Privacy Policy

1. Overview

PPRP Innovations ("Company", "we", "us") operates Property & Facilities Platform (the "Service"). This Privacy Policy explains how we collect, use, store, and share information when you use the Service. By using the Service you agree to this policy.

2. Information We Collect

Account information

When an administrator provisions an account for you, we collect your name and email address. You may also provide a phone number or other contact details within your profile.

Usage data

We collect server logs (IP address, browser type, pages visited, timestamps) to operate and secure the Service. We do not use third-party analytics or advertising trackers.

Customer Data

Data you enter into the Service (property records, work orders, leases, vendor information, documents, and related content) is Customer Data. We process it solely to provide the Service to your organization.

3. How We Use Information

• Providing, maintaining, and improving the Service
• Authenticating users and maintaining session security
• Sending transactional emails (password resets, system notifications)
• Detecting and preventing fraud, abuse, and security incidents
• Complying with legal obligations

We do not sell personal information. We do not use Customer Data for advertising.

4. Data Sharing

We share information only in these circumstances:

• Service providers. We use Supabase (database hosting), Vercel (application hosting), and Resend (transactional email). Each processes data only as necessary to deliver services to us and is bound by appropriate data processing agreements.
• Legal requirements. We may disclose information if required by law, court order, or government authority.
• Business transfers. If the Company is involved in a merger or acquisition, Customer Data may be transferred as part of that transaction.

5. Data Retention

We retain account data and Customer Data for as long as your organization's account is active. After account termination, data is retained for up to 90 days to allow for recovery, then deleted from production systems. Backup copies may persist for an additional period per our backup rotation schedule.

6. Security

We use industry-standard security measures including TLS encryption in transit, bcrypt password hashing, signed JWT session tokens with short expiry, row-level security in the database, and rate limiting on authentication endpoints. No system is perfectly secure; we will notify affected users promptly in the event of a breach.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, or delete your personal data, or to object to or restrict certain processing. To exercise these rights:

• Access or correction: Contact your organization's administrator, who manages your account.
• Account deletion / data erasure: You may request erasure of your personal data via Settings → Account → Request Data Erasure, or by contacting us at info@pprpinnovations.com.

We will respond to verifiable requests within 30 days. Note that some data may be retained as required by law or for legitimate business purposes.

8. Cookies

We use only strictly necessary cookies: a session cookie (pfp_session) to maintain your authenticated session, and a refresh token cookie (pfp_refresh) to re-issue sessions without requiring re-login. Both are HttpOnly and Secure. We do not use marketing or analytics cookies.

9. Children's Privacy

The Service is designed for use by organizations and their employees. We do not knowingly collect data from individuals under 16 years of age.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or a notice within the Service. The "Effective date" at the top of this page indicates when the policy was last revised.

11. Contact

For privacy questions or to submit a data request: info@pprpinnovations.com