Privacy Policy

Last updated: 24 August 2025

Proparo (“Proparo”, “we”, “us”, or “our”) provides a holistic building and property management platform for residential, commercial, hotel, and retail assets. We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our websites, use our web or mobile apps, or otherwise interact with us (together, the “Services”).

By using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services.

1. Who we are

Proparo Pty Ltd
Registered office:Sydney, NSW, Australia
Email: privacy@proparo.com

If you are in Australia, we comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are located in the EU/UK, we process your data in accordance with the GDPR/UK GDPR.

2. Scope & roles

Controller vs Processor.
- We act as a data controller for information we collect about our website visitors, account holders, marketing contacts, billing contacts, and platform usage.
- We act as a data processor (or service provider) for information our customers input into the platform about their properties, assets, tenants, service providers, and staff (“Customer Data”). In those cases, our customer is the controller and is responsible for lawful collection and instructions. We process Customer Data only according to the customer’s instructions and our agreement.

3. Information we collect

3.1 Information you provide

Account details: name, role, company, email, phone, password hashes.
Profile & organisation: property portfolios, building details, asset registers, maintenance schedules, documents, photos, floor plans.
Tenant & contractor data (Customer Data): names, contact details, lease and payment information, service requests, work orders, compliance and warranty documents.
Payments & billing: billing address, ABN, limited payment details (processed by our payment processors), transaction history.
Support & communications: messages, call notes, feedback, survey responses.

3.2 Information we collect automatically

Usage & device data: IP address, browser type, device identifiers, app version, pages viewed, actions taken, timestamps, referral URLs.
Cookies & similar technologies: to remember preferences, secure sessions, and measure performance (see Cookies below).

3.3 Information from third parties

Identity verification or onboarding partners (as applicable).
Payment processors and financial institutions (limited transaction metadata).
Contractors/“tradies” engaged via the platform.
Property portals or data enrichment services where permitted by law.

We do not intentionally collect information from children under 16. If you believe a child has provided personal information, contact us and we will delete it.

4. How we use information

We use information to:

Provide and operate the Services, including user authentication, hosting, backups, and customer support.
Maintain asset lifecycles: manage registers, plan preventive maintenance, track tasks, warranties, compliance, and work orders.
Process payments and issue invoices/receipts.
Facilitate communications among owners, managers, tenants, and contractors (e.g., notifications, maintenance coordination).
Improve and secure the Services: monitoring, debugging, analytics, fraud prevention, and security incident detection.
Personalise features and content, including recommendations and saved preferences.
Comply with legal obligations, enforce our agreements, and protect our rights and users.
Marketing (with your consent where required): send product updates, invitations, and promotional materials. You can opt out at any time.

Legal bases (AU): performance of a contract, legitimate interests (e.g., product improvement, security), consent (for certain marketing/cookies), and legal obligations.

5. How we share information

We may share information with:

Service providers under contract (hosting, cloud infrastructure, analytics, email/SMS delivery, customer support, document storage, payment processors).
Contractors/“tradies” and stakeholders at your direction to deliver maintenance and building services.
Payment and financial partners to process transactions and prevent fraud.
Professional advisers (lawyers, auditors, insurers) under confidentiality.
Corporate transactions: in connection with mergers, acquisitions, financing, or sale of assets (your data remains protected and you will be notified where required).
Legal and safety: where required by law, regulation, court order, or to protect rights, safety, or property.

We do not sell personal information. We do not share personal data for cross-context behavioral advertising where prohibited.

6. International transfers

Your information may be processed in countries other than where you reside. Where we transfer personal data internationally, we implement appropriate safeguards (e.g., standard contractual clauses, intra-group agreements, and technical measures). Hosting regions and subprocessors are available upon request.

7. Data retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Typical periods include:

Account & platform data: for the life of the account and a reasonable period thereafter.
Financial/transaction records: up to 7 years (or as required by tax and corporate laws).
Customer Data: per the customer’s instructions and our agreement.

When no longer required, we take steps to de-identify or securely delete data.

8. Your rights & choices

Depending on your location, you may have rights to:

Access your personal information and receive a copy.
Correct inaccurate or incomplete data.
Delete your personal information (subject to legal exceptions).
Object to or restrict certain processing.
Withdraw consent at any time (for processing based on consent).
Data portability in a machine-readable format.
Opt out of marketing communications.

To exercise rights, email privacy@proparo.com. We may need to verify your identity. If we process your data on behalf of a customer, please direct your request to that customer (the controller).

If you are in Australia and have concerns, you may also contact the OAIC. EU/UK residents may contact their local data protection authority.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, logging, and backups. No system is 100% secure; please use strong passwords and keep them confidential.

10. Cookies & similar technologies

We use:

Strictly necessary cookies for login, security, and core functionality.
Functional cookies to remember settings and preferences.
Analytics/performance cookies to understand usage and improve our Services.
Advertising/attribution cookies (limited; only with consent where required).

You can manage cookies via our cookie banner and your browser settings. Blocking some cookies may impact functionality.

11. Third-party links & integrations

The Services may include links to third-party sites or allow integrations (e.g., payment gateways, identity services). We are not responsible for the privacy practices of those third parties. Review their policies before sharing information.

12. Deactivation & deletion

If you deactivate your account, access is revoked immediately. Unless you request earlier deletion, we retain account data for a limited period (e.g., 30–90 days) to enable reactivation or export, after which we delete or de-identify it, subject to legal retention obligations. For immediate deletion, contact privacy@proparo.com.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified via the Services or by email. Please review this page periodically. The “Last updated” date shows when the latest changes were made.

14. Contact us

Questions or requests about this Privacy Policy or your personal information:

Proparo Privacy Team
Email: privacy@proparo.com