Privacy Policy
Last updated: 2 November 2026
PropertyPerform (“we”, “us”, “our”) provides software to help short-term rental hosts track property performance and finances. This policy explains what personal data we collect, where it is stored, who we share it with, and the choices you have.
If you have questions about this policy, contact us at info@propertyperform.com.
1. What data we collect
Account and personal details
- Email address and a securely hashed password (we never store your password as readable text)
- Display name (optional) and profile image or logo (optional)
- Whether you agreed to receive marketing emails, and when
- Account creation and sign-in times
- App settings such as home currency, display currency, property order, and platform fee/VAT percentages
Billing details
- Your subscription plan, status, and renewal/cancellation dates
- Identifiers linking your account to our payment processor, Paddle (see Section 4)
- We do not store your card details — these are collected and held directly by Paddle
Property and financial data
- Property names, types, time zones, photos, and archive status
- Income and expense transactions, including amount, date, category, and any notes you add
- Receipts and property documents you upload (e.g. leases, bills, contracts) — these may themselves contain personal details
- Recurring bills and payment records
- Purchase price, deposit, purchase costs, mortgage details, interest rate, and current value of each property
- Historical monthly/yearly totals and notes you add
Data about other people, entered or imported by you
If you choose to add this information, we store it on your behalf:
- Tenants: name, rent amount, tenancy dates, and any notes
- Property owner/landlord contacts: name, phone number, email, and any custom fields or notes
- Guests (from Airbnb, Lodgify, or Hostaway): booking/confirmation codes, check-in/check-out dates, nights, channel, status, and amounts. We do not store guest names, emails, or phone numbers.
You are responsible for having the right to enter or import this information about other people, and for using it in line with applicable data protection law.
Integration connections
If you connect Lodgify or Hostaway, we store your API key (encrypted), account ID, linked listing names, and sync status.
Feedback
If you send us feedback, we store your message together with your email address.
2. Where your data is stored
Your data is held across the following services:
| Data | Service | Server location |
|---|---|---|
| Login accounts, properties, transactions, bookings, uploaded files | Supabase (hosted on AWS) | Mumbai, India |
| Bills, tenancies, mortgage figures, historical P&L, billing status, feedback | Netlify Database (hosted on AWS) | N. Virginia, USA |
| Website pages | Netlify’s global content delivery network | Worldwide edge locations (content only, not your personal data) |
International data transfers: If you are located in the UK or the European Economic Area, storing your data in India and the United States constitutes an international data transfer. We take steps to ensure appropriate safeguards are in place for such transfers, in line with applicable law.
3. Security measures
- All data at rest in both of our databases (Supabase and Netlify Database), and the files you upload, is encrypted using AES-256.
- Integration credentials (Lodgify/Hostaway API keys) receive an additional layer of encryption (AES-256-GCM) before storage, with the encryption key held separately.
- Passwords are never stored as readable text — only as bcrypt hashes.
- All data in transit is encrypted using HTTPS, enforced site-wide.
- Access to your data is restricted so that only your own authenticated account can read or modify it.
- Profile images and property photos are stored at hard-to-guess web addresses: anyone who has an image’s exact link can view it, but images are not publicly listed or searchable. Documents and receipts are kept in private storage and can only be accessed via links that expire after 5 minutes.
5. How long we keep your data
We retain your data for as long as your account is active. If you delete your account or specific data, we remove it from our systems. Because your data is held across more than one database and file storage system, deletion requests are processed across all relevant systems to ensure complete removal.
You can delete your account at any time in the app under Settings › Account › Delete account. This permanently removes your account, your data in both databases, and your uploaded files, and cancels any paid subscription immediately. Copies may remain in our providers’ encrypted backups for a limited period until those backups expire. Paddle keeps its own payment and tax records as merchant of record.
6. Your rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Export your data in a portable format
- Object to or restrict certain processing
- Withdraw marketing consent at any time
To exercise any of these rights, contact us at info@propertyperform.com.
7. Changes to this policy
We may update this policy from time to time. We will update the “Last updated” date above when we do. Continued use of PropertyPerform after changes take effect constitutes acceptance of the revised policy.
8. Contact us
If you have any questions about this policy or how your data is handled, contact us at: