Privacy Policy

This Policy describes how [COMPANY LEGAL NAME] collects, uses and protects information in connection with PROPERTY OS.

Information we collect

• Account information — name, email address, organization and role; passwords are stored only as salted scrypt hashes.
• Customer content — properties you monitor, cases, notes, tasks, documents and proposals you upload.
• Public records — data published by government agencies, including property identifiers, violations, complaints, permits and business-entity registration information. We do not display tenant names or unit-level details to contractors.
• Usage and security data — audit logs of actions, and a keyed hash of IP addresses for security and rate limiting (raw IP addresses are not stored).
• Billing — online payments are not yet enabled. When they are, card details will be handled by our payment provider; we will not store card numbers. [Name the provider before launch.]

How we use information

To provide and secure the Service, match owners with contractors at the owner’s request, send service notifications, and comply with law. We do not sell personal information.

AI processing

When you use AI features, relevant records are sent to our AI provider (Anthropic) to generate a response. [Confirm data-retention terms with the provider before launch.]

Sharing

With service providers under contract — currently hosting (Vercel), database and file storage (Supabase), email delivery (Resend), error monitoring (Sentry), malware scanning of uploaded files (Cloudmersive) and AI (Anthropic) [confirm list and data-processing terms before launch]; with contractors you invite to a quote request (request details only); and as required by law.

Retention and deletion

Account deletion anonymizes your personal data immediately and revokes sessions. Organizations with no remaining members are purged after 30 days. Audit logs are retained for security and legal purposes. [Retention schedule to be finalized.]

Your choices

You may access, correct or delete your information in Settings or by submitting a request through Support. [Add state-specific rights as applicable.]

Security

Organization data is isolated using database row-level security and server-side authorization; documents are stored privately and accessed via short-lived signed links. No system is perfectly secure.

Analytics

The Service does not use third-party advertising trackers. [Describe any privacy-conscious analytics added before launch.]

Contact

[Privacy contact.]