Privacy Policy

Last updated November 3, 2026

This Privacy Policy explains how Property Partner LLC ("Property Partner," "we," "us," or "our") collects, uses, shares, and protects information in connection with the Property Partner website at propertypartner.io and the Property Partner application (together, the "Service"). Property Partner is a business tool for real-estate professionals in the United States; it is not directed to consumers or to the general public.

1. A quick summary

We collect the minimum we need to run the Service: your work email to sign you in (we use one-time email codes, so we never ask for or store a password), your organization and billing details, and basic security logs.
We do not store card or bank-account numbers. Payments are processed by Stripe.
The Service surfaces information about properties and their owners that we aggregate from public records, licensed parcel data, and third-party skip-trace providers. This is different from information about you as a customer, and this policy addresses both.
We do not sell your personal information, and we do not use third-party advertising or cross-site tracking cookies. Our product analytics are cookieless and do not track you across other sites.
You have privacy rights (access, correction, deletion, and more). To exercise them, email team@propertypartner.io.

2. Who and what this policy covers

This policy covers two distinct kinds of personal information:

Customer information — information about you and the people at your organization who create accounts, sign in, and are billed for the Service.
Property and owner information — information about real property and the individuals or entities associated with it (owners, mailing contacts, and skip-traced contact details) that the Service aggregates so our customers can identify and contact potential sellers. We aggregate public records and licensed data on our own initiative; skip-trace contact details are obtained on a customer's skip trace request, which we then retain and reuse as a shared dataset on our own initiative — a trace result may be reused to serve other customers who later skip trace the same owner within a freshness window, so for that dataset we act as a controller. The per-customer skip trace action you request is processed on your behalf (see our Data Processing Addendum).

Where a section applies to only one of these, we say so.

3. Information we collect

Information you provide

Account and sign-in. Your email address. We authenticate you with a one-time code sent to that address (passwordless), so we do not collect or store passwords.
Organization and billing. Your organization name, the market(s) you subscribe to, seat assignments, and billing contact details.
Support and communications. Messages you send us and the contents of those messages.

Payment information

Payments are processed by Stripe, our payment processor, which collects your card details or bank-account debit (ACH) mandate directly. We do not receive or store full card numbers or bank-account numbers. We retain only the limited, non-sensitive metadata Stripe returns to us — such as the payment method type, card brand, the last four digits, and the charge or mandate status — so we can generate invoices and manage renewals. Our invoices are generated by us from our own billing records, not fetched from Stripe.

Information collected automatically

Essential cookies. A session cookie (pp_session) keeps you signed in, and a security cookie (pp_csrf) protects forms against cross-site request forgery. Both are strictly necessary for the Service to function; the session cookie holds an opaque token (not your identity) and is set HttpOnly and (over HTTPS) Secure. See Section 4.
Usage and activity data. Records of your activity in the Service — the searches you run and save, the properties you monitor and the alerts they generate, and the leads you skip trace and export — which we use to operate entitlements and usage metering and to administer any guarantee or remedy included in your offer terms.
Security and operational logs. We log limited technical data such as IP address, user agent, and request timestamps to operate the Service, prevent abuse, enforce rate limits, and diagnose problems.
Product analytics. When enabled, we use a privacy-focused analytics service (Matomo), configured to be cookieless with no cross-site tracking. These analytics measure aggregate usage (such as which pages are visited and whether sign-up succeeds) to improve the Service. They set no cross-site or third-party advertising cookies and do not track you across other websites. Our analytics provider (Matomo Cloud, operated by InnoCraft) hosts this data in the European Union; see Section 14 and our Data Processing Addendum. Analytics are configuration-gated and may be off in a given environment.

Property and owner information (the product's core data)

To provide lead generation, the Service aggregates information about properties and their owners from three kinds of sources:

Public records — for example code-enforcement actions and inspections, 311 service requests, and property-tax and delinquency records, obtained from government sources (initially for Jefferson County / Louisville Metro, Kentucky).
Licensed parcel data — parcel boundaries and attributes provided under license from Regrid, made available only for counties we have licensed (see Section 8).
Third-party skip-trace data — owner contact information (phone numbers and email addresses), together with a Do-Not-Call (DNC) status for each phone number, and property-classification signals, obtained from third-party data providers when a customer requests a skip trace. A trace result is retained as part of our shared, aggregated dataset and may be reused to serve other customers who later skip trace the same owner within a freshness window (see Section 6 and our Data Processing Addendum).

4. Cookies and similar technologies

We use only the cookies the Service needs to work. We do not use advertising cookies or third-party trackers.

pp_session: Strictly necessary. Keeps you signed in by carrying an opaque session token. HttpOnly, SameSite=Lax, and Secure over HTTPS. Cleared when you sign out.
pp_csrf: Strictly necessary. A security token that protects form submissions against cross-site request forgery.
Analytics: Cookieless. Our analytics (when enabled) measure aggregate usage without setting a tracking cookie and without following you across other sites.

Because our only cookies are strictly necessary, the Service does not present a tracking-cookie consent banner. You can block or delete cookies in your browser, but the Service will not keep you signed in without the session cookie.

5. How we use information

To provide, maintain, and secure the Service, authenticate you, and keep you signed in.
To process payments, generate invoices, and manage subscriptions, renewals, and failed-payment (dunning) handling.
To aggregate, match, and surface property and owner information so customers can identify and contact potential sellers.
To operate entitlements and usage metering (such as leads skip-traced and exported) and to administer any guarantee or remedy included in your offer terms.
To monitor for abuse, enforce our Terms and rate limits, and comply with legal obligations.
To understand aggregate usage and improve the Service (via cookieless analytics).
To respond to your requests and communicate with you about the Service.

