Privacy Policy

PropDocket ("we," "us," or "our") operates the propdocket.com website and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your choices regarding your data.

1. Information We Collect

Account Data

When you create an account we collect your name, email address, and a hashed password. If you sign in with Google OAuth, we receive your Google profile name, email address, and profile picture URL. We do not receive or store your Google password.

Billing Data

If you subscribe to a paid plan, our payment processor (Stripe) collects your payment card details. We store only your Stripe customer ID, subscription status, and invoice history — never your full card number.

Usage Data

We automatically collect basic usage information such as pages visited, report queries, browser type, operating system, and IP address. This data helps us improve the Service and diagnose technical issues.

2. How We Use Your Data

• Authentication: Verify your identity and manage sessions, including via Google OAuth.
• Product operations: Generate property intelligence reports, manage subscriptions, and deliver features you request.
• Billing and payments: Process subscription charges, issue invoices, and handle refunds.
• Support: Respond to support requests and communicate service updates.
• Service improvement: Analyze aggregated, non-identifiable usage patterns to improve performance and features.

3. Third-Party Services

We share data with the following third-party processors solely to operate the Service:

• Google OAuth: Provides sign-in authentication. Google receives and processes your authentication tokens under its own Privacy Policy.
• Supabase: Hosts our database and authentication infrastructure. Data is stored in Supabase-managed infrastructure in the United States.
• Stripe: Processes payments and manages subscription billing. Stripe handles payment card data under its own Privacy Policy.

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

4. Data Retention & Deletion

We retain your account data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain records for legal or billing compliance.

To request deletion of your data, email us at [email protected]. We will process your request within 30 days and confirm deletion by email.

5. Security

We use industry-standard measures to protect your data, including HTTPS encryption in transit, encrypted storage at rest, and access controls limiting data access to authorized personnel only. No method of transmission or storage is 100% secure, but we continuously work to protect your information.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing of your data.
• Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at [email protected].

7. Cookies

We use essential cookies to maintain your session and preferences. We do not use advertising or third-party tracking cookies. Your browser settings allow you to block or delete cookies, though this may affect Service functionality.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy on this page with a new effective date and, where appropriate, notify you by email. Your continued use of the Service after a change constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy or our data practices, contact us: