Privacy Policy

We collect information you provide directly to us, including: • Account Information: Name, email address, phone number, company name, and password when you create an account. • Property Data: Property listings, addresses, descriptions, and images imported via XML feeds from your property management systems. • Lead Information: Contact details, viewing preferences, and qualification responses from prospective tenants who interact with your listings. • Communication Data: Messages exchanged through our WhatsApp integration, emails, and SMS notifications. • Payment Information: Billing details processed securely through Stripe (we do not store full card numbers). • Usage Data: Information about how you use our platform, including IP addresses, browser type, pages visited, and interaction patterns.

We use the information we collect to: • Provide, maintain, and improve our services • Process viewing bookings and send confirmations and reminders • Qualify leads through our AI-powered WhatsApp conversations • Coordinate property access with landlords and property contacts • Send you technical notices, updates, and support messages • Analyse usage patterns to improve our platform • Detect, investigate, and prevent fraudulent transactions and abuse • Comply with legal obligations

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds: • Contract Performance: Processing necessary to provide our services to you. • Legitimate Interests: Processing for our legitimate business interests, such as improving our services, provided these do not override your rights. • Consent: Where you have given explicit consent for specific processing activities. • Legal Obligation: Processing necessary to comply with applicable laws.

We may share your information with: • Service Providers: Third-party vendors who assist us in providing our services, including: - Supabase (database hosting) - Stripe (payment processing) - Twilio/Meta (WhatsApp and SMS communications) - SendGrid (email delivery) - Google/Microsoft (calendar integrations) - Vercel (hosting infrastructure) • Property Contacts: Landlords and property managers receive relevant lead information for viewing coordination. • Legal Requirements: When required by law, court order, or governmental authority. We do not sell your personal information to third parties.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy: • Account data is retained while your account is active and for 30 days after deletion request. • Lead data is retained for the duration of the lead lifecycle plus 1 year for analytics. • Communication logs (WhatsApp, SMS) are retained for 90 days. • Payment records are retained as required by tax regulations (typically 7 years). • Audit logs are anonymised after 1 year. You may request deletion of your data at any time, subject to legal retention requirements.

We use cookies and similar technologies to: • Essential Cookies: Required for the platform to function (authentication, security). • Analytics Cookies: Help us understand how users interact with our platform (Vercel Analytics). • Preference Cookies: Remember your settings and preferences. You can control cookie preferences through your browser settings. Note that disabling certain cookies may affect platform functionality.

Depending on your location, you may have the following rights regarding your personal data: • Access: Request a copy of the personal data we hold about you. • Rectification: Request correction of inaccurate or incomplete data. • Erasure: Request deletion of your personal data ("right to be forgotten"). • Restriction: Request limitation of processing in certain circumstances. • Portability: Request your data in a structured, machine-readable format. • Objection: Object to processing based on legitimate interests. • Withdraw Consent: Where processing is based on consent, withdraw it at any time. To exercise these rights, contact us at privacy@autoprops.io. We will respond within 30 days.

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place: • Standard Contractual Clauses approved by the European Commission • Data processing agreements with all third-party providers • Encryption of data in transit and at rest Our primary data processing occurs within the EU (Supabase EU region).

We implement appropriate technical and organisational measures to protect your personal data: • Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256). • Access Controls: Role-based access with row-level security at the database level. • Authentication: Secure authentication with support for multi-factor authentication. • Monitoring: Continuous security monitoring and audit logging. • Incident Response: Documented procedures for handling security incidents. While we strive to protect your data, no method of transmission over the internet is 100% secure.

AutoProps is a B2B service not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by: • Posting the updated policy on our website • Sending an email to your registered email address • Displaying a notice in the dashboard Your continued use of AutoProps after any changes indicates your acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, please contact us: Email: privacy@autoprops.io For GDPR-related inquiries, you may also contact our Data Protection Officer at dpo@autoprops.io. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.