6. Skip-trace data, Do-Not-Call status, and your responsibilities

When a customer skip traces owner contact details for a property, the Service requests that information from a third-party skip-trace provider and surfaces the phone numbers and email addresses it returns. Every traced phone number is displayed with its Do-Not-Call (DNC) status, so the number's presence on a Do-Not-Call registry is visible before anyone dials it. We obtain and surface these details on the customer's instruction. The result of a trace is retained as part of our shared, aggregated data and may be reused to serve other customers who later skip trace the same owner within a freshness window, rather than being re-purchased for each customer; the per-customer skip trace action is processed on that customer's instruction, and our Data Processing Addendum describes this split.

Important — DNC status is informational, not a compliance guarantee

The DNC indicator reflects the best-available information from our data provider at the time of the lookup. It may be incomplete or out of date, and it does not by itself establish whether a given call is lawful. The federal National Do-Not-Call Registry does not cover every number or every situation — for example, it interacts with wireless numbers, established-business-relationship exceptions, state-specific registries and rules, and your own internal do-not-call obligations.

Responsibility for compliance with the Telephone Consumer Protection Act (TCPA), the Telemarketing Sales Rule, state telemarketing and Do-Not-Call laws, and all applicable calling, texting, and consent requirements rests entirely with the customer placing the calls or messages. We are not a telemarketing-compliance service and do not provide legal advice. You are responsible for scrubbing against the registries you are required to honor and for maintaining any consent your outreach requires.

7. Accuracy and the nature of the data

Property and owner information comes from public records and third-party sources and is provided "as is." It may be incomplete, out of date, or inaccurate, and inclusion in the Service is not a statement about any person. The Service is not a consumer reporting agency, and the information is not a "consumer report" under the Fair Credit Reporting Act (FCRA). You may not use the Service or its data to make decisions about credit, employment, housing or tenant screening, insurance, or any other purpose covered by the FCRA.

8. How we share information

We do not sell your personal information. We share information only as follows:

Service providers (subprocessors). We use vetted vendors to run the Service — including Stripe (payments), our skip-trace and address-verification providers (owner contact and property classification), Regrid (licensed parcel data), an interim map-imagery provider (Esri) that serves satellite base-map tiles to signed-in map views (interim, slated for replacement), our cloud hosting and database infrastructure, our transactional email provider (when enabled), and, when analytics is enabled, our analytics provider (Matomo Cloud, operated by InnoCraft, which hosts analytics data in the European Union). These providers may process personal information only to provide services to us and under obligations consistent with this policy. Our current and anticipated subprocessors are described in our Data Processing Addendum.
Legal and safety. We may disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, and safety of our customers, the public, or us.
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Licensed parcel data (Regrid) is made available under our license with Regrid and is subject to that license's restrictions on redistribution and resale; it is provided to customers only for licensed counties. See our Terms of Service for the restrictions that apply to your use of third-party data.

9. Data retention and deletion

Property Partner is built on an append-only, event-sourced data store: changes are recorded as an immutable log of events rather than by overwriting rows. We retain information for as long as your account is active and as needed to provide the Service, and thereafter as required to meet legal, tax, accounting, security, and dispute-resolution obligations.

You may request access to, correction of, or deletion of your personal information by emailing team@propertypartner.io. We honor verified requests within 45 days (we will tell you if we need a permitted extension). Because our system of record is append-only, "deletion" is carried out by removing or redacting the personal data from active systems and revoking access to it; any residual copies in backups are purged as those backups expire in the ordinary course. We may retain a limited record of a request and the minimum data the law requires us to keep.

10. Your privacy rights (California, Virginia, Colorado, and other states)

Depending on where you live, you may have some or all of the following rights regarding your personal information: to know or access what we hold, to correct it, to delete it, to obtain a portable copy, and to opt out of "sale," "sharing," or targeted advertising. As to your customer and account information, we do not sell it, we do not share it for cross-context behavioral advertising, and we do not conduct targeted advertising. How we handle property-owner information — including any applicable right to opt out of its disclosure — is addressed in Section 11. We do not use personal information for solely automated decisions that produce legal or similarly significant effects.

To exercise any right, email team@propertypartner.io. We will verify your request against the information we hold and will not discriminate against you for exercising a right. You may use an authorized agent, and where the law provides one (for example under the California Consumer Privacy Act as amended by the CPRA, the Virginia Consumer Data Protection Act, or the Colorado Privacy Act), you may appeal a decision by replying to our response. California residents may also request the categories of personal information we collected, the sources, the business purpose, and the categories of recipients, as described in this policy.

11. Rights of property owners and other non-customers

If you are a property owner (or another individual whose information appears in the Service) and you are not a Property Partner customer, you may also contact us at team@propertypartner.io to request access to or deletion of the information we hold about you — or to opt out of our disclosure of that information, to the extent applicable law provides such a right — subject to verification and to the legal exceptions above. Note that some of this information originates from public records and third-party data providers; where that is the case, we will act on the copy within the Service and can point you to the originating source where appropriate.

12. Security

We protect information with encryption in transit (HTTPS), passwordless authentication with opaque server-side sessions, a strict content-security policy, least-privilege access to production systems, and reliance on Stripe for payment data so that card and bank numbers never touch our systems. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Children

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact us and we will delete it.

14. Users outside the United States

The Service is offered and operated from the United States and is intended for United States businesses. It is not directed to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not intend to offer the Service to, or monitor the behavior of, data subjects in those regions. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local law, and you understand that your information will be processed in the United States (except that, when analytics is enabled, usage-analytics data is processed by our analytics provider in the European Union).

15. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice. Your continued use of the Service after an update means you accept the revised policy.

16. Contact us

Property Partner LLC
3723 Greenville Ave STE 73256, Dallas, TX 75206
team@propertypartner.io