PropFlow
← Back to home

Privacy Policy

Effective date: June 1, 2026

Not legal advice. PropFlow provides compliance tooling and document templates. It does not provide legal advice, and using PropFlow does not guarantee any legal outcome. You remain solely responsible for your own compliance with all applicable laws (including TCPA, DNC, state telemarketing, and real-estate regulations). Consult a licensed attorney for your situation.

1. Overview

This Privacy Policy explains how PropFlow ("we") handles information when you use our platform. We serve customers in the United States and Canada and design our handling of personal information with the CCPA/CPRA and PIPEDA in mind.

2. Information we collect

Account data (name, email, workspace, hashed password), billing metadata from our payment processor, and operational data you upload or generate — including seller-lead records, call outcomes, and consent logs (IP address, user agent, device fingerprint, and timestamp captured at sign-up for audit purposes).

3. Lead & contact data (you are the controller)

For seller-lead and contact data you import, you are the data controller and PropFlow acts as your processor. You represent that you have a lawful basis to upload and process that data. Personal identifiers are masked in the interface by default and revealed only within your plan limits.

4. How we use information

To provide and secure the Service, process payments, enforce compliance features, maintain audit logs, and communicate transactional messages (such as password resets and team invitations). We do not sell personal information.

5. Third-party processors

We rely on service providers including our cloud/database host, payment processor (Stripe), and email delivery. Calling, AI-voice, and data functionality run through credentials you connect (e.g., Twilio, Vapi, OpenAI), each governed by its own privacy terms.

6. Security

Passwords are hashed, third-party credentials are encrypted at rest in your workspace vault, tenants are isolated, and consent records are HMAC-signed to be tamper-evident. No system is perfectly secure; you use the Service at your own risk.

7. Retention

We retain account and audit data for as long as your account is active and as required to meet legal, tax, and compliance obligations, after which it is deleted or anonymized.

8. Your rights

Depending on your jurisdiction, you may request access to, correction of, or deletion of your personal information, and may object to certain processing. Email us to exercise these rights. For lead data you uploaded, direct end-user requests to you as the controller; we will assist as your processor.

9. Contact

Privacy requests: privacy@propflow.life.

Questions? Contact legal@propflow.life.