Privacy Policy
This Privacy Policy explains how NEMAPP FINANCIAL ULC ("NEMAPP", "we", "us"), which operates PropVision, collects, uses, shares and protects personal information when you use the PropVision website (propvision.app and propvision.us), the web app, and the PropVision AI iPhone app (together, the "Service"). It is written for users in the United States and Canada. By using the Service you acknowledge this policy. Our Terms of Service also apply.
1. Information we collect
Information you give us
- Account information: your email address and password (stored in hashed form by our authentication provider, Firebase). If you sign in with Google, we receive your email address and basic profile details (name and profile picture) from Google.
- Addresses and property details you search: the addresses, cities and markets you analyze, and any asking price, unit, notes, property details or follow-up questions you type.
- Waitlist and contact information: if you join a waitlist or email us, your email address, any role or note you provide, and the contents of your messages.
Information collected automatically
- Usage information: your plan, the number of analyses you run each month, the features you use, and the reports generated for you, so we can deliver the Service and apply plan limits. On iPhone, saved reports are stored on your device.
- Device and technical information: IP address, browser or device type, operating system, app version, timestamps and error logs. We use these to secure the Service, prevent abuse (including rate limiting), and fix problems.
- Cookies, local storage and analytics: the website uses browser storage to keep you signed in and remember preferences (such as light or dark theme and the plan you were about to buy). Our home page loads the Google Ads tag to measure whether our ads lead to sign-ups; it can set cookies and send Google information such as your IP address, browser details and the page you visited. We do not use third-party advertising or analytics SDKs in the iPhone app.
Payment information
- Web: payments are processed by Stripe. Stripe collects your card details directly; we never see or store your full card number. We receive your email, plan, subscription and trial status, billing country, the last four digits and brand of your card, and payment history.
- iPhone: payments are processed by Apple through your Apple ID. We do not receive your payment details or Apple ID password. Apple sends us a signed record of the transaction (product, dates, subscription status and a transaction identifier) so we can unlock your plan.
2. How we use information
- To provide the Service: run analyses, generate reports and answer follow-up questions.
- To create and manage your account, subscription, free trial and plan limits, and to process payments, renewals, cancellations and refunds.
- To communicate with you about your account, billing, trials, security and changes to the Service, and to answer support requests.
- To protect the Service and our users: detect and prevent fraud, abuse, trial misuse and security incidents.
- To understand how the Service is used and improve it, including measuring our advertising.
- To comply with law, enforce our Terms, and establish or defend legal claims.
We do not use the addresses you search or your content to train AI models, and we do not allow our AI provider to do so (see section 3).
3. Who we share it with
We share personal information only as needed with service providers that process it on our behalf under contracts that restrict their use of it:
- Google Firebase (Google LLC): account sign-in and authentication, and storage of your account record (email, plan, usage count).
- Stripe (Stripe, Inc. and affiliates): web payments, subscriptions, trials, invoices and the billing portal.
- Apple (Apple Inc.): App Store distribution, in-app purchases and subscription management.
- Anthropic (Anthropic, PBC): the AI model that writes analyses and answers questions. It receives the addresses, property details and questions you submit, together with the property and market data we retrieve. Under Anthropic's commercial terms, this data is not used to train its models.
- RentCast (RentCast, LLC): property value, rent, property record and listing data. It receives the address you analyze.
- Cloudflare (Cloudflare, Inc.): hosting, content delivery, security and request logs. All website and app traffic passes through Cloudflare.
- Google Ads (Google LLC): advertising measurement on our home page, as described in section 1.
- Web search: to add public context about a location, the Service may send a search query containing the address or area (not your identity) to a public search API (DuckDuckGo).
We may also disclose information: to comply with law, a court order or a lawful request from authorities; to protect the rights, property or safety of NEMAPP, our users or others; with your consent or at your direction; and to a buyer or successor in a merger, acquisition, financing or sale of assets, subject to this policy.
We do not sell your personal information for money. Under California law, allowing the Google Ads tag to collect information on our home page may be considered "sharing" for cross-context behavioral advertising. You can opt out as described in section 7.
