Privacy Policy

Propefi, Inc. is the business responsible for the personal information described in this policy. You can reach us at privacy@propefi.com or by phone at 310-570-0409 for any privacy question, request or complaint.

Depending on how you use the Services, we may collect the following categories:

• Identifiers: name, email address, phone number, postal and property address, account ID, IP address, device identifiers.
• Customer records: billing contact details, payment card information processed by our payment processor (we do not store full card numbers).
• Property and record content: receipts, invoices, permits, warranties, photos, inspection documents, service history and other materials you upload, plus data our AI and OCR systems extract from them.
• Commercial information: subscription plan, transactions, service bids and marketplace activity.
• Internet and device activity: pages viewed, referring URLs, app interactions, crash logs, approximate location derived from IP.
• Precise geolocation (only with permission): if you enable it to tag a property location. This is treated as sensitive personal information.
• Professional information: brokerage, license number, contractor trade and service area for professional users.
• Inferences: predicted maintenance needs, property condition scoring and valuation signals derived from the above.

We collect this information directly from you, automatically from your device, and from service partners such as realtors, escrow companies, contractors and public records sources acting with your authorization.

We use personal information to create and maintain property health records; verify and timestamp records (including writing cryptographic proofs to our private, permissioned ledger); transfer records to a new owner at closing where authorized; provide reports, alerts and predictive maintenance insights; process payments; provide support; prevent fraud and abuse; comply with law; and, where permitted, send marketing communications you can opt out of at any time.

We retain each category only as long as needed for these purposes or as required by law. Property records are retained for the life of the account or property record unless you request deletion; log and security data is typically retained up to 24 months; billing records are retained as required by tax and accounting rules.

We disclose personal information to service providers and contractors that process it on our behalf under written contract (hosting, analytics, payments, customer support, AI/OCR processing); to parties you direct us to share with (your realtor, contractor, warranty provider, insurer, lender or a buyer of your property); to professional advisors; and to authorities when legally required. In a merger, acquisition, financing or sale of assets, personal information may be transferred as a business asset.

We do not sell your personal information for money. Some analytics and advertising cookies may constitute a “sale” or “sharing” for cross-context behavioral advertising under California law. You can opt out at any time using the “Do Not Sell or Share My Personal Information” link in our footer or by emailing us.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect;
• Delete personal information we hold about you, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the sale or sharing of personal information;
• Limit the use and disclosure of sensitive personal information;
• Opt out of, and receive information about, automated decision-making technology;
• Not receive discriminatory treatment for exercising these rights.

Submit a request at privacy@propefi.com or by calling 310-570-0409. We confirm receipt within 10 business days and respond within 45 days (extendable by another 45 days with notice). We verify requests by matching the information you provide against our records; an authorized agent may submit a request with written permission and verification of your identity.

Opt-out preference signals. We honor the Global Privacy Control (GPC) and other browser-based opt-out preference signals as a valid opt-out of sale/sharing for the browser or device sending the signal, as required by California regulations.

Shine the Light. California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Minors. Under California Business and Professions Code § 22581, California users under 18 who are registered users may request removal of content they posted; contact us and we will remove it from public display.

• Automated decision-making technology (ADMT) and AI. We use AI and OCR to extract data from documents and to generate condition scores, maintenance forecasts and valuation signals. These outputs are informational and do not by themselves make legal or similarly significant decisions about you. Where we use ADMT in a manner covered by the California ADMT regulations, we provide a pre-use notice, an explanation of the logic and expected outputs, the ability to opt out where required, and the ability to request human review. Contact us to exercise these rights.
• AI transparency (SB 942). Where Propefi generates or materially modifies image, audio or video content, we provide disclosure and, where applicable, latent provenance metadata identifying the content as AI-generated, and we make a free detection mechanism available on request.
• Delete Act / DROP. Propefi is not a registered data broker: we collect personal information directly from the consumers with whom we have a relationship. If our status ever changes, we will register with the California Privacy Protection Agency and process deletion requests received through the Delete Request and Opt-out Platform (DROP) as required.
• Sensitive personal information. We use precise geolocation and account credentials only to provide the Services and security, and not to infer characteristics about you. You may still submit a request to limit their use.
• Risk assessments and cybersecurity. We maintain risk assessments and reasonable security procedures appropriate to the personal information we process, as required by the CCPA regulations.
• Neural and biometric data. We do not collect neural data or biometric identifiers.

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware and other states with comprehensive privacy laws have rights to access, correct, delete, obtain a portable copy of, and opt out of targeted advertising, sale and certain profiling, plus the right to appeal a denied request. If you are in the EEA or UK, we process personal data under the GDPR on the bases of contract performance, legitimate interests, consent and legal obligation, and you may lodge a complaint with your supervisory authority. International transfers are made under appropriate safeguards such as Standard Contractual Clauses.

We use strictly necessary, functional, analytics and (where enabled) advertising cookies. You can control cookies through our cookie banner, your browser settings, or a GPC signal. Blocking strictly necessary cookies may break parts of the Services.

We use encryption in transit and at rest, access controls, logging and vendor diligence to protect personal information. No system is perfectly secure. If a breach of unencrypted personal information occurs, we will notify affected individuals and regulators as required by California Civil Code § 1798.82 and other applicable laws.

The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

We review this policy at least every 12 months and will post any changes here with a new “Last updated” date. Material changes will be communicated by email or in-product notice.