcements. Message frequency varies. Message and data rates may apply.

You can opt out of text messages at any time by replying STOP to any message, or by updating your notification preferences in your tenant portal settings. After opting out, you will receive a one-time confirmation message.

We will not share, sell, or distribute your mobile phone number or any information collected via SMS to third parties for promotional or marketing purposes. Your mobile information is used solely to deliver the messages you have consented to receive through PropFlow.

For help, reply HELP to any message or contact us at support@propflow.app.

4. Data Storage and Security

Your data is stored in PostgreSQL databases hosted by Supabase with encryption at rest. Authentication is handled by Supabase Auth. Payment processing is handled by Stripe — PropFlow never stores credit card numbers or bank account details. We use HTTPS for all connections and follow security best practices including HMAC token verification, rate limiting, and input validation.

5. Third-Party Services

PropFlow uses the following third-party services: Supabase (authentication and database hosting), Stripe (payment processing), Resend (email delivery), Sentry (error monitoring), and Inngest (background job processing). Each service has its own privacy policy governing how they handle data.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us. If you are a tenant using PropFlow through your landlord, your landlord is the data controller and you should contact them for data requests. We will assist landlords in fulfilling these requests.

7. Contact

For privacy-related questions, contact us at privacy@propflow.app.