4. Where information is processed
NEMAPP is based in Canada. Our service providers store and process information in the United States and other countries, whose laws may differ from those where you live, and where it may be accessible to courts and authorities under those laws. We rely on contractual and other safeguards to protect it.
5. How long we keep it
- Account information and usage counts: for as long as your account is active, and deleted within 30 days after you ask us to delete your account, except as set out below.
- Billing and transaction records: kept as long as required by tax and accounting law (generally up to 7 years). Stripe and Apple keep their own records under their policies.
- Property lookups: cached on our servers for up to about 24 hours to avoid repeat lookups. Our AI and data providers keep request data only for limited periods under their own retention policies.
- Technical and security logs: generally up to 30 days, longer if needed to investigate a security incident or abuse.
- Waitlist entries and support emails: until you ask us to remove them or they are no longer needed.
6. Deleting your account
In the iPhone app you can delete your account from the account screen. On the web, or for any other deletion request, email lioramsellem@propvision.us from the email address on your account. Deleting your account does not cancel an active Apple subscription; cancel it in your iPhone settings first. Cancel a web subscription at propvision.app/billing.
7. Your privacy rights
Everyone. Wherever you live, you can ask us to access, correct or delete your personal information, and you can unsubscribe from any non-essential emails. We will respond within 30 days (or 45 days where US state law allows, with notice). We may need to verify your identity, usually by confirming a request from the email address on your account. You can also block cookies in your browser settings.
Canada (PIPEDA and provincial laws). You have the right to access the personal information we hold about you, to challenge its accuracy and have it corrected, and to withdraw consent to uses that are not required to provide the Service (withdrawing consent may mean we cannot provide some features). You may complain to our Privacy Officer at the contact below, and if you are not satisfied, to the Office of the Privacy Commissioner of Canada or your provincial privacy commissioner (for example, the Office of the Information and Privacy Commissioner for British Columbia).
California (CCPA/CPRA) and other US states with privacy laws. Subject to the law where you live, you have the right to:
- know what personal information we collect, use and disclose, and get a copy of it;
- correct inaccurate personal information;
- delete personal information we collected from you;
- opt out of the "sale" or "sharing" of personal information and of targeted advertising. We do not sell personal information. To opt out of the Google Ads measurement described above, email us with the subject "Do Not Sell or Share", or enable Global Privacy Control in your browser, which we honor as an opt-out request for that browser;
- limit the use of sensitive personal information (we do not use sensitive personal information for purposes that would require this); and
- not be discriminated against for exercising these rights.
You may use an authorized agent to make a request; we may ask for proof of authorization and to verify your identity directly. If we deny your request, you may appeal by replying to our decision; if we deny the appeal, you may contact your state attorney general.
In the last 12 months we collected the categories of personal information described in section 1: identifiers (such as email, IP address and account ID); commercial information (plan, subscription and purchase history); internet or other electronic network activity (usage and technical information); approximate location derived from IP address; and inferences, only to the extent the addresses you search suggest your interests. We collect it from you, your device, and our payment and sign-in providers, for the purposes in section 2, and disclose it to the categories of service providers in section 3.
8. Security
We use reasonable administrative, technical and physical safeguards, including encryption in transit (HTTPS), secrets kept out of our code, signature checks on payment and App Store notifications, and access controls. Card details are handled by PCI DSS-compliant processors (Stripe and Apple). No method of transmission or storage is completely secure, so we cannot guarantee absolute security. See our Security page for more. If a breach affects your personal information, we will notify you and regulators as the law requires.
9. Children
The Service is intended for adults and is not directed to children. We do not knowingly collect personal information from children under 13 (or under the minimum age required in your province or state). If you believe a child has given us personal information, contact us and we will delete it.
10. Changes to this policy
We may update this policy from time to time. We will post the new version here with a new effective date and, if the changes are material, tell you by email or in the Service before they take effect.
11. Contact us
Privacy Officer, NEMAPP FINANCIAL ULC
700 W Georgia St, Suite 2200
Vancouver, BC V7Y 1K8, Canada
Email: lioramsellem@propvision.us