Privacy Policy

1. Introduction and Scope

This Privacy Policy describes how SSR Digital LLC ("SSR Digital," "we," "us," or "our") collects, uses, discloses, retains, and protects information in connection with PropertyFolio, our property-portfolio management software-as-a-service platform and related websites, mobile applications, and tenant portal (collectively, the "Service"). PropertyFolio is designed for landlords and property managers based in the United States, together with the tenants those landlords and managers invite to the tenant portal.

This Policy applies to personal information we process about account holders (landlords and property managers), members of their teams, and tenants who use or are invited to the Service. It does not govern the privacy practices of any third party, including the sub-processors named in this Policy, each of which operates under its own terms and privacy policy.

By creating an account, accessing, or using the Service, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you should not use the Service. This Policy is incorporated into and supplements our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms of Service.

The Service is intended only for users located in the United States and is not directed to individuals located outside the United States. The effective date of this Policy appears at the end of this document.

2. Eligibility; U.S. Only; Not Directed to Children

The Service is intended only for users located in the United States who are at least 18 years of age and able to form a binding contract, including landlords, property managers, and the adult tenants they invite. By using the Service you represent that you meet these requirements.

The Service is offered only in the United States, and we make no representation that it is appropriate or available elsewhere. If you access the Service from outside the United States, you do so at your own initiative and are responsible for compliance with any local laws that may apply to you.

The Service is not directed to children. We do not knowingly collect or solicit personal information from anyone under 18 years of age, and no part of the Service is designed for or marketed to minors. If you are under 18, please do not use the Service or provide any personal information to us. If we learn that we have collected personal information from a child under 18 without appropriate authorization, we will take reasonable steps to delete that information promptly. If you believe a minor has provided us with personal information, please contact us at privacy@property-folio.com.

3. Roles: Controller, Service Provider, and Landlord-Entered Tenant Data

Our role with respect to personal information depends on the context in which it is processed.

For information about account holders (landlords, property managers, and their team members) - such as registration details, billing information, and how those users interact with the Service - we act as the business or controller and determine the purposes and means of processing as described in this Policy.

For information that a landlord or property manager enters about their tenants, prospective tenants, vendors, or properties, we generally act as a service provider or processor that handles that information on the landlord's or manager's behalf and in accordance with their instructions and our agreement with them. In that capacity, the landlord or property manager is responsible for having a lawful basis to collect and provide that information, for providing any required notices to their tenants, and for honoring privacy-rights requests their tenants direct to them. We make reasonable functionality available to help landlords and managers respond to such requests, and we do not use tenant personal information entered by a landlord for our own independent commercial purposes except to provide, secure, and improve the Service and as permitted by applicable law.

Where a tenant interacts directly with us through the tenant portal - for example, to register an account, make a payment, submit a maintenance request, or send a message - we may also act as a controller for the limited information needed to operate those features and secure the account.

If you are a tenant and have questions about how your information is used, you should contact both the landlord or property manager who invited you and us at privacy@property-folio.com.

4. Categories of Information We Collect

We collect the following categories of information, depending on how you use the Service and the features you enable.

Account and identity information. Your name, email address, password (stored only in hashed form), telephone number, role (landlord, property manager, or tenant), business or entity name, and, where you sign in with a third-party identity provider, the authentication identifiers that provider returns. If you sign in with Google OAuth or with Sign in with Apple, we receive basic profile and email information from that provider to create and authenticate your account; where you use Apple's private email relay, we receive the relay address rather than your personal address.

Taxpayer identification information. If you record a business entity for use on your leases, we store the Employer Identification Number (EIN) you enter. If you keep a vendor or contractor directory, we store the taxpayer identification number and W-9 status you enter for each vendor so you can prepare 1099-NEC totals; for a sole proprietor, that identifier may be a Social Security number. We use this information only to produce the records and summaries you request, and it is not used for any other purpose, shared for advertising, or sold.

