Privacy Policy

1. Who we are

PropAssist is the controller of personal information processed through PropAssist. Our Information Officer can be reached at support@starlightgroupsa.co.za.

2. Information we collect

• Account & profile: name, email, phone, organisation, role and authentication data (we use Supabase Auth; passwords are stored hashed by our provider). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Operational data you enter: properties, units, tenants, leases, documents, maintenance, listings, applications and financial records.
• Location data: for movable units, the location pins your team captures (the coordinates, who pinned the unit, when, and any note), plus zones and zone alerts. A pin can come from your device's location, a spot chosen on the map or coordinates you enter. The app and website read your device's location only when you choose “Use my current location” while pinning a unit, and save it with that pin. We don't track people or devices in the background.
• Photos and files: the mobile app uses your camera or photo library only when you choose to attach a photo or document, for example to a maintenance request or inspection.
• Billing data: subscription plan and payment status. Card details are handled by PayFast — we never see or store full card numbers.
• Technical data: IP address, device/browser information, and usage and diagnostic logs.

3. How we use information

• To provide, secure and improve the platform and its features.
• To process subscriptions and payments through PayFast.
• To send service, security and transactional communications.
• To provide support and respond to your requests.
• To comply with legal obligations and to detect and prevent fraud or abuse.

We don't use your information for advertising, we don't sell it, and we don't track you across other companies' apps or websites.

4. Lawful basis

We process personal information where it is necessary to perform our contract with you, to comply with the law, for our legitimate interests (such as securing and improving the service), or with your consent (such as optional analytics cookies). Where you use PropAssist to manage tenants and others, you are responsible for the lawful basis for processing their information.

5. AI features

Our Copilot and specialist agents process data within your organisation to draft messages and propose actions. Actions that affect money, rent, leases or legal matters are never executed automatically — they require explicit human approval. We do not use your private operational data to train third-party foundation models.

6. Sharing & operators

We share personal information only with operators (processors) who help us run the service, under appropriate safeguards:

• Supabase: database, sign-in and file storage.
• Vercel: hosting for our website and web app.
• PayFast: subscription payments.
• Resend: delivery of the emails we send.
• Anthropic: the AI model behind Copilot features.
• Google: Sign in with Google, maps in the Android app, and, only if you accept analytics cookies, Google Analytics on our public website.
• A tenant-screening or credit-bureau provider, if your organisation runs a screening check on an applicant.

We may disclose information where required by law. We do not sell personal information.

7. International transfers

Our providers may process data in countries other than yours. Where this occurs, we take reasonable steps to ensure an appropriate level of protection, such as standard contractual clauses or an equivalent safeguard recognised by applicable law.

8. Retention

We retain personal information for as long as your account is active and as needed to provide the service, then for any period required to meet legal, tax and accounting obligations, after which it is deleted or de-identified.

You can delete your account at any time in the app or on the web. Your login and profile are deleted straight away, together with any organisation you are the only owner of. Account deletion explains how, and what is kept.

9. Security

We apply technical and organisational measures including encryption in transit, per-organisation row-level security, role-based access control and audit logging. No system is perfectly secure, but we work to protect your information and to notify you and the relevant supervisory authority of a compromise where the law requires.

10. Your rights

Depending on the privacy laws that apply to you, you may request access to, correction, deletion or portability of your personal information, object to or restrict certain processing, and lodge a complaint with your data-protection supervisory authority (in South Africa, the Information Regulator). To exercise these rights, contact support@starlightgroupsa.co.za. See also our Acceptable Use Policy.

11. Children

PropAssist is intended for businesses and is not directed at children. We do not knowingly collect personal information from children without consent from a competent person.

12. Cookies

We use cookies as described in our Cookie Policy.

13. Changes

We may update this policy from time to time. Material changes will be notified through the service or by email, and the “last updated” date above will change.