Privacy Policy

Last updated: December 30, 2025

1. Introduction

PropertyCtrl ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property management software platform and related services (collectively, the "Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (encrypted)
  • Name and contact information
  • Two-factor authentication settings (if enabled)

2.2 Property and Tenant Data

To provide our property management services, we collect data you enter including:

  • Property addresses, details, and photos
  • Tenant names, contact information, and lease details
  • Maintenance requests and vendor information
  • Documents you upload (leases, receipts, etc.)

2.3 Financial Information

We collect financial data necessary for the Service:

  • Rental income and expense records you enter
  • Payment processing information (handled securely by Stripe)
  • Subscription and billing information

2.4 Usage Information

We automatically collect certain information when you use the Service, including device information, browser type, IP address, pages visited, and usage patterns. This helps us improve the Service and provide technical support.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process your transactions and manage your subscription
  • Send you service-related communications and updates
  • Respond to your inquiries and provide customer support
  • Generate financial reports and analytics for your properties
  • Protect against fraudulent or unauthorized activity
  • Comply with legal obligations

4. Data Storage and Security

We implement industry-standard security measures to protect your data:

  • Data is encrypted in transit (TLS/SSL) and at rest
  • We use Supabase for secure database hosting with row-level security
  • Payment information is processed securely by Stripe (PCI-DSS compliant)
  • Two-factor authentication (2FA) is available for account protection
  • Regular security audits and updates are performed

While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5. Third-Party Services

We use trusted third-party services to operate the Service:

  • Supabase: Database hosting, authentication, and file storage. See their Privacy Policy.
  • Stripe: Payment processing and subscription management. See their Privacy Policy.
  • Vercel: Website hosting and deployment. See their Privacy Policy.

These third parties have access to your information only to perform specific tasks on our behalf and are obligated to protect your information.

6. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences and settings
  • Understand how you use the Service
  • Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the Service.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Correction: Request correction of inaccurate data
  • Deletion: Request deletion of your data (subject to legal retention requirements)
  • Portability: Request your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal, tax, or regulatory purposes.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

← Back to Home