Privacy Policy

Prop Easy (“Prop Easy,” “we,” “us”) is operated by Altrooz, Inc. This policy explains what we collect, how we use it, who we work with to run the service, and the choices and rights you have. It applies to prop-easy.com and our product apps (including the Lease Abstractor at abstract.prop-easy.app).

• •Account information — your name and email address. Your password is created and stored by our authentication provider in hashed form; we never see or store your plaintext password.
• •Content you upload — the lease agreements, amendments, spreadsheet templates, and the abstracts generated from them. This is your confidential business information and we treat it that way.
• •Usage and billing data — records of the abstracts you create, document and page counts, processing cost, and timestamps, so we can operate and account for the service.
• •Referral data — if you invite a colleague, we record the invitation and, if they sign up, the referral relationship (to credit rewards). Invitations never include your documents or abstracts.
• •Technical data — IP address, browser and device information, and security/access logs, plus essential cookies that keep you signed in.

• •To provide the service — extracting and structuring your lease data into reviewed, source-cited abstracts.
• •To authenticate you and keep your account and data secure.
• •To operate usage accounting and billing.
• •To send you essential service messages (e.g. email confirmation, password resets).
• •To prevent fraud, abuse, and bots, and to maintain and improve the product.

We do not use your uploaded documents or abstracts to train artificial-intelligence models, and we do not permit our providers to use your content to train their models.

We do not sell, rent, or trade your personal information or your documents, and we do not share them with third parties for their own purposes (including advertising). We share data only with the service providers (“sub-processors”) we rely on to run Prop Easy, strictly to provide the service to you, and only under agreements that require them to keep your data confidential and secure:

• •Supabase — authentication, database, and encrypted file storage (hosts your account, documents, and abstracts).
• •Vercel — application hosting and content delivery.
• •Anthropic — the AI that reads your lease text to generate the abstract. Content sent to Anthropic’s API is processed only to return your results and is not used to train its models.
• •Cloudflare Turnstile — bot and abuse protection on our sign-up and login forms (see below).
• •Resend — delivery of transactional emails (e.g. confirmations and password resets).
• •Upstash — rate limiting to protect our forms (processes IP addresses transiently).

We may also disclose information if required by law or valid legal process, limited to what is required; and, if Prop Easy is ever involved in a merger or acquisition, data may transfer to the successor entity subject to this policy.

Your lease documents and the abstracts produced from them are treated as strictly confidential. Each account’s data is isolated at the database level so other customers can never see it. Access by our personnel is restricted to what is needed to operate, support, and secure the service, and such access is logged.

We use Cloudflare Turnstile to protect our sign-up, login, and password-reset forms from automated abuse. Turnstile may process device and interaction signals to tell humans from bots. Cloudflare states that Turnstile does not use this data for tracking or advertising. Your use of these forms is also subject to the Cloudflare Turnstile Privacy Addendum.

We use essential cookies only — primarily to keep you signed in across our apps. We do not use advertising or third-party tracking cookies. Cloudflare Turnstile may set limited storage on the auth forms for bot detection as described above.

We keep your data for as long as your account is active. You can ask us to delete your account and content at any time; we will delete your documents, abstracts, and personal information within 30 days of your request, except where we are required to retain certain records by law. Residual copies may persist in backups for a limited period before being overwritten.

We protect your data with encryption in transit (HTTPS/TLS) and at rest, database-level access controls that isolate each account’s data, hashed passwords, and bot/abuse protection. No system is perfectly secure, but we work to safeguard your information using industry-standard practices.

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. If you are in the European Economic Area or the UK, these rights arise under the GDPR/UK GDPR. If you are a California resident, the CCPA/CPRA gives you the right to know, delete, and correct your information, to opt out of the “sale” or “sharing” of personal information (we do neither), and to not be discriminated against for exercising your rights.

To exercise any of these rights, email us at privacy@prop-easy.com.

Prop Easy is operated from the United States and our providers process data in the United States. If you access the service from outside the U.S., you understand your information will be transferred to and processed in the U.S.

Prop Easy is a business tool not directed to children, and we do not knowingly collect personal information from anyone under 16.

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, take reasonable steps to notify you.

Questions or requests about your privacy? Contact Altrooz, Inc. at privacy@prop-easy.com.