Privacy Policy - United States

Effective: 2026-10-05 Version: 2026.10.05 Privacy Officer: Privacy Officer (hello@getpropty.ai)

This Privacy Policy describes how Propty collects, uses, discloses, and protects personal information for users of the Propty platform in the United States of America.

1. Information we collect

Account information: name, business email, business phone, company name, role, billing address, payment method.
Customer data: the information our customers (operators) provide about their tenants/guests/leads when using the Service. We process this data only as a processor on behalf of our customer.
Usage data: logs, IP address, device identifiers, page views, feature usage.
Communications: customer support tickets, voice call recordings and transcripts (made after a recording notice at the start of each call), email correspondence.
Prospect data: for our own outbound, business contact information from public sources (Google Maps, Yelp, industry directories).

2. How we use information

Provide, maintain, and improve the Service.
Process payments and prevent fraud.
Communicate about the Service, including security and product updates.
Send marketing emails (subject to applicable consent rules and unsubscribe).
Comply with legal obligations.
Protect the rights, property, and safety of Propty, our customers, and the public.

3. Sharing

We share personal information with:

Subprocessors (vendors processing on our behalf - full list below and at /legal/subprocessors).
Customers for whom we process tenant/guest data (the customer is the controller; we are the processor).
Legal requests when required by law (court order, lawful warrant, regulatory request).
Successors in interest (merger / acquisition / asset sale).

We do not sell personal information.

Mobile numbers are never shared or sold

Mobile phone numbers collected for SMS purposes, and consent to receive SMS, are never sold, rented, or shared with third parties or affiliates for their own marketing purposes. Mobile information is shared only with the service providers that deliver the messages on our behalf, and only for that purpose.

Message frequency varies. Message and data rates may apply.

4. Subprocessors

Anthropic, PBC - AI model inference (Claude) (United States)
Stripe, Inc. - Payment processing + Stripe Connect Express (United States + EU)
Vapi Labs, Inc. - Voice AI infrastructure (United States)
Twilio, Inc. - SMS + voice telephony (United States)
Resend - Transactional email (United States)
Smartlead.ai - Cold outbound email infrastructure (United States)
Instantly.ai - Cold outbound email infrastructure (United States)
Supabase Inc. - Primary database + auth (United States (us-east-1))
Vercel Inc. - Application hosting + edge network (United States + global edge)
Inngest Inc. - Background job orchestration (United States)
Clerk Inc. - Authentication (United States)
Lob Inc. - US certified mail (legal notices) (United States)
SearchAPI.io - AI/search rank tracking + Google Maps scraping (United States)
Buffer Inc. - Social media scheduling (Instagram, TikTok, YouTube, etc.) (United States)

We assess each subprocessor's privacy and security practices. We update this list when subprocessors change and notify customers under our Data Processing Addendum.

5. Security

We use administrative, technical and organizational safeguards designed to protect personal information, including access controls and encryption. No system or transmission method is completely secure. See our Security Overview for information about our approach and how to request current security documentation. This policy does not represent that Propty holds a particular certification or audit report. Security obligations in an applicable signed agreement or DPA remain in effect.

6. Retention

We retain personal information for as long as needed for the purposes above, then delete or anonymize. Specific retention windows are in our Data Retention Schedule, available on request.

State-specific rights (US)

Depending on your state, the information involved and whether the applicable law covers the processing, you may have rights to access, obtain a portable copy, correct or delete personal information; opt out of sale, sharing, targeted advertising or certain profiling; or limit certain uses of sensitive information. These rights have statutory exceptions and are not identical in every state.

Submit a request through Privacy & data requests, Do Not Sell or Share, or hello@getpropty.ai. You do not need to select the correct statute to contact us. We may verify your identity and an authorized agent's authority before acting. We will not unlawfully discriminate against you for exercising applicable rights. If we deny a request, you may ask us to reconsider or appeal by emailing hello@getpropty.ai with the request reference and the reason for your appeal. Where required, our response will explain the applicable appeal and regulator-complaint process.

Where we process information for a property operator, we may direct your request to that operator and assist it under our DPA. We do not treat a request to delete data as permission to erase records we must lawfully retain, such as a suppression record needed to honor a do-not-contact request.

Children

Our business software and marketing site are directed to adult business users, not children. Operators must not provide children's information without an appropriate lawful basis and any required permission. Contact hello@getpropty.ai if you believe a child has provided information directly to Propty so we can investigate and take appropriate action.

Contact

Privacy questions: hello@getpropty.ai Mailing: Propty, Inc., 1205 Taylor Street, Austin, TX 78702 Regulator: FTC + state attorneys general - https://www.ftc.gov