Privacy Policy

1. Introduction

ClearFlow Services LLC (“we,” “us,” or “our”) operates PropCompliance. This Privacy Policy explains how we collect, use, store, and protect your information when you use our property compliance management platform (the “Service”). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account information. When you register, we collect your name, email address, and organization name. Passwords are stored as secure hashes and never in plaintext.

Property data. We collect property addresses, inspection records, compliance documents, vendor information, and any other information you enter into the platform.

Billing information. Payment processing is handled by our payment processor. We store only a customer ID and subscription status — never raw card numbers.

Usage data. We collect information about pages visited, features used, API calls made, browser type, and IP address to improve the service and for security purposes.

Communications. Emails and support messages you send us are retained to help resolve issues and improve our service.

3. How We Use Your Information

• To provide, operate, and improve the Service.
• To send compliance alerts and notifications you have requested.
• To process payments and manage your subscription.
• To provide customer support.
• To send product updates — you may opt out at any time from your notification settings.
• To detect fraud, abuse, and security incidents.
• To comply with legal obligations.

We do not sell your personal data to third parties, and we do not use your property data for advertising purposes.

4. Data Storage and Security

Your data is stored on Supabase infrastructure with encryption at rest and in transit using TLS 1.2 or higher. We implement industry-standard security measures including row-level security, API key authentication, and rate limiting. Access to production systems is restricted to authorized personnel operating under least-privilege principles.

Despite these measures, no system is completely secure. We cannot guarantee absolute security and encourage you to use a strong, unique password for your account.

5. Data Sharing

We do not sell your personal data. We share data with the following service providers only as necessary to operate the Service:

• Supabase — Database and file storage infrastructure.
• Vercel — Application hosting and edge infrastructure.
• Stripe — Payment processing.
• Resend — Transactional email delivery.
• Twilio — SMS alert delivery.
• Anthropic — AI-assisted document scanning features.
• Plausible Analytics — Privacy-friendly aggregate analytics. No personal data is collected or cookies set.

All service providers are bound by data processing agreements and may not use your data for their own purposes.

6. API Partners

If you access PropCompliance through a third-party property management platform that uses our API, your compliance data is accessible to that platform operator under their own privacy policy. ClearFlow Services LLC provides the underlying compliance infrastructure; the platform operator controls access to and presentation of your data within their product.

7. Tenant and Vendor Data

Property managers who use PropCompliance may enter information about tenants and vendors. This data is owned by the property manager and is not accessible to ClearFlow Services LLC staff except as necessary to provide technical support. We treat this data with the same security standards as all other user data.

8. Cookies and Tracking

We use session cookies for authentication only. These are essential for the Service to function and cannot be disabled without preventing login. We use Plausible Analytics for aggregate usage statistics — Plausible does not use cookies and does not track individual users or their browsing history. We do not use advertising trackers or behavioral fingerprinting.

9. Your Rights

You have the right to:

• Access your data at any time from within the Service.
• Export your data in standard formats.
• Delete your account and associated data at any time.
• Opt out of marketing emails at any time via your notification settings or the unsubscribe link in any email.
• Request correction of inaccurate or incomplete data.

To exercise these rights, contact us at hello@prop-compliance.com. We will respond within 30 days.

10. Data Retention

We retain your data while your account is active. After account deletion we retain data for 30 days to allow recovery, then permanently delete it. Billing records are retained for 7 years as required by applicable law. You may request earlier deletion by contacting us directly.

11. Children’s Privacy

PropCompliance is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately and we will promptly delete it.

12. Changes to This Policy

We will notify you of material changes to this Privacy Policy via email at least 30 days before they take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. The effective date at the top of this page reflects the most recent revision.

13. Contact

For questions, concerns, or data requests regarding this Privacy Policy:

ClearFlow Services LLC
8 Giovanni Dr, Waterford CT 06385
hello@prop-compliance.com