Privacy Policy

Effective date: April 1, 2025

This Privacy Policy explains how Proparta collects, uses, discloses, and otherwise processes personal information when you visit our public website, join our waitlist, create or use an account, purchase or trial a paid plan, contact us, or otherwise interact with Proparta through proparta.com and related subdomains.

Short version: We collect account, subscription, communication, usage, and technical information to operate and improve Proparta. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising.

On this page

1. Scope of this Privacy Policy
2. What we collect
3. How we use personal information
4. How we share personal information
5. Cookies and similar technologies
6. Analytics and session replay
7. Emails and communications
8. Retention and deletion
9. Your rights and choices
10. Security
11. U.S. hosting and international transfers
12. Changes to this Privacy Policy
13. Contact us

1. Scope of this Privacy Policy

This Privacy Policy applies to personal information we collect from site visitors, waitlist signups, account holders, prospective customers, and people who contact us about the Services.

It does not apply to third-party websites, products, or services that have their own privacy policies, even if those services are linked from or integrated with Proparta. It also does not change the public-record status of building, property, permit, compliance, or agency data that may be displayed through the Services.

Proparta is intended for adults and is not directed to children under 18.

2. What we collect

Identity and account information

When you create or use a Proparta account, we may collect your name, email address, authentication-provider information, account status, email-verification status, and account metadata such as your role or subscription plan.

Billing and subscription information

If you start a paid plan or trial, our payment processor Stripe may collect payment details, billing address information, and other billing data directly from you. We generally receive limited subscription metadata from Stripe, such as a customer identifier, plan, billing interval, trial timing, and subscription status.

Product activity and saved content

We collect and store information needed to operate the Services, including buildings you save, buildings you recently viewed, dashboard or workspace layout preferences, and other product interactions associated with your account or session.

When you search by building identifier, address, BIN, or BBL, those searches and the resulting activity may be associated with your account or session so we can provide recent activity, saved-building features, analytics, diagnostics, and fraud or abuse prevention.

Waitlist, support, and correspondence

If you join our waitlist, request support, reply to an email, or otherwise contact us, we may collect your email address and the contents of your message or request.

Technical information

We and our providers may automatically collect technical and usage data such as IP address, browser and device information, operating system, timestamps, page views, clicks, navigation, referring URLs, and similar diagnostic information.

Cookies and similar technologies

We use cookies and similar technologies for authentication, security, session continuity, remembering state such as redirect targets, measuring usage, and debugging or improving the Services.

3. How we use personal information

We may use personal information to:

• create, authenticate, secure, and manage your account and access to the Services;
• provide Proparta features such as saved buildings, recent buildings, workspace layouts, subscriptions, and customer support;
• process payments, manage trials and subscriptions, and handle billing administration;
• send transactional messages such as verification emails, password reset emails, email-change confirmations, subscription notices, and support responses;
• send optional marketing or waitlist-launch updates where permitted by law or where you have chosen to receive them;
• monitor performance, investigate errors, prevent abuse, and improve the functionality, reliability, and security of the Services; and
• comply with law, enforce our agreements, and protect Proparta, our users, and third parties.

4. How we share personal information

We may disclose personal information to service providers and other parties that help us operate the Services, subject to appropriate contractual, operational, or legal restrictions.

Service providers and infrastructure

• Firebase and Google for authentication, account infrastructure, and related cloud services;
• Stripe for payment processing, subscription management, and billing operations;
• LogRocket for analytics, diagnostics, and session-replay tooling;
• Resend for sending transactional and related account emails; and
• other vendors that support hosting, storage, caching, monitoring, security, and core infrastructure.

Public-data and government-source requests

When we retrieve property or building information from public or government sources on your behalf, we generally send property or building identifiers rather than your personal account identity, although those systems and our infrastructure providers may still receive technical request metadata in the ordinary course of operating online services.

Legal, safety, and business transfer disclosures

We may disclose information if we believe it is necessary to comply with law, respond to valid legal process, protect safety, investigate abuse, enforce our Terms, or participate in a merger, financing, acquisition, reorganization, or sale of all or part of our business.

Aggregated or de-identified information

We may use and disclose aggregated or de-identified information for lawful business purposes, including analytics, security, research, and product improvement.

No sale or cross-context behavioral advertising share

Proparta does not sell personal information. Proparta also does not share personal information for cross-context behavioral advertising.

5. Cookies and similar technologies

We use cookies and similar technologies to operate the Services, authenticate users, maintain security, keep you signed in, remember limited session state, and understand how the Services are used.

Some cookies and similar technologies are necessary for the Services to function, including account-authentication and security-related technologies. Others support analytics, debugging, and performance monitoring.

Your browser or device settings may allow you to control certain cookies or related technologies. If you block or remove cookies, some parts of the Services may not work correctly.

6. Analytics and session replay

We use analytics and diagnostic tools, including LogRocket, to understand how people use Proparta, investigate bugs, improve performance, and troubleshoot support issues.

These tools may capture or infer information such as page views, navigation paths, clicks, scrolling, device and browser details, session timing, performance data, account identifiers, and information visible within the Services during your session.

We use these tools for service operation, diagnostics, fraud or abuse prevention, and product improvement, not for selling your personal information or for cross-context behavioral advertising.

7. Emails and communications

We may send transactional and service-related communications, including verification emails, password reset emails, subscription and billing notices, security alerts, support responses, and messages related to important changes in the Services.

We may also send optional product, launch, waitlist, or other marketing communications. You can opt out of non-essential marketing messages by using the unsubscribe method provided in the message where available or by contacting support@proparta.com. Even if you opt out of marketing, we may still send essential account or service communications.

8. Retention and deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain account history, comply with legal obligations, resolve disputes, enforce our agreements, and protect the Services and our users.

Account information, saved buildings, recent buildings, custom layouts, and similar account-linked data may be retained while your account is active and for a limited period afterward.

If you request account deletion, we aim to delete or de-identify account-related personal information within about 30 days, subject to backups, fraud and security review, technical constraints, billing and tax recordkeeping, legal obligations, dispute-resolution needs, and other legitimate retention needs.

Waitlist, support, and marketing information may be retained until it is no longer needed for those purposes, until you unsubscribe, or as otherwise required or permitted by law.

9. Your rights and choices

We aim to honor reasonable privacy rights requests for all users, regardless of location, subject to verification and applicable law. Depending on your circumstances, these rights may include the right to:

• know what personal information we collect and how we use it;
• access or request a copy of personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information, subject to lawful exceptions;
• request portability of certain information;
• opt out of non-essential marketing communications; and
• submit a complaint to us or, where applicable, to a regulator.

To exercise these rights, contact support@proparta.com. We may need to verify your identity before responding. Some information may be exempt from certain requests where retention is necessary for security, legal compliance, dispute resolution, fraud prevention, billing, or similar legitimate purposes.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information. For example, we use security controls intended to protect account access, transmit data over encrypted connections where appropriate, and limit access to information based on business need.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. U.S. hosting and international transfers

Proparta is operated in the United States, and personal information may be processed and stored in the United States and other jurisdictions where our service providers operate. If you access the Services from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or applicable law. When we do, we may revise the effective date above and provide additional notice where appropriate.

13. Contact us

If you have questions, comments, or requests about this Privacy Policy or our privacy practices, contact us at support@proparta.com.