Privacy Policy

1. Introduction

PropBox ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our property sales management platform and related services.

By using PropBox, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this privacy policy, please do not access the platform.

2. Information We Collect

2.1 Information You Provide

• Account information (name, email address, phone number, password)
• Organization details (company name, address, business information)
• Lead and customer data you enter into the platform
• Property and project information
• Sales records, contracts, and payment information
• Communications and messages sent through the platform

2.2 Information from Third-Party Integrations

When you connect third-party messaging and email platforms, we collect:

• WhatsApp Business: Messages, contact information, and conversation history from your WhatsApp Business account
• Instagram: Direct messages, contact information, and conversation history from your Instagram Business account
• Facebook Messenger: Messages, contact information, and conversation history from your Facebook Page
• Microsoft Outlook: Emails, contact information, and email metadata from your connected Outlook account
• Gmail: Emails, contact information, and email metadata from your connected Google Workspace or Gmail account

We only access data necessary to provide our unified inbox functionality. We do not access personal posts, photos, calendars, or other content unrelated to business messaging and email communication.

2.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (pages visited, features used, time spent)
• IP address and general location information
• Cookies and similar tracking technologies

3. Payment Processing

We use Stripe to process subscription payments. When you provide payment information, it is transmitted directly to Stripe and is not stored on our servers. Stripe's collection and use of your payment information is governed by their Privacy Policy. We receive only limited information from Stripe, such as the last four digits of your card, card type, and billing address, to help us manage your subscription and prevent fraud.

4. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our platform and services
• Process transactions and manage your account
• Enable unified inbox functionality across messaging platforms
• Facilitate communication between you and your leads/customers
• Send service-related notifications and updates
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With your organization: Data is shared within your organization as configured by your administrators
• Service providers: Third-party vendors who assist in operating our platform, including cloud infrastructure providers, Stripe for payment processing, and Google Analytics for usage analytics
• Integration partners: Meta Platforms (for WhatsApp, Instagram, Facebook), Microsoft (for Outlook), and Google (for Gmail) as necessary to provide messaging and email services
• Legal requirements: When required by law, subpoena, or other legal process
• Business transfers: In connection with a merger, acquisition, or sale of assets
• With your consent: When you have given explicit permission

6. Third-Party Platform Integrations

Our platform integrates with Meta Platforms (WhatsApp, Instagram, Facebook), Microsoft (Outlook), and Google (Gmail) to provide unified messaging and email capabilities. When you connect these services:

• You authorize us to access your business account data as permitted by each platform's APIs
• Your use of these integrations is also subject to each provider's Privacy Policy and Terms of Service (Meta, Microsoft, and Google respectively)
• We store access tokens securely to maintain your connections
• You can disconnect integrations at any time from your settings
• Disconnecting will stop new data collection but previously collected data may be retained per our retention policy

7. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and monitoring
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We may also retain certain information as required for legal, accounting, or business purposes. Upon account deletion request:

• Your account data will be deleted within 90 days
• Backup copies may persist for an additional 30 days
• Anonymized or aggregated data may be retained indefinitely

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request a portable copy of your data
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing
• Withdraw consent: Withdraw previously given consent

To exercise these rights, please contact us using the information provided below.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

We do not sell personal information to third parties as defined under the CCPA.

10. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session and authentication state
• Remember your preferences and settings
• Analyze platform usage and performance via Google Analytics
• Provide security features

Google Analytics: We use Google Analytics to understand how users interact with our platform. Google Analytics collects information such as how often users visit, what pages they view, and what other sites they visited prior to coming to our platform. We use this information to improve our services. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. We ensure appropriate safeguards are in place for such transfers in compliance with applicable laws.

12. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: