Privacy Policy

Who we are

Propura is operated by Reuben Willis, trading as Propura (“Propura”, “we”, “us”), a sole trader based in Ireland. We are the data controller for the personal data described here. Registered/business address: Rochestown, Cork, Ireland. For any privacy matter, contact privacy@propura.ai.

What data we collect

• Account & profile: name, email, optional phone, password (stored only as a secure hash), profile details and preferences.
• Listings & content: property listings, photos/media, and any documents you upload (e.g. to the Document Vault).
• Identity & ownership documents: if you sell privately, we ask for government photo identification and the title deed (or local equivalent) for the property. These contain sensitive details — your date of birth, document numbers, your address and the property's identifiers. See Verification documents below for exactly how we handle them.
• Enquiries & messages: enquiries you send/receive and in-app messages.
• Transactions: records of boosts, reservation payments, subscriptions and board orders. Card details are handled by Stripe — we never store your card data.
• Support: messages you send our team.
• Technical: IP address, device/browser information and security logs.

How we use it, and our legal bases

• To provide the service (accounts, listings, enquiries, payments) — performance of a contract.
• Security, fraud prevention, and improving the service, including lead attribution for agents — our legitimate interests.
• Tax, accounting and legal compliance — legal obligation.
• Optional communications or features that require it — your consent, which you can withdraw at any time.

Who we share it with (processors)

We share data only with service providers that process it on our behalf under contract:

• Supabase — database, authentication and storage.
• Stripe — payments and payouts (incl. Stripe Connect).
• Resend — transactional email.
• Mapbox — maps and geocoding.
• Vercel — hosting and content delivery.
• Anthropic — AI features (only if/when you use them). Verification documents are never sent to it.

Some providers may process data outside the EEA; where they do, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data.

Verification documents

Before a private seller's listing can be seen publicly, we verify that the person selling the property is who they say they are and has the right to sell it. This is the most sensitive data we hold, so we are specific about it.

• A person reads them. Documents you submit for verification are reviewed manually by our team — today that is the founder alone. Nobody reviews a document except to make a verification decision.
• What we check. That the name on your identification matches the owner named on the deed, and that the document is legible and complete. We also compare submitted documents against other submissions, so that the same deed being used by more than one account is flagged to us. We never assert that a document is genuine.
• They are not shown to other users. Buyers, sellers and agents never see your identification or your deed. Other users only see whether your listing carries a verification badge. Documents you choose to attach to a message are a separate act — those are visible to the person you send them to.
• They are not sent to an AI provider. Verification documents are excluded from our AI features. They are not sent to Anthropic or any other AI service, and they are not used to train any AI model.
• Why we are allowed to. Preventing property fraud and protecting buyers is our legitimate interest; where verification is a condition of publishing a listing, it is also performance of our contract with you.
• You stay in control. You can delete a document from your Document Vault at any time in Account. Deleting a document that a verification relied on may withdraw that verification.

Verification documents are kept while your account is active and the verification stands. After that they are removed, except where we must keep a record to prevent repeat fraud or to meet a legal obligation.

How long we keep it

We keep personal data for as long as your account is active and as needed to provide the service, then for any period required to meet legal, tax and accounting obligations or to resolve disputes. When you delete your account, we remove or anonymise your personal data except where we must retain certain records (e.g. transaction records) by law.

Your rights

Under the GDPR you have the right to access, correct, erase, restrict or object to processing of your data, and to data portability. You can download a copy of your data and delete your account from Account → Privacy, or contact privacy@propura.ai. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

Cookies

Strictly-necessary cookies are always on; optional analytics and marketing cookies are off by default and only set if you opt in under Account → Privacy & Data. See our Cookie Policy for details.

Children

Propura is not intended for anyone under 18, and we do not knowingly collect their data.

Changes

We may update this policy from time to time; we'll change the “last updated” date above and, for material changes, notify you where appropriate.