Privacy Policy
Last updated: April 2026 — Version 2.1
1. Introduction
PropertyBridge AI (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use our property management platform at propertybridge.ai.
By using PropertyBridge AI, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
From Landlords & Property Managers
- Name, email address, phone number, and business name
- Payment method information (processed via Stripe — we do not store card details)
- Stripe Connect account ID (for ACH rent collection)
- Property addresses and unit information
- Uploaded documents (leases, notices, etc.)
- Usage data, activity logs, and notification preferences
- Terms of Service acceptance records (version, timestamp, IP address)
From Tenants
- Name, email address, and phone number
- Bank account information (processed exclusively via Stripe Financial Connections — stored by Stripe only, not by PropertyBridge AI)
- Rent payment history
- Maintenance request content, photos, and videos
- Device and usage data
- SMS consent records (timestamp and opt-in method)
- Push notification device tokens (mobile app)
- Terms of Service acceptance records
From Landlord Clients
- Name, email address, and phone number (provided by their property manager)
- Viewing activity within the read-only client portal
From Vendors
- Business name, contact name, phone number, and email
- Service categories, licensing, insurance expiry, and service area
- Job history, ratings, and cost data
- SMS consent records (for job dispatch notifications)
Automatically Collected
- IP address, browser type, and device information
- Pages visited, features used, and session duration
- Error logs and performance data
3. How We Use Your Information
We use collected data to:
- Provide, operate, and improve the PropertyBridge AI platform
- Process rent payments via Stripe Connect
- Generate AI-powered features (maintenance triage, weekly summaries, Q&A)
- Send transactional notifications and communications (subject to your preferences)
- Comply with legal obligations
- Prevent fraud and abuse
- Fulfill data export and deletion requests
- Track Terms of Service acceptance and version history
We do NOT:
- Sell your personal data to third parties
- Use tenant data for advertising
- Share data across unrelated organizations on our platform
4. How We Share Your Information
We share data only with the following service providers as necessary to operate the platform:
- Stripe — payment processing and bank account verification
- Anthropic (Claude API) — AI text feature processing (triage, assistant, lease generation). Anthropic is contractually prohibited from using submitted data to train models.
- Google (Gemini API) — AI image and video analysis for maintenance triage. Google is contractually prohibited from using submitted data to train models.
- DocuSeal — electronic signature processing (Premium tier)
- RentCast — market rent comparable data (Premium tier)
- Twilio — SMS notifications
- Expo Push Notifications — mobile push notification delivery (device tokens only)
- Resend — email notifications
- Supabase / AWS — database infrastructure and file storage
- Clerk — authentication and session management
- Vercel — web application hosting
- Railway — API server hosting
- Law enforcement — when legally compelled by valid legal process (subpoena, court order, or applicable law)
All service providers are contractually required to protect your data and use it only as directed by us.
5. SMS Communications (TCPA)
We require explicit, freely given opt-in consent before sending any SMS messages. Consent is collected on the onboarding page at the time you provide your phone number — via an unchecked checkbox you must actively select. Providing a phone number is optional and never required to use the platform.
Message types sent by PropertyBridge AI:
- Tenants: maintenance updates, rent reminders, and important account notifications
- Vendors: job requests, scheduling confirmations, and work order updates
- Message frequency varies based on account activity
- Message and data rates may apply
- Reply STOP to opt out at any time — no further messages will be sent
- Reply HELP for help — we will respond with support contact information
- Tenant invites are sent by email only — no SMS is sent before explicit opt-in
SMS consent records (timestamp, opt-in method, and phone number) are maintained for a minimum of 5 years as required by TCPA. Opt-out requests via STOP are honored immediately and cannot be overridden.
6. Email Communications (CAN-SPAM)
All marketing and bulk emails include an unsubscribe link honored within 10 business days. Transactional emails (rent receipts, payment alerts, ticket updates) are exempt from unsubscribe requirements but will always be accurate and relevant to your account.
7. Cookies & Analytics
We use essential cookies required for platform operation (login sessions, CSRF protection) without requiring consent. Analytics cookies (aggregated usage data) require your explicit consent and are presented via a cookie consent banner on first visit. We use no advertising cookies.
You can manage cookie preferences at any time via the “Cookie Preferences” link in the footer or in your account settings.
8. Multi-Organization Data Isolation
If you are a tenant linked to multiple organizations (different landlords), your data in each organization is fully independent. No cross-organization data visibility exists. SMS consent and notification preferences are per-organization — consent given to one landlord does not authorize communications from another.
9. Data Retention
- Account data: active period + 3 years after account closure
- Payment records: 7 years (legal requirement)
- Maintenance records: 5 years
- Activity logs: 2 years minimum
- Tenant data: 2 years after last tenancy ends
- SMS consent records: 5 years
- Cookie consent records: 2 years
- Terms of Service acceptance records: account duration + 3 years
Payment records are retained for 7 years even after account deletion, as required by applicable law.
10. Data Security
- All data encrypted in transit (TLS 1.2+)
- Stored documents encrypted at rest (AES-256)
- Payment data handled exclusively by Stripe
- Bank account data handled exclusively by Stripe Financial Connections
- Rent payments routed via Stripe Connect — PropertyBridge AI never holds funds
- Role-based access controls and organization-scoped data isolation
- Regular security reviews
11. Your Rights (CCPA — California Residents)
If you are a California resident, you have the right to:
- Know what personal information we collect about you
- Request a copy of your personal data (data export)
- Request deletion of your personal data (subject to retention requirements)
- Opt out of the sale of your data (we do not sell personal data)
- Non-discrimination for exercising your privacy rights
To submit a data request, go to Settings → Privacy → “Request My Data” or contact us at hello@propertybridge.ai. We fulfill requests within 45 days. For cross-organization data requests, we include all data linked to your account across all organizations.
12. Data Breach Response
In the event of a data breach affecting personal information, we will:
- Identify and contain the breach within 24 hours of discovery
- Assess the scope and nature of data affected
- Notify affected users within the timeframes required by applicable state law
- Notify applicable state attorneys general as required
- Provide details on the incident, data involved, remedial steps taken, and actions users can take
We comply with breach notification requirements in all states where we operate, including California (72-hour AG notification for 500+ residents), New York (expedient notice + AG notification), Florida (30 days), Texas (expedient notice), and Georgia (expedient notice).
13. Children's Privacy
PropertyBridge AI is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have collected information from a minor, please contact us at hello@propertybridge.ai.
14. International Data
PropertyBridge AI is operated in the United States. If you access the Service from outside the United States, you consent to the transfer, processing, and storage of your information in the United States, where data protection laws may differ from those in your jurisdiction.
15. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email and an in-app notice, and may require your re-acceptance before continued use of the platform.
16. Contact Us
For privacy-related questions or requests, contact us at:
PropertyBridge AI
Email: hello@propertybridge.ai