Privacy Policy

Propvora is a trading name of Blackwellen Ltd (“Propvora”, “we”, “our”, or “us”), a company registered in England and Wales under company number 16482166, with its registered office at 61 Bridge Street, Kington, HR5 3DJ. Blackwellen Ltd is the data controller for personal data collected through the Propvora platform and is registered with the UK Information Commissioner’s Office (ICO) under reference ZC160806.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have. It applies to all users of the Propvora website and platform.

Contact: legal@propvora.com

We collect the following categories of personal data:

Account Data

• Name and email address (required for registration)
• Password (stored as a secure hash — we never see your plain-text password)
• Profile information you choose to add (avatar, job title)
• Billing information (name, billing address — payment card details are held by Stripe, not us)

Property and Operational Data

• Property addresses, unit details, financial data, tenancy information you enter into your workspace
• Contact records (landlords, tenants, suppliers, agents) you create within the platform
• Documents and files you upload to your workspace
• This data is yours — we process it only to provide the Service

Usage Data

• Log data: IP address, browser type, pages visited, timestamps
• Device information: operating system, screen resolution
• Feature usage patterns (to improve the Service)

AI Copilot Data

• Queries you submit to the AI Copilot
• Workspace context provided to AI (property names, financial summaries — no raw sensitive data)

Communications Data

• Support queries and correspondence
• Feedback and survey responses

We use your personal data for the following purposes and legal bases:

• To provide the Service: Processing your account data and workspace content is necessary for the performance of our contract with you.
• To process payments: Necessary for the performance of our contract. Payment processing is handled by Stripe.
• To send transactional emails: Account verification, subscription confirmation, security alerts — necessary for the performance of our contract.
• To improve the Service: Usage analytics to understand how features are used, based on our legitimate interest in improving our platform.
• To communicate product updates: With your consent, we may send you product news and updates. You can unsubscribe at any time.
• To comply with legal obligations: Where required by law.
• To detect and prevent fraud: Based on our legitimate interest in maintaining platform security.

We use the following third-party sub-processors to operate the Service. Each is bound by appropriate data processing agreements:

Where data is transferred outside the UK/EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK ICO.

We retain your personal data for the following periods:

• Account data: Retained for the duration of your subscription, plus 30 days after termination (to allow data export)
• Workspace content: Deleted 30 days after account closure
• Billing records: 7 years from the date of the transaction (legal requirement)
• Log data: 90 days
• Support correspondence: 3 years
• AI Copilot query logs: 90 days

You can request deletion of your personal data at any time by contacting us at legal@propvora.com. Note that we may retain certain data where required by law.

Under the UK General Data Protection Regulation, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (“right to be forgotten”), subject to legal obligations
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to restrict processing: Request that we limit how we use your data in certain circumstances
• Rights related to automated decision-making: We do not make solely automated decisions with legal or significant effects

To exercise any of these rights, contact us at legal@propvora.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the ICO at ico.org.uk or by calling 0303 123 1113.

We use cookies and similar technologies to operate the Service. Our full Cookie Policy is available at propvora.com/legal/cookies. Essential cookies are required for the Service to function. You can manage non-essential cookies through our cookie consent manager.

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS encryption for all data in transit
• AES-256 encryption for data at rest
• Row-level security in our database (Supabase RLS)
• Workspace isolation — no cross-tenant data access
• Regular security reviews and penetration testing
• Access controls and audit logging for internal systems

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at legal@propvora.com and we will delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or a notice within the Service. The “Last updated” date at the top of this page indicates when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related enquiries:

• Email: legal@propvora.com
• ICO complaints: ico.org.uk
• ICO helpline: 0303 123 1113