Privacy Policy

1. Introduction

Packs ("Service"), operated by PropertySimple, Inc. ("Company," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

This policy is designed to comply with the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other applicable data protection laws.

2. Information We Collect

2.1 Information You Provide

• Account information: Email address and authentication credentials (via email magic link or password).
• Profile information: Full name (optional), brokerage name, phone number, and real estate license number — provided voluntarily to personalize marketing materials.
• Property data: Listing details such as address, price, bedrooms, bathrooms, square footage, property descriptions, and features — provided via manual entry or synced from the PropertySimple API.
• Photos: Property images and personal photos (such as headshots) you upload or that are retrieved from MLS via the PropertySimple API. Personal photos may be processed by AI to generate professional headshots.
• Payment information: Processed and stored by Stripe. We do not store credit card numbers on our servers.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, and interaction patterns.
• Device data: Browser type, operating system, and device identifiers.
• Log data: IP address, access times, and referring URLs.

3. How We Use Your Information

• To generate AI-powered marketing content for your listings.
• To process payments and deliver purchased marketing packs.
• To authenticate your identity and maintain your account.
• To communicate with you about your account or the Service.
• To improve the Service and develop new features.
• To detect, prevent, and address technical issues or abuse.
• To comply with legal obligations.

4. Third-Party Processors

We share your information with the following third-party service providers who process data on our behalf:

• Supabase: Database hosting, file storage, and authentication. Your account data, property data, and uploaded photos are stored in Supabase infrastructure.
• Stripe: Payment processing. Stripe receives your payment information to process transactions. See Stripe's Privacy Policy.
• Google (Gemini AI): Property photos and listing data are sent to Google's Gemini API for AI image generation. See Google's Privacy Policy.
• Anthropic (Claude AI): Property data and descriptions are sent to Anthropic's Claude API for AI copy generation. See Anthropic's Privacy Policy.
• Vercel: Application hosting and deployment.
• PropertySimple: Listing data and agent profile information may be retrieved from the PropertySimple API to populate your account and property details. PropertySimple is the parent company operating this Service.

We do not sell your personal information to third parties.

5. Cookies

We use minimal cookies, limited to authentication session cookies required for the Service to function. We do not use advertising cookies or third-party tracking cookies.

6. Data Retention

We retain your account information and generated content for as long as your account is active. Property data and generated marketing packs are retained until you delete them or close your account. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

All Users

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request deletion of your personal data and account.
• Correction: Request correction of inaccurate personal data.

CCPA Rights (California Residents)

• Right to know what personal information is collected and how it is used.
• Right to delete personal information.
• Right to opt out of the sale of personal information (we do not sell your data).
• Right to non-discrimination for exercising your privacy rights.

GDPR Rights (EEA/UK Residents)

• Right to access, rectify, or erase your personal data.
• Right to restrict or object to processing.
• Right to data portability.
• Right to withdraw consent at any time.
• Right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at privacy@propacks.dev. We will respond within 30 days (or within the timeframe required by applicable law).

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we learn we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@propacks.dev.