PRIVACY POLICY
Property Insights
Last Updated: May 2026
INTRODUCTION
Prop Insights (ABN 43 432 978 827) (“we,” “us,” “our,”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Property Insights.
Property Insights consists of two separate products:
- Standalone App — Data stored locally on your device
- Cloud SaaS — Data stored on Fly.io cloud infrastructure
Please read this Privacy Policy carefully. If you do not agree, do not use Property Insights.
SECTION 1: STANDALONE APP (LOCAL STORAGE)
1.1 Data Collection
What we collect:
Account Information:
- Email address (for login)
- Subscription plan (free/paid)
- Billing information (handled by Paddle, not us)
Personal Data: The Standalone App collects NO data. Your property investment data (addresses, financials, notes, calculations) is stored only on your device using browser localStorage.
1.2 Who Has Access
You: Full access (you’re using your own device)
Us: No access (we cannot see your data)
1.3 Data Security
Storage: Browser localStorage on your device (unencrypted)
Backup: You are responsible for backups
Deletion: Clear your browser cache to delete
1.4 What We Don’t Do
We do NOT:
- Collect your data
- Upload your data to servers
- Store your data in the cloud
- Monitor your usage
- Track you
- Share your data with third parties
1.5 Third-Party Access
The Standalone App does NOT connect to third-party services, analytics, or advertising networks.
SECTION 2: CLOUD SAAS (CLOUD STORAGE)
2.1 Data Collection
What we collect:
Account Information:
- Email address (for login)
- Subscription plan (free/paid)
- Billing information (handled by Paddle, not us)
Property Data:
- Property addresses, details, financials
- Analysis results, projections
- Notes and observations
- Any data you input
Usage Data:
- Login timestamps
- Features used (for product improvement)
- Error logs (for debugging)
2.2 Data Storage & Location
Where: Fly.io cloud infrastructure
Locations: AU and EU data centers (Fly.io operates globally)
Redundancy: Multiple servers for backup
Encryption: AES-256 encryption in transit and at rest
2.3 Data Processing
We process your data to:
- Provide the Cloud SaaS service
- Store and retrieve your property data
- Generate calculations and analysis
- Backup and restore your data
- Improve the service (anonymized analysis)
- Comply with legal obligations
2.4 Data Retention
While your account is active:
- All data retained and accessible
After you cancel:
- Data retained for 30 days (in case you want to re-activate)
- Deleted after 30 days
- Automatic deletion (you cannot restore after 30 days)
2.5 Who Has Access
You: Via login credentials (encrypted password)
Our Team: For support, maintenance (limited access)
Paddle: For payment processing (no property data shared)
Fly.io: Cloud infrastructure provider (data in encrypted form)
We do NOT:
- Share your property data with third parties
- Sell your data
- Use your data for advertising
- Analyze your property investments
- Profile you
2.6 Your Rights
Access: You can download your data anytime
Correction: You can update your data anytime
Deletion: Delete your account anytime (data deleted after 30 days)
Portability: Export your data as JSON/CSV
SECTION 3: GDPR COMPLIANCE (Cloud Users)
If you are in the European Union, GDPR applies.
3.1 Legal Basis for Processing
We process your data on the basis of:
- Contractual necessity — Processing required to provide the service you paid for
- Consent — You consented when you accepted this Privacy Policy
- Legitimate interests — Improving the service, preventing fraud, legal compliance
3.2 Data Protection Officer
For GDPR inquiries: hello@prop-insights.app
We will respond to data subject requests within 30 days as required by GDPR.
3.3 Data Transfer (US Servers)
Cloud SaaS data is stored on Fly.io, which operates servers in AU and EU.
Data Transfer: If your data is transferred to EU servers, it remains encrypted. Fly.io complies with international data transfer frameworks.
3.4 Your GDPR Rights
Right of Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Delete your account and data (after 30-day retention)
Right to Restrict Processing: Limit how we use your data
Right to Portability: Export your data in portable format
Right to Object: Object to certain processing
Right to Lodge Complaint: With your data protection authority
To exercise these rights: Email hello@prop-insights.app
3.5 Data Processing Agreement (DPA)
Cloud SaaS users in the EU: A Data Processing Agreement is available on request.
