Privacy Policy

Effective date: August 13, 2026 · Version: v2026.08

This policy explains what ProctR Technologies Inc. ("ProctR," "we," "us," or "our") collects when you use the ProctR apps and website, why we collect it, who we share it with, and what control you have.

ProctR is software for running rental property. Much of what it does — collecting rent, recording a lease, settling a deposit, tracking an inspection — requires handling personal and financial information about real people. We have tried to write this plainly.

The Service is offered in the United States only.

---

Short version

• We collect what the product needs to work: who you are, the property and lease, the money, and the records.
• We never see or store your full card or bank account numbers. Those go straight to Stripe.
• We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
• Rental arrangements are shared by nature — your landlord, your manager, and your co-tenants see what their role requires. Section 4 sets out exactly who sees what.
• Financial and lease records are kept even after you close your account, because the law and the other parties to those records require it. Section 8 explains.

---

1. Information you give us

Account and identity. Your name, email address, phone number, and — if you set them — a username and profile photo. Email addresses are unique on the platform.

Role profiles. Depending on how you use ProctR, additional details on your owner, tenant, ProctR, or broker profile. For professional managers this can include licensing details, brokerage affiliation, service area, and the fees you advertise.

Property information. Addresses, unit details, descriptions, photos, and property groupings. We geocode addresses into coordinates so maps and location search work.

Lease information. Parties, dates, rent amount and cadence, deposits, late-fee rules, and lease documents. Tenants may add emergency contacts.

Financial information. Invoices and line items, payment history, payout destinations and ownership splits, and — for autopay — the authorization you agreed to, including the version of the text, when you agreed, and the device you agreed from.

Payment methods — what we actually hold. When you add a card or bank account, the details go directly to our payment processor. What we keep is a token that lets us reference the method, plus display information: card brand, last four digits, expiry month and year, bank name, and account type. We never receive, store, or have access to your full card number, full bank account number, routing number, CVV, or Social Security number.

Inspections, maintenance, and records. Photos, video, and audio you capture; issues you log; maintenance requests and updates; work orders and attachments; checklist progress; and deposit-settlement statements.

Signatures. Electronic signatures and acknowledgements on lease documents, along with the metadata that makes them verifiable.

Communications. What you send us at support, and messages you exchange through the Service.

2. Information collected automatically

Device and technical data. Device type, operating system, app version, platform, language, IP address, and general location inferred from IP.

Usage data. Screens visited and actions taken — signing up, adding a door, starting a payment, authorizing autopay, and similar product events. Analytics events identify you by an opaque account identifier only. We do not send your name, email address, phone number, or property addresses to our analytics providers.

Diagnostics. Crash reports and error traces — stack traces, device state, and app configuration at the moment something failed.

Push tokens. If you enable notifications, the device token needed to deliver them.

Cookies and similar technologies. Our website uses cookies necessary to operate it and to understand traffic. The mobile apps do not use cookies, though embedded third-party components may use similar identifiers. We do not use advertising cookies or third-party ad trackers.

3. Device permissions

The app asks only for what a feature needs, at the moment it needs it. You can decline, and you can change your mind in your device settings — declining disables the related feature, not the app.

We do not request or collect your device's GPS location. Property coordinates come from geocoding the address you type, not from tracking your phone.

4. How information is shared between users

This is the part people most often want to understand, so here it is directly.

ProctR is a multi-party product. A tenancy involves a tenant, an owner, and often a manager, and each needs to see different things. Access is enforced at the database level and is scoped to your role and to the specific properties and leases you are connected to.

Connections require both a request and an approval. Nobody is attached to your property or lease without an explicit approval on both sides.

Broadly:

• Owners see their properties, the leases on them, their tenants' names and contact details, invoices and payment status, maintenance and inspections, and their payouts.
• Tenants see their lease, what they owe, their payment history and methods, their autopay authorization, their maintenance requests, inspections on their unit, and the contact details of the owner or manager responsible for them.
• Linked ProctRs see the properties assigned to them and the same operational detail for those doors, plus their own earnings.
• Brokers see the ProctRs affiliated with their brokerage.
• Co-tenants on the same lease see the shared lease and shared invoices.
• Co-owners of the same property see the property, its leases, and the ownership splits.