Property and portfolio information. Property addresses, unit details, ownership and entity information, purchase and closing details, valuations, rent amounts, lease terms, occupancy and vacancy status, mortgage and loan details, and other characteristics you enter or that are returned from property-data lookups.

Financial and transactional information. Income, expenses, rent payments, budgets, profit-and-loss figures, late fees, deposits, payout records, tax-relevant figures used to generate Schedule E and Form 8825 reports, mortgage balances and escrow information imported through Plaid, and records of subscription plan, billing cycle, and payment status. We do not store full payment card numbers or complete bank account credentials; card and bank payment details are handled by Stripe, and any bank login credentials used to connect a mortgage are handled by Plaid, as described below.

Documents and document content. Files you upload - including closing statements, leases, mortgage documents, insurance documents, receipts, and tenant-provided documents - and the structured data our AI document parsing extracts from them. These documents may contain sensitive personal and financial details about you, your tenants, or third parties.

Lease and e-signature information. Lease documents you generate, the parties named in them, signature events, signer identity and consent records, timestamps, and the audit-trail metadata associated with our legally-binding e-signature feature.

Tenant and screening information. For tenants: contact details, lease and payment history, maintenance requests, messages, and uploaded documents. When a landlord initiates tenant background screening, the screening is performed through Checkr and involves consumer-report information regulated by the federal Fair Credit Reporting Act (FCRA) and applicable state law, which may include identity-verification details, criminal, eviction, sex-offender registry and watchlist records, and, depending on the package ordered, credit and income information. The applicant completes the screening on a page hosted by Checkr and enters their own identity information there, including any Social Security number, directly with Checkr. We do not collect, receive, transmit, or store an applicant's Social Security number. We store the screening's status, the package ordered, the per-check results Checkr returns, and the landlord's decision. Those stored results include the applicant name and email address Checkr reports back to us, which we compare against the details the landlord entered when inviting them, and, where the landlord orders a package that includes income verification, the asset and bank information Checkr returns - the name of the financial institution, the last four digits of an account number, the account owner names, current and average balances, and counts of insufficient-funds events. We never receive full account numbers or bank login credentials.

Communications and support information. Messages exchanged through the in-app messaging feature, maintenance-request details and history, team-management activity, notifications, and any correspondence you have with our support team.

Usage, device, and log information. IP address, device and browser type, operating system, application version, pages and features accessed, actions taken, timestamps, and similar technical information generated as you use the Service.

Error and diagnostic reports. When the web or mobile application encounters an error, it sends us a report so we can diagnose and fix it. That report contains the error message, the page or screen where it occurred, technical stack information, and the application version, and it is associated with your account where you are signed in at the time. These reports, together with a log of significant actions taken in the Service, are retained for 30 days and then deleted.

Cookies and session information. A session cookie and a session token stored in your browser or your device's app storage, used to keep you signed in and to maintain the security and integrity of your session, as described in the Cookies section below.

Information from third-party sources. Property, valuation, and rent data from RentCast and from RealtyAPI (which retrieves publicly listed Zillow and Redfin data for an address you enter), address details from Google Places and Google Address Validation, mortgage data from Plaid, screening results from Checkr, payment and payout status from Stripe, and mobile subscription status from RevenueCat, Apple, and Google. We combine this with the information you provide to operate the relevant features.

5. How and Why We Use Your Information

We use the information we collect for the following purposes.

To provide and operate the Service. To create and authenticate your account; maintain your property portfolio, leases, tenants, payments, and documents; generate analytics, profit-and-loss figures, and reports; parse uploaded documents; generate state-specific lease documents and process e-signatures; run the Investment Analyzer; facilitate rent collection, recurring auto-pay, refunds, and payouts; import mortgage data; manage maintenance requests and messaging; and administer team access and roles.

To process payments and billing. To bill subscriptions through Stripe or, for subscriptions purchased in our mobile apps, through Apple or Google with RevenueCat; to process tenant rent and other payments as direct charges on the landlord's own connected Stripe account; and to maintain associated transaction records. We do not store full card or bank credentials.