Email hello@prop-insights.app for a copy.
SECTION 4: THIRD-PARTY SERVICES
4.1 Payment Processing (Paddle)
If you purchase a paid subscription:
- Paddle processes payments
- Paddle does NOT receive your property data
- Paddle handles GST/VAT compliance
- See Paddle’s Privacy Policy: https://www.paddle.com/privacy
4.2 Cloud Infrastructure (Fly.io)
Cloud SaaS data hosted on Fly.io:
- Fly.io is the infrastructure provider
- Fly.io does NOT have access to unencrypted property data
- See Fly.io’s Privacy Policy: https://fly.io/legal/privacy
4.3 No Other Third Parties
Prop Insights App does NOT use:
- Google Analytics or tracking
- Advertising networks
- Marketing automation tools
- Data brokers
- User analytics platforms
SECTION 5: SECURITY
5.1 Standalone App
- Data stored locally (browser localStorage)
- No encryption (local storage, your device)
- Your device security is your responsibility
5.2 Cloud SaaS
- Encryption in transit (TLS/SSL)
- Encryption at rest (AES-256)
- Password hashed (bcrypt)
- Regular security audits
- Daily backups
- DDoS protection via Fly.io
5.3 Security Incident Response
If we discover a security breach:
- We’ll investigate immediately
- Notify affected users within 24 hours
- Provide details of compromised data
- Recommend remedial steps
SECTION 6: CHILDREN’S PRIVACY
Property Insights is not intended for users under 18. We do not knowingly collect information from children.
If you’re under 18, do not use Property Insights.
SECTION 7: INTERNATIONAL USERS
7.1 Non-AU/NZ/UK Users
Standalone App (Free or Paid): Available globally
Cloud SaaS: Available in Australia, New Zealand, UK only
Non-AU/NZ/UK users can use the Standalone App but cannot purchase Cloud SaaS.
7.2 Governing Law
This Privacy Policy is governed by Australian law.
If you’re in the EU, GDPR also applies (see Section 3).
SECTION 8: YOUR PRIVACY CHOICES
8.1 Standalone App
- All data is local to your device
- You control all data (we have no access)
- Delete by clearing browser cache
8.2 Cloud SaaS
- Control your data via account settings
- Export data anytime (JSON/CSV)
- Delete account anytime (data deleted after 30 days)
- No analytics cookies or tracking
SECTION 9: CHANGES TO THIS POLICY
We may update this Privacy Policy anytime. Changes apply to new accounts; existing accounts continue under original terms.
Material changes will be announced 30 days in advance.
SECTION 10: CONTACT US
For privacy questions:
Email: hello@prop-insights.app
Response time: Within 5 business days
For GDPR/Data Protection requests:
Email: hello@prop-insights.app
Subject: “Data Subject Request”
Response time: Within 30 days (as required by GDPR)
APPENDIX A: CLOUD SAAS DATA PROCESSING DETAILS
For transparency, Cloud SaaS processes data as follows:
| Data Type | Collected | Used For | Shared |
|---|---|---|---|
| Email address | Yes | Login, support | No |
| Property data | Yes | Service provision | No |
| Calculations | Yes | Analysis, storage | No |
| Login timestamps | Yes | Security, analytics | No |
| Error logs | Yes | Debugging | No |
| Subscription info | Yes | Billing (via Paddle) | Paddle only |
APPENDIX B: GDPR ARTICLE 13 NOTICE (Cloud SaaS)
Information for EU residents when personal data is collected:
Controller: Property Insights, Australia
Purpose: Provide Cloud SaaS service
Legal Basis: Contract, consent, legitimate interests
Retention: Until account deleted + 30 days
Recipients: Fly.io (infrastructure), Paddle (payment)
Rights: Access, rectification, erasure, portability, objection
Complaints: Your data protection authority
END OF PRIVACY POLICY
📋 COMPLIANCE SUMMARY
✅ Standalone App
- Data collection on for your account and licence
- No GDPR concerns (no personal data)
- User responsible for device security
✅ Cloud SaaS
- GDPR compliant
- Data encryption
- User rights respected
- DPA available on request
- Transparent data processing
✅ Both Products
- Australian law applies
- No third-party sharing
- No tracking or analytics
- User controls their data