Privacy Policy
Last Updated: October 13, 2026 • Effective Immediately
🔒 Our Core Privacy Pledge
Propsly™ respects your privacy. We do not sell personal information, nor do we share personal information for cross-context behavioral advertising. Visual media and property records are collected and analyzed exclusively to fulfill your inspection orders, verify condition baseline accuracy, and generate your requested documentation.
1. Information We Collect
We collect information you provide directly, data generated through our field coordination workflows, and automated diagnostic metrics:
- Account & Profile Credentials: Your name, email address, password hash, and federated single-sign-on OAuth profile identifiers.
- Property & Access Details: Street address, unit number, city, state, zip code, access instructions, lockbox codes, and specific inspection focus notes.
- Occupant & Tenant Contact Data: Tenant names, phone numbers, and email addresses provided by landlords to send time-limited mobile capture links or coordinate appointment arrival windows.
- Photographic Media & Visual Metadata: Property photographs, EXIF camera metadata, geographic coordinates (latitude/longitude), and capture timestamps.
- Payment Information: Billing addresses and tokenized transaction IDs processed securely via certified PCI-compliant payment partners. Propsly™ does not store raw credit card numbers.
- Diagnostic Telemetry & Server Logs: Standard first-party web server request logs (IP addresses, HTTP user-agent strings, referer URLs) and client-side performance diagnostics strictly subject to user prior express consent.
2. How We Use Your Information
Propsly™ uses collected information strictly for legitimate commercial real estate documentation purposes:
- Generating Inspection Reports: Compiling photographs, condition notes, room cleanliness ratings, and useful life scores into the downloadable Property Condition Report.
- AI Computer Vision Analysis: Processing property photos using Propsly™ multimodal artificial intelligence vision systems to detect visible defects, water damage staining, fixture conditions, and occupancy clues.
- Fulfillment Logistics: Routing field runner appointments, dispatching contractors, and validating photograph quality before report delivery.
- Communications & Alerts: Transmitting transactional notifications via SMS and email regarding inspection scheduling, runner arrival, photo verification feedback, and report availability.
- Legal Dispute Verification: Preserving timestamped, tamper-evident records for security deposit reconciliations, property turnover disputes, or court evidence.
3. Information Sharing & Service Provider Categories
We share information only with contracted service providers under strict data privacy agreements:
- Field Photographers & Runner Networks: Dispatched field agents receive only the property address, access instructions, and shot list needed to complete photography.
- Secure Cloud Infrastructure & Storage: Encrypted object storage and secure cloud server infrastructure located in the United States.
- Artificial Intelligence Processing: Contracted enterprise computer vision processing environments operating under zero-retention and non-training terms.
- Payment Processing Partners: Certified PCI-DSS Level 1 compliant financial processing partners.
- Telecommunications & Messaging Partners: Regulated telecommunications carriers and transactional messaging delivery partners.
4. Diagnostic Telemetry, Session Replay & Client-Side Masking
To deliver an error-free user experience, detect client-side rendering defects, and troubleshoot workflow failures, our platform may utilize diagnostic telemetry and session replay tools. Our implementation strictly follows these safeguards:
- Prior Express Consent Gating: No session replay script or diagnostic tracking technology is loaded or executed unless you affirmatively click "Accept All" on our Cookie & Diagnostic Consent banner.
- Client-Side Sensitive Data Masking: Sensitive form fields (passwords, credit card numbers, lockbox codes, tenant credentials, contact details) are masked at the browser level prior to any telemetry transmission. Raw keystrokes and private communications are never captured or transmitted.
- No Interception of Communications: Diagnostic tools record standard navigational events (clicks, scrolling, window dimensions, load speeds) strictly to assess application performance.
5. California Privacy Safe Harbor Notice (CIPA §§ 631, 638.51 & CCPA/CPRA)
Notice to California Residents under Cal. Penal Code §§ 631 & 638.51 and CCPA/CPRA
Under the California Invasion of Privacy Act (CIPA, Cal. Penal Code §§ 631, 638.51) and the California Consumer Privacy Act as amended by the CPRA:
- No Wiretapping or Interception: Propsly™ does not wiretap, eavesdrop, or intercept communications. Our diagnostic tools record standard user navigation strictly on our behalf under confidential service provider terms and only with your prior express consent.
- No Pen Registers or Trap-and-Trace Devices: Standard HTTP request headers (such as IP address, user-agent, and referer) are logged directly by first-party web servers as standard internet routing infrastructure for network security, DDoS mitigation, and campaign attribution. These logs do not constitute pen registers or trap-and-trace devices under California Penal Code § 638.51.
- No Sale or Sharing of Personal Information: We do not sell personal information, nor do we share personal information for cross-context behavioral advertising.
- Right to Opt-Out & Revoke Consent: You may modify or revoke your telemetry preferences at any time by visiting our dedicated Cookie & Telemetry Policy page.
6. Data Retention & Security Safeguards
We implement industry-standard administrative, physical, and technical safeguards:
- All data in transit is encrypted using modern TLS encryption; data at rest is protected with AES-256 encryption.
- Tenant capture links utilize cryptographically secure, random 24-byte hex tokens, ensuring unauthorized third parties cannot access or browse inspection workflows.
- Uploaded media is accessed via time-limited, pre-signed URLs rather than open public URLs.
- Order records and dispute documentation are retained for active customer accounts to maintain legal compliance records. You may request account closure and deletion at any time.
7. Contacting Our Privacy Team
To exercise your statutory privacy rights, submit a data inquiry, or contact our Data Protection Officer, please reach out to:
Email: privacy@propsly.co
Legal Department: legal@propsly.co