To facilitate tenant screening at a landlord's direction. To transmit screening requests to Checkr and return results to the requesting landlord or manager, who is responsible as the FCRA "end user" for permissible purpose and adverse-action obligations.

To communicate with you. To send transactional and service messages (such as payment receipts, lease-signing requests, maintenance updates, notifications, and security alerts) and to respond to your inquiries and support requests. We use Cloudflare Email Sending to deliver email, with Resend retained as a fallback delivery path, and Expo to deliver push notifications to our mobile apps.

To secure the Service and prevent abuse. To authenticate users, detect and prevent fraud, unauthorized access, and other security incidents, enforce our Terms of Service, and protect the rights, property, and safety of our users and the public.

To maintain, troubleshoot, and improve the Service. To diagnose problems, monitor performance, develop new features, and improve existing functionality. We do not use your data to build advertising profiles.

To comply with legal obligations. To meet tax, accounting, recordkeeping, and other legal requirements, to respond to lawful requests and legal process, and to establish, exercise, or defend legal claims.

With your consent or at your direction. For any other purpose disclosed to you at the time we collect the information or to which you otherwise consent.

We do not use your personal information for cross-context behavioral advertising, and we do not sell it.

6. Legal Bases for Processing

Although PropertyFolio is intended for U.S.-based users and U.S. privacy law generally does not require a single enumerated "legal basis," we describe the grounds on which we process personal information for transparency.

We process personal information as necessary to perform our contract with you and provide the Service you request; in furtherance of our legitimate interests in operating, securing, and improving the Service and our business (balanced against your rights and expectations); to comply with our legal obligations, including tax and recordkeeping requirements; and, where applicable, based on your consent, which you may withdraw at any time without affecting processing already carried out. For tenant information a landlord enters, we process it on the landlord's behalf and at the landlord's direction as a service provider.

7. How We Share Information and Our Sub-Processors

We do not sell your personal information and we do not share it for cross-context behavioral advertising or targeted advertising. We disclose information only in the following circumstances.

With sub-processors who provide services on our behalf. We engage trusted third parties that process personal information on our behalf, under contractual obligations to protect it and to use it only to provide their services to us. Our current sub-processors are:

- Stripe: payment processing, subscription billing, rent collection, landlord payout accounts, and refunds. Stripe receives and handles payment and transaction details, including full card or bank information that we ourselves do not store. Tenant payments are charged on the landlord's own connected Stripe account. - Plaid: secure connection to your financial institution to import mortgage (Liabilities) data only, including balances, rates, and escrow information. Plaid does not process payments for the Service and we do not use it to read your bank transactions. - Checkr: FCRA-regulated tenant background screening when a landlord initiates screening. The applicant enters their own identity information, including any Social Security number, directly on Checkr's hosted page. - Cloudflare: our core infrastructure - D1 for application data, R2 object storage for documents and photos, KV caching, Workers AI for document parsing and AI-generated estimates, and Email Sending for transactional email. - Resend: transactional and notification email delivery, retained as a fallback path. - Google: OAuth sign-in authentication, Places address lookup, USPS address validation, and, as a fallback AI provider for certain Investment Analyzer outputs, its Gemini models. - Apple: Sign in with Apple authentication, and in-app purchase billing for subscriptions bought in our iOS app. - Google Play: in-app purchase billing for subscriptions bought in our Android app. - RevenueCat: validation and management of mobile in-app subscriptions. RevenueCat receives your PropertyFolio account identifier and your subscription and purchase status. - Expo: delivery of push notifications to our mobile apps. Expo receives your device's push token and the contents of the notification, which may name a property, tenant, or amount. - RentCast: property data, valuation, and rent-estimate lookups. - RealtyAPI: retrieval of publicly listed Zillow and Redfin data, including listing photos, for a property address you enter.

Information you submit to these providers, and the data they return, is also subject to each provider's own terms and privacy policy, and we are not responsible for their independent data practices. We require our service providers to use your information only to perform services for us. A current list of sub-processors is available on request at privacy@property-folio.com.

With other Service participants, as inherent in the features you use. Information you submit is shared with the parties a feature connects you to - for example, lease and signature details are shared with the parties to a lease; messages are delivered to the recipient; maintenance requests are shared between landlord and tenant; tenant information you enter is accessible to your authorized team members according to their assigned roles; and tenants may see information their landlord makes available to them through the tenant portal.

With your team. Landlords may grant property managers and team members role-based access to portions of their portfolio and associated tenant and financial data. Access is governed by the roles and permissions the account owner configures.

For legal, safety, and compliance reasons. We may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms of Service; to detect, prevent, or address fraud, security, or technical issues; or to protect the rights, property, or safety of SSR Digital, our users, or the public.

In a business transfer. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our assets, information may be transferred as part of that transaction, subject to this Policy or a successor policy with materially equivalent protections.

With your consent. We may share information for other purposes with your consent or at your direction.

8. Tenant Personal and Screening Data; Landlord-as-Controller Roles

A significant portion of the personal information in the Service is information that landlords and property managers enter or generate about their tenants, prospective tenants, and properties - for example, tenant contact details, lease terms, payment history, maintenance requests, messages, screening requests, and uploaded documents. We process this tenant information on behalf of the landlord or property manager who entered it, as their service provider or processor, and in accordance with our agreement with them.

Where a landlord or property manager enters or uploads information about a tenant or applicant, or orders a background screening report, that landlord or property manager is responsible for having all necessary rights, consents, authorizations, and a permissible purpose to do so, and for handling the resulting information in compliance with the FCRA, fair-housing, and applicable privacy laws. The screening, including any credit, criminal, and eviction information, is performed through our screening provider, Checkr, and the landlord or property manager is the FCRA "end user" responsible for permissible purpose and adverse-action obligations.

If you are a tenant, the landlord or property manager who invited you generally determines what information is collected about you and how it is used within the Service, and they are responsible for providing you any required notices and for honoring privacy-rights requests you direct to them. We use tenant information to provide, secure, and support the Service, and not for our own independent commercial purposes except as permitted by applicable law. If you are a tenant with questions or a privacy request, please contact the landlord or property manager you work with; you may also contact us at privacy@property-folio.com, and we will reasonably assist the landlord or manager in responding, or respond directly where we are the appropriate party to do so.

9. Software-Generated and AI Outputs Are Not Professional Advice

Several PropertyFolio features generate documents, calculations, or estimates that you may use for legal, tax, financial, or investment purposes. These outputs are informational software tools only and are not a substitute for advice from a qualified professional. This section is reflected here because these features process your personal and financial information.

Lease generation and legal documents. Our 50-state and District of Columbia lease generation and related legal documents are software-generated templates with state-specific clauses. They are not legal advice, and SSR Digital is not a law firm and does not provide legal services. We are not a party to any lease or to any landlord-tenant relationship created through the Service. You are responsible for the documents you generate and use, and you should consult a licensed attorney in your jurisdiction before relying on any document.

Tax reports. Our tax report generation, including Schedule E and Form 8825 outputs and CSV, PDF, and Excel exports, is an informational aid based on the data you provide. It is not tax advice and is not a substitute for a certified public accountant or qualified tax professional. You are solely responsible for the accuracy and completeness of your tax filings.

Investment Analyzer. Outputs of the AI Investment Analyzer - including after-repair value (ARV), rent estimates, return on investment, capitalization rate, BRRRR and loan scenarios, valuations, and maintenance-cost predictions - are estimates derived from third-party data and modeling, provided for informational purposes only. They are not investment, financial, or appraisal advice, and we make no guarantee of their accuracy or of any financial result or return.

Tenant background screening. Screening is provided through Checkr and is governed by the FCRA and applicable state law. The landlord or property manager who initiates screening is the "end user" of the consumer report and is solely responsible for having a permissible purpose, obtaining required authorizations, and providing any required adverse-action notices. The Service does not generate, send, or deliver pre-adverse-action or adverse-action notices; where a decline is based on a report, the Service may flag it as requiring adverse-action handling, but that flag is a reminder only. SSR Digital is not a consumer reporting agency.

Payment processing. Payment processing is performed by Stripe under its own terms, and tenant payments are charged as direct charges on the landlord's own connected Stripe account, which makes the landlord the merchant of record for those payments. Plaid is used only to import mortgage data and does not process payments. We are not a bank, money transmitter, or money services business, we do not hold tenant funds, and we do not store full card numbers or complete bank credentials.

AI-assisted features. Certain features use artificial intelligence and automated processing to extract data from documents and to generate estimates and analyses. AI and automated outputs may be incomplete, inaccurate, or erroneous and may not reflect current law or market conditions. Any document content, extracted value, or estimate produced by AI is provided for convenience only, is not guaranteed to be accurate, and must be independently reviewed and verified by you before you rely on it for any legal, tax, financial, or investment purpose. To provide these features, the relevant content is processed by our AI service provider, Cloudflare; certain Investment Analyzer outputs may additionally be processed by Google's Gemini models as a fallback when our primary provider is unavailable. The Service does not include an AI chat assistant. You are solely responsible for reviewing and correcting all AI-generated or AI-extracted content.

10. Data Retention

We retain personal information for as long as it is needed to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law.

While your account is active, we retain your account, property, financial, document, lease, and related records so that the Service functions and your historical data remains available to you. After your account is closed or a record is deleted, we retain information for the period necessary to comply with our legal, tax, accounting, audit, and recordkeeping obligations, to resolve disputes, to enforce our agreements, and to maintain the integrity and security of the Service.

Tax-relevant records, transaction and payment records, lease documents, e-signature audit trails, and screening-decision records may be retained for the periods required by applicable federal and state law, which can extend for several years after the underlying activity. Error and diagnostic reports and the activity log described above are deleted 30 days after they are recorded. Cached property and address data is retained only for limited periods and refreshed or expired automatically.

When we no longer have a legitimate or legal need to retain personal information, we delete it or de-identify it so that it can no longer reasonably be associated with you. For tenant information a landlord enters, retention is also subject to the landlord's instructions and the landlord's own legal obligations; deletion of a landlord's account or records may result in deletion of associated tenant records, subject to the retention periods above.

11. How We Protect Your Information (Security)

We implement and maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we process against unauthorized access, use, disclosure, alteration, and destruction.

These safeguards include: hashing of account passwords using PBKDF2-HMAC-SHA256 with 100,000 iterations and a unique, per-password salt (we never store passwords in plaintext); encryption of data in transit using industry-standard TLS; encryption of stored data at rest, including application records stored in Cloudflare D1 and documents and photos stored in Cloudflare R2; role-based access controls so that property managers and team members can access only the properties and categories of data their assigned access level permits, enforced on our servers rather than only hidden in the interface; ownership checks on every request so that one account cannot read another account's records; session credentials that expire after seven days and are used solely for authentication and session integrity, with no third-party advertising or cross-site tracking cookies; and reliance on a PCI-compliant payment processor (Stripe) and a regulated bank-data provider (Plaid) so that full payment card numbers and complete bank account credentials are not stored in our systems.

No method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. You are responsible for safeguarding your account credentials, using a strong and unique password, controlling the access you grant to team members, and notifying us promptly at privacy@property-folio.com if you believe your account has been compromised.

12. Breach Handling and Notification

We maintain processes designed to detect, investigate, and respond to security incidents affecting personal information. If we determine that a security incident has resulted in the unauthorized acquisition of or access to your personal information, we will take reasonable steps to investigate and remediate the incident and will notify affected individuals and applicable regulators where and as required by applicable federal and state breach-notification laws, within the timeframes those laws require. Where we act as a service provider for tenant information a landlord has entered, we will notify the relevant landlord or property manager so that they can fulfill any notification obligations they may have, and we will reasonably assist them in doing so.

13. We Do Not Sell Your Information or Use It for Advertising

We want to be clear and unequivocal: we do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. We do not allow third parties to collect your personal information through the Service for their own advertising purposes, and we do not use third-party advertising or tracking cookies, web beacons, or similar advertising technologies. The session cookies we use exist solely to authenticate you and maintain the security and integrity of your session. The only third parties that receive your personal information are the sub-processors named in this Policy, who act on our behalf to provide the Service, and the other Service participants and recipients described in the sharing section, in each case for the operational, security, legal, and feature-related purposes described above.

14. Cookies and Similar Technologies

We use cookies and similar storage technologies only as needed to operate the Service. Specifically, when you sign in we issue a session credential that expires after seven days and is used solely to keep you signed in and to maintain the security and integrity of your authenticated session. Depending on the client you use, that credential is held in a session cookie, in your browser's local storage, or in your mobile device's app storage. We do not use third-party advertising cookies, cross-site tracking cookies, or analytics technologies that track you across other websites and services for advertising.

Because these technologies are strictly necessary for authentication and security, blocking or clearing them will sign you out and may prevent you from using core features of the Service. Some pages may rely on locally cached technical data to improve performance; this data is not used to profile you or to serve advertising.

15. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the "CCPA"), provides you the rights described below with respect to personal information we process about you as a business. Where we process tenant information solely as a service provider on a landlord's behalf, a tenant should generally direct CCPA requests to the landlord; we will reasonably assist the landlord in responding.

Right to know and access. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting it, and the categories of third parties and service providers to whom we have disclosed it.

Right to delete. You have the right to request that we delete personal information we have collected from you, subject to exceptions permitted by law (for example, where the information is needed to complete a transaction, comply with a legal obligation, or maintain security).

Right to correct. You have the right to request that we correct inaccurate personal information we maintain about you.

Right to data portability. You have the right to receive the personal information you have provided to us in a portable and, to the extent technically feasible, readily usable format.

Right to opt out of sale or sharing. You have the right to opt out of the "sale" or "sharing" of your personal information. As described in this Policy, we do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of; we will continue to honor this commitment.

Right to limit use of sensitive personal information. To the extent we process sensitive personal information - which, where you enter it, includes account credentials and the taxpayer identification numbers you record for a business entity or for a vendor's W-9 - we use it only for the purposes permitted under the CCPA, namely to provide the Service you request and for related operational, security, and legal-compliance purposes, and not for purposes that would trigger a right to limit such use. We never receive an applicant's Social Security number from tenant screening, because the applicant enters it directly with Checkr.

Right to non-discrimination. We will not discriminate or retaliate against you for exercising any of your privacy rights. We will not deny you the Service, charge you a different price, or provide you a different level or quality of the Service because you exercised your rights, except as permitted by law.

How to exercise your rights. You may submit a request by emailing privacy@property-folio.com. We will take reasonable steps to verify your identity before responding, which may require you to confirm information associated with your account. We will respond within the timeframes required by the CCPA.

Authorized agents. You may use an authorized agent to submit a request on your behalf. We may require the agent to provide proof of your written authorization and may require you to verify your own identity directly with us or to confirm that you provided the agent permission to submit the request.

California "Shine the Light." We do not disclose personal information to third parties for their own direct-marketing purposes, so the California "Shine the Light" law does not require any additional disclosures from us.

16. Privacy Rights for Residents of Other U.S. States

Residents of certain other U.S. states that have enacted comprehensive consumer privacy laws - including, for example, Virginia, Colorado, Connecticut, Utah, Texas, and other states as their laws take effect - may have rights similar to those described in the California section above. Depending on your state of residence and the applicable law, these rights may include the right to confirm whether we process your personal information and to access it; the right to correct inaccuracies; the right to delete personal information; the right to obtain a portable copy of personal information you provided; and the right to opt out of the processing of your personal information for purposes of targeted advertising, the sale of personal information, or certain profiling. As noted throughout this Policy, we do not sell personal information, do not engage in targeted advertising, and do not use your personal information for profiling that produces legal or similarly significant effects without a lawful basis.

To exercise any of these rights, email privacy@property-folio.com. We will verify your request as required by applicable law and respond within the timeframe your state's law requires. If your state's law provides a right to appeal a decision on your request, we will inform you of how to appeal, and we will respond to appeals as required by law. Where we process tenant information as a service provider or processor on a landlord's behalf, please direct your request to the landlord, who controls that information; we will reasonably assist the landlord in fulfilling it.

17. Plans, Billing, and Account Information

PropertyFolio offers a Free tier that supports up to two properties, as well as paid subscription tiers billed monthly or annually. Plan limits count properties, not units.

Subscriptions purchased on our website are processed through Stripe. Subscriptions purchased inside our iOS or Android app are billed by Apple or Google as in-app purchases and managed with RevenueCat, at the prices shown in the app, which are higher than our web prices because they include the app store's commission. If you subscribed through an app store, cancellation and any refund are handled by that store under its terms, and we receive only your resulting subscription status.

Paid plans automatically renew until cancelled; following cancellation your paid access continues through the end of the period you have already paid for. In connection with billing, we and our billing sub-processors process information such as your plan, billing cycle, payment status, and transaction history. We do not store full payment card numbers or complete bank account credentials; that information is handled by Stripe under its own terms and security practices. The full subscription, auto-renewal, and cancellation terms are set out in our Terms of Service.

18. Location of Processing; U.S.-Only Service

PropertyFolio is operated from and intended for use within the United States, and the information we collect is processed and stored in the United States using U.S.-based infrastructure and the sub-processors described in this Policy. The Service is not directed to, or intended for use by, individuals located outside the United States. If you access the Service from outside the United States, you do so at your own initiative and are responsible for compliance with any local laws that may apply to you, and you understand that your information will be processed in the United States, where data-protection laws may differ from those of your location.

19. Your Choices and Account Controls

You can review and update much of your account and property information directly within the Service. You can manage notification preferences for many communications, though we may still send essential transactional and security messages necessary to operate your account. You can control the access you grant to team members through role-based permissions, and you can close your account by contacting us, subject to the retention periods described above. To exercise the privacy rights described in this Policy, or to make any other privacy request, email us at privacy@property-folio.com.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. When we make changes, we will revise the effective date below and, for material changes, we will provide additional notice as required by applicable law, such as by email or through a notice within the Service. Your continued use of the Service after the effective date of an updated Policy constitutes your acknowledgment of the updated Policy to the extent permitted by law. We encourage you to review this Policy periodically.

21. Governing Law and Dispute Resolution

This Privacy Policy and any dispute arising out of or relating to it or to your use of the Service are governed by the laws of the State of Texas, without regard to its conflict-of-laws principles, and by applicable U.S. federal law. Subject to the arbitration provisions of our Terms of Service, you and SSR Digital agree to the exclusive jurisdiction and venue of the state and federal courts located in Texas for any matter not subject to arbitration.

As more fully set forth in our Terms of Service, disputes are resolved through binding individual arbitration administered by the American Arbitration Association (AAA) under its Consumer Arbitration Rules, and you and SSR Digital waive the right to a jury trial and the right to participate in a class action. You may bring a qualifying claim in small-claims court instead of arbitration, and you have the right to opt out of arbitration by emailing legal@property-folio.com within 30 days of first accepting the Terms of Service. The dispute-resolution, class-action waiver, jury-trial waiver, and opt-out terms are governed by the Terms of Service, which control in the event of any conflict with this section.

22. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us.

SSR Digital LLC (operator of PropertyFolio)

For privacy questions and to exercise your privacy rights: privacy@property-folio.com

For legal and Terms of Service matters, including arbitration opt-out notices: legal@property-folio.com

We will respond to your inquiry within a reasonable time and in accordance with applicable law.

Effective date: August 21, 2026.