Public profiles. Professional ProctR profiles are discoverable — that is their purpose. Service area, advertised fees, and reviews are visible to owners searching for a manager.

Shared links. Lease and invoice links can be shared and require sign-in to open. A signed-in person who is not a party to the lease sees a limited, read-only view. Anyone holding the link can open that view, so share deliberately.

Ending a connection stops future access — it does not erase history. Records of what already happened remain with the parties to them.

5. Why we use your information

• To run the Service — maintain your account, show your properties and leases, generate invoices, process payments and payouts, deliver notifications.
• To move money correctly — compute what is owed, apply fees and splits, route payouts, and keep an auditable record of every transaction.
• To keep records — leases, agreements, signatures, inspections, and financial history, which are the point of the product and are often legally required.
• To secure the Service — authenticate you, detect fraud and abuse, and investigate incidents.
• To support you — answer questions and troubleshoot.
• To improve the product — understand which features are used and where people get stuck, using aggregated and pseudonymous data.
• To comply with the law — tax reporting, anti-money-laundering obligations on our payment processor, lawful requests, and defending legal claims.

We do not use your information to build advertising profiles, and we do not use your Content to train machine-learning models for anyone else.

6. Service providers we share with

We share information with companies that run parts of the Service for us. Each receives only what its job requires, and each is contractually bound to use it only for that purpose.

Currently in use

Stripe — payments, payouts, and identity verification for payout accounts. Receives the payment details you enter, transaction data, and — for owners and managers receiving money — identity and bank information collected by Stripe directly.

Supabase — database, authentication, server-side functions, and file storage. Holds all application data, hosted in the United States.

Deno Deploy — the runtime our server-side functions execute on. Receives data passing through those functions.

Google (Firebase Cloud Messaging) — push notification delivery. Receives device tokens and notification content.

Google (Firebase Analytics) — product analytics. Receives pseudonymous events and device data.

Google (Firebase Remote Config) — feature flags and minimum version requirements. Receives device and app-version data.

Google (Places API) — address autocomplete. Receives address text as you type it.

Mixpanel — product analytics. Receives pseudonymous events keyed to an opaque account identifier.

Sentry — error and crash reporting. Receives diagnostic data, stack traces, and an account identifier.

OpenStreetMap — map tiles. Receives tile requests for the map area being viewed.

Apple and Google — sign-in, where you choose it. Receive authentication data from your Apple or Google account.

Planned

We expect to add an email provider and Twilio for text messaging. Text messages will require your separate consent. We may add AI features for tasks like extracting terms from a lease document; if we do, we will update this policy first, and we will not permit a provider to train its models on your Content without your explicit consent.

Stripe deserves a specific note. If you receive money through ProctR, you open a Stripe connected account and agree to Stripe's terms directly. Stripe collects and verifies your identity information — including government identification and tax details — for its own regulatory obligations. That information goes to Stripe, not to us. Stripe's privacy policy governs it: https://stripe.com/privacy

7. Other disclosures

Legal. We may disclose information when required by law, subpoena, or court order; to cooperate with a lawful investigation; or where necessary to protect our rights, your safety, or the safety of others.

Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of it. We will notify you before your information becomes subject to a materially different policy.

Aggregated data. We may publish statistics that cannot identify anyone.

We do not sell your personal information. We have not sold or shared personal information for cross-context behavioural advertising in the past twelve months, and we do not do so today.

8. How long we keep information

Account information — while your account is open, and for a reasonable period afterward.

Financial records — invoices, payments, payouts, and fee records are retained for at least seven years, as tax and financial regulations require.

Lease records, agreements, and signatures — retained for the term of the arrangement and for as long afterward as the statute of limitations and the other parties' interests require. A lease is a record two or more people rely on; we cannot delete one party's copy on request.

