Privacy Policy

This policy explains what Property Nexus collects, why, and what you can do about it. It applies to the Property Nexus platform (the "Service"), available at propertynexus.pro, and everything you do inside it. Questions: [email protected].

What we collect

• Account information. Name, email address, phone number, and (if you connect one) your agency or company name and DBA. Google sign-in gives us the email and name on your Google account.
• Mailbox connections. When you connect a mailbox, we store your email address and the credentials needed to read and send on your behalf: an app password or, for the one-click Gmail connect, Google OAuth tokens. Credentials are encrypted at rest (AES-256-GCM) with a key that lives only in our server environment. A database leak alone cannot expose them.
• Property and deal data. The properties, leads, deals, offers, documents, tasks, and contacts you enter or import. This is yours; we hold it so the Service can work.
• Enrichment data. When you run a search or analysis, we fetch property records, comps, owner information, and skip-trace results from third-party data providers (such as realestateapi.com) on your behalf.
• Payment information. If you buy credits, the charge is processed by Stripe. We never see or store your full card number.
• Bring-your-own-key (BYOK). If you paste an OpenRouter API key for AI features, only the last four characters are ever visible; the key itself is stored in encrypted vault storage and used server-side.
• Usage and technical data. Pages and features you use, device and browser basics, and error logs, so we can keep the Service running and improve it.

How we use it

• To run the Service: sourcing, skip-tracing, comps, underwriting, deal reports, buyer matching, messaging, documents, and e-sign.
• To send mail you ask us to send, and to receive mail addressed to your connected inboxes.
• To process credit purchases and keep your account and agency in order.
• To support you, secure the platform, and communicate about the Service (including the beta and your onboarding).

We do not sell your personal information, and we do not use your data to advertise to you through third parties.

Email you connect is your mailbox

We read and send from the mailboxes you connect, and only in the ways the Service offers: displaying your inbox, sending offers and deal packages you trigger, and watching for e-sign completion notices. Nothing is sent, deleted, or marked read without your action. You can disconnect a mailbox at any time from Settings.

Who we share with

• Service providers that host and power the platform: Supabase (database and auth), Vercel (hosting), Stripe (payments), Google (OAuth sign-in, Gmail connect, and Street View where enabled), and data providers you use (realestateapi.com and similar). Each has its own privacy policy and access is limited to what the Service needs.
• People you send to. When you send an offer, message, or deal package, the recipient sees what you sent from your own mailbox.
• Legal. When required by law, subpoena, or enforceable request, or to protect the rights and safety of users and the Service.

How long we keep it

We keep your data while your account is active, and delete or anonymize it a reasonable time after you close your account. Data you publish (such as marketplace listings) may remain visible to other users after deletion until removed from the marketplace.

Your rights

You can access, correct, or export your data, and you can delete your account and data by contacting [email protected]. We will respond within a reasonable time. Where your jurisdiction gives you additional rights (access, erasure, portability, objection), we honor them.

Security

Traffic is encrypted in transit (TLS). Credentials are encrypted at rest. We restrict internal access to production data to what support and operations genuinely require. No system is perfectly secure, and we will notify you if we find a breach affecting your data.

Children

The Service is not intended for anyone under 16. We do not knowingly collect data from children.

Changes

We may update this policy. Material changes will be announced in the Service. Continued use after changes means you accept them.

Contact

Property Nexus · [email protected]