1. Introduction

Propty, a trade name of Group any B.V. ("Propty", "we", "us"), respects your privacy and is committed to protecting your personal data. This privacy policy explains how we handle your personal data when you visit our website or use our services.

2. Data controller

Group any B.V. (operating under the name Propty)
Email: [email protected]
Chamber of Commerce no.: 89946790

3. What data do we collect?

We may collect the following categories of personal data:

3.1 Data you provide to us

Name and contact details (email address, phone number)
Company details (company name, role)
Account details (username, password)
Communications with us (messages, feedback)

3.2 Data collected automatically

IP address and location data
Browser and device data
Usage data (pages visited, click behaviour)
Cookies and similar technologies

3.3 Data within the service

Property data (addresses, rents, contracts)
Tenant data (contact details, payment history)
Financial data (invoices, payments)
Documents and images you upload

4. Purposes of processing

We process your personal data for the following purposes:

Delivering and improving our services
Creating and managing your account
Processing payments
Communicating with you about our services
Sending newsletters and marketing (with your consent)
Complying with legal obligations
Analysing and improving our website

5. Legal bases for processing

We process your personal data on the basis of:

Performance of the contract: to deliver our services
Legitimate interest: for business operations and service improvement
Consent: for marketing and non-essential cookies
Legal obligation: for tax and administrative requirements

6. Sharing of data

We share your data with third parties only when necessary:

Service providers: hosting, payment processors, email providers
Professional advisers: lawyers, accountants (where needed)
Authorities: when legally required

We never sell your personal data to third parties.

7. Security

We take appropriate technical and organisational measures to protect your data, including:

Encryption of data (SSL/TLS)
Secure data centres
Access control and authentication
Regular security audits
Employee training

8. Retention periods

We retain your data no longer than necessary:

Account data: for the duration of the contract + 2 years
Financial data: 7 years (statutory retention)
Marketing data: until consent is withdrawn
Website analytics: 26 months

9. Your rights

You have the following rights under the GDPR:

Access: you can request a copy of your data
Rectification: you can have inaccurate data corrected
Erasure: you can request your data to be deleted
Restriction: you can have processing restricted
Portability: you can receive your data in a standard format
Objection: you can object to certain processing
Withdraw consent: you can withdraw consent at any time

To exercise your rights, please contact us at [email protected].

10. Cookies

We use cookies and similar technologies. See our Cookie Policy for more information.

11. International transfers

Your data may be processed outside the European Economic Area (EEA). In that case we ensure appropriate safeguards, such as Standard Contractual Clauses.

12. Changes

We may amend this privacy policy from time to time. Significant changes will be announced on our website or by email.

13. Complaints

If you have a complaint about our processing of your personal data, please contact us. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl).

14. Contact

For questions about this privacy policy, please contact:

Group any B.V. (operating under the name Propty)
Email: [email protected]
Chamber of Commerce no.: 89946790

15. Use of Google API services and Gmail integration

When you connect your Gmail account in Propty via Google OAuth, additional terms apply in accordance with the Google API Services User Data Policy, including its Limited Use requirements.

15.1 Which Google data we access

With your explicit consent via Google's OAuth consent screen, we request access to:

gmail.readonly — read access to your Gmail messages and threads. Used to display incoming emails in your Propty inbox and automatically link them to properties, tenancies and contacts.
gmail.send — send-on-your-behalf permission. Used to send emails from within Propty that appear as a reply in your Gmail Sent folder.
userinfo.email — your email address, to identify your connected account.

15.2 What we do with this data — and what we don't

We do:

Store messages in your company database within Propty to provide inbox functionality (read, reply, assign, link to property/tenant/repair).
Store tokens encrypted (AES-256-GCM), used only for your own API calls.

We do not:

We do not share Gmail data with third parties, except for service delivery (e.g. hosting), legal obligation, or with your explicit consent.
We do not use Gmail data for advertising, ad targeting, or resale.
We do not train general AI models on Gmail content. Any AI features (such as smart replies or categorisation) run per-company in isolation on only your own mailbox.
No human Propty employee reads your Gmail data, except (a) where required for security or regulation, (b) where you give explicit consent for support purposes, or (c) under a formal subpoena or court order.

15.3 How to revoke access

In Propty: go to Settings → Integrations → Gmail → Disconnect. Tokens are revoked immediately and encrypted records are deleted within 30 days.
With Google: myaccount.google.com/permissions → find "Propty" → Remove access.

15.4 Limited Use compliance

Propty's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Privacy Policy