Privacy Policy

Data controller

Propria — contact: info@propria.be

For privacy requests (access, rectification, erasure, restriction, portability, objection), email info@propria.be. We respond within one month as required by GDPR.

Data we process

Account data: name, email, password hash, role, organisation membership.

Property & rental data: buildings, units, leases, tenants, guarantors, payment records, bank transaction references, documents, condition report photos.

Technical data: IP address, browser type, session logs, authentication tokens, usage metadata needed to operate and secure the service.

Support & communications: messages you send to us, support tickets, demo requests.

Purposes and legal bases

Providing the service (contract — Art. 6(1)(b) GDPR): account management, lease and payment workflows, document storage, bank reconciliation via Ponto.

Security and fraud prevention (legitimate interest — Art. 6(1)(f)): access controls, audit logs, abuse detection.

Legal obligations (Art. 6(1)(c)): retention where required by tax or rental law when applicable to your use.

Optional AI features (contract or legitimate interest): processing prompts and retrieved document chunks to assist your team; you control uploaded knowledge-base documents.

Recipients and subprocessors

Infrastructure and hosting providers located in the European Union.

Ponto (Isabel Group) when you connect a bank account — governed by their terms and your consent to the connection.

Email or notification providers strictly necessary to deliver service communications.

We do not sell personal data. Subprocessors are bound by data processing agreements where required.

International transfers

Primary storage and processing is in the EU/EEA. If a subprocessor outside the EEA is used, we rely on appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

Retention

Account and rental property data is kept while your subscription or account is active and for a reasonable period after closure to handle disputes and legal obligations.

Backups may retain data for a limited rolling window before overwrite.

You may request deletion subject to legal retention requirements.

Your rights

Under GDPR you may access, rectify, erase, restrict, port, or object to processing of your personal data, and withdraw consent where processing is consent-based.

You may lodge a complaint with the Belgian Data Protection Authority (APD/GBA): www.dataprotectionauthority.be

Cookies

We use essential cookies and local storage for authentication, language, and theme preferences. We do not use third-party advertising cookies on the application.

The marketing site may use minimal analytics only if enabled and disclosed separately.