Autopay authorizations — retained with their pinned mandate text, because that record is what evidences what you agreed to.

Inspections and property media — retained while the property relationship is active and for a reasonable period afterward, since these frequently matter to deposit disputes.

Analytics and diagnostics — retained on a rolling basis per our providers' standard retention.

9. Account deletion

You can request deletion in the app.

Be aware of what deletion means today. When you delete your account, we deactivate it — you can no longer sign in or act on the platform, and your profile stops being visible to other users. We retain the underlying records, because financial history, lease records, signed agreements, and payment authorizations are shared with other parties and are subject to the retention requirements in Section 8. We cannot unilaterally erase a lease your landlord also relies on, or payment records our tax obligations require.

Before deleting, settle outstanding balances and payouts. Deleting does not cancel a lease, forgive rent, or end a ProctR Agreement.

If you want to know specifically what is retained about you, email support@proctr.app.

10. Your privacy rights

Depending on where you live, you may have some or all of these rights:

• Know what we collect, why, and who we share it with.
• Access a copy of your personal information.
• Correct information that is wrong.
• Delete your personal information, subject to the retention limits in Sections 8 and 9.
• Opt out of sale or sharing for targeted advertising — we do not do either, so there is nothing to opt out of.
• Non-discrimination — we will not treat you worse for exercising a right.

California residents (CCPA/CPRA). The categories we collect are set out in Sections 1 and 2: identifiers, customer records, commercial information, internet activity, geolocation inferred from address and IP, audio and visual information, professional information, and inferences drawn from product usage. Purposes are in Section 5, recipients in Section 6, and retention in Section 8. We do not sell or share personal information as those terms are defined. You may exercise your rights yourself or through an authorized agent.

Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and other state privacy laws. Residents of states with comprehensive privacy laws have comparable rights of access, correction, deletion, and portability, and may appeal a decision we make. To appeal, reply to our response or email support@proctr.app with "Privacy appeal" in the subject line.

Florida (FDBR). Florida residents have similar rights under the Florida Digital Bill of Rights, to the extent it applies to us.

How to exercise a right. Email support@proctr.app. We will verify your identity through your account and respond within the time the applicable law requires — generally 45 days, extendable once where permitted. Verification matters here: much of what we hold concerns other people too.

Sensitive information. We do not collect Social Security numbers, government identification, or precise device location. Where Stripe collects those for payout account verification, they are held by Stripe under its own policy.

11. Security

We protect information with encryption in transit and at rest, row-level access controls enforced in the database rather than only in the app, tokenization of payment credentials so sensitive numbers never reach our systems, scoped access for our own team, and monitoring for errors and unusual activity.

No system is perfectly secure. We cannot guarantee absolute security, and you play a part: use a strong, unique password, keep your device locked and updated, and tell us promptly at support@proctr.app if something looks wrong with your account.

If a breach affects your personal information, we will notify you and the relevant regulators as the law requires.

12. Children

The Service is for adults. It is not directed to anyone under 18, and we do not knowingly collect information from children. If you believe a child has given us personal information, email support@proctr.app and we will delete it.

13. Data location and transfers

We operate in the United States, and information is stored and processed there. Some providers may process data in other countries under appropriate safeguards. If you access the Service from outside the United States, you understand your information will be processed in the United States, where privacy laws may differ from your own.

14. Third-party sites

The Service may link elsewhere — including your bank, our payment processor, and sites other users reference. This policy does not cover them. Read theirs.

15. Changes to this policy

We may update this policy. If a change is material, we will give reasonable notice in the app, by email, or both, before it takes effect, and we will update the version and effective date above. Past versions are available on request.

16. Contact us

Questions, requests, or complaints:

ProctR Technologies Inc.

• Email: support@proctr.app
• Web: https://www.proctr.io

If you are not satisfied with our response, you may have the right to complain to your state attorney general or privacy regulator.