Privacy Policy

Scope

This Privacy Policy applies to PropertyLens's API services and customer portal (collectively, the “Services”). It governs how we collect, use, and protect information about customers and their authorized users who access the Services.

Property addresses submitted through the API are used to process requests, generate reports, and perform analysis on behalf of the customer. They are also retained to support audit history accessible within the customer portal. This data is not shared with third parties for marketing or analytics purposes, and is not associated with individual end-users beyond the submitting customer account. Retention of this data is governed by the applicable service agreement between PropertyLens and the customer.

Information We Collect

We collect and store the following information:

Account information (collected at registration, may be updated by the account holder):

• First and last name
• Email address
• Company name

API query data:

• Property addresses submitted through the API, used to process API calls, generate reports, and perform analysis, and retained for audit history accessible in the customer portal

We do not collect payment card data directly. Payment processing is handled by our third-party payment processor, and their privacy policy governs that data.

How We Use Your Information

The personal information listed above is used solely for:

• Billing and invoicing — associating API usage with your account and generating invoices
• Account management — identifying authorized users and managing access credentials
• Service communications — sending transactional emails related to your account (e.g., billing notices, usage alerts, service updates)

We do not sell your personal information. We do not use your personal information for advertising, profiling, or any purpose unrelated to your service relationship with PropertyLens.

Property addresses submitted through the API are used exclusively to process your requests, generate reports, and perform analysis as part of the Services, and to populate audit history in the customer portal. They are not used for advertising, profiling, resale, or any purpose beyond direct service delivery.

API Usage Tracking

We track API usage at the account level for billing purposes. This includes request counts, endpoint usage, and timestamps. This data is tied to your account and used to calculate charges under your service agreement. It is not used to build behavioral profiles or shared with third parties for marketing purposes.

Cookies

The Services use cookies only for authentication and session management. These cookies are strictly necessary to provide secure access to the portal and API dashboard. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies on the Services.

Data Sharing

We do not sell or rent your personal information. We may share it with:

• Service providers acting on our behalf (e.g., billing platforms, cloud infrastructure providers), under contractual obligations to protect your data
• Legal authorities, if required by law, court order, or to protect the rights and safety of PropertyLens or others

Data Retention

We retain your personal information (name, email, company name) for as long as your account is active and for up to 90 days after account termination, after which it is deleted unless a longer retention period is required for billing records, legal compliance, or dispute resolution. You may request deletion of your account data at any time (see “Your Rights” below).

Property addresses submitted through the API are retained for the lifetime of your account. Upon account termination, this data is retained for up to 90 days or as otherwise specified in the applicable service agreement, after which it is deleted.

Data Accuracy

We rely on customers to provide accurate account information at registration. You may update your account information at any time through the customer portal or by contacting us. We do not independently verify the accuracy of property addresses submitted through the API, as this data is provided by the customer for their own service purposes.

Security

We implement industry-standard technical and organizational measures to protect your personal information, including encrypted transmission (TLS), encryption at rest, access controls, and authentication requirements for portal access. Access to customer data — including account information and submitted property addresses — is restricted to authorized PropertyLens personnel who require it to perform their job functions. We do not permit broad internal access to customer query data.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know — You may request information about the personal information we have collected about you, including the categories, specific pieces, and purposes for which it was used.
• Right to Delete — You may request deletion of your personal information, including property addresses submitted through the API, subject to exceptions permitted by law (e.g., completing a transaction, legal obligations). Upon a verified deletion request, we will delete the specified data within a commercially reasonable time.
• Right to Correct — You may request correction of inaccurate personal information.
• Right to Non-Discrimination — We will not discriminate against you for exercising any of these rights.

Note: The CCPA rights above apply to personal information collected in a consumer context. PropertyLens provides services exclusively to business entities. Most data we collect relates to individuals acting in their capacity as business representatives. We nonetheless extend these rights to all account holders.

To submit a request, contact us at the address below. We will respond within 45 days of receiving a verifiable request. Where necessary, we may extend this period by an additional 45 days and will notify you of the extension within the initial 45-day window.

Governing Law

This Privacy Policy is governed by the laws of the State of California, without regard to its conflict of law provisions. Any disputes arising under this policy are subject to the exclusive jurisdiction of the courts located in California.

Data Processing Addendum

Customers who require a Data Processing Addendum (DPA) for compliance or procurement purposes may request one by contacting us at the address below. A DPA is available upon request and will govern the processing of any personal data shared with PropertyLens under a service agreement.

Sub-Processors

PropertyLens relies on the following third-party sub-processors in the delivery of the Services:

• Amazon Web Services (AWS) — cloud infrastructure and data storage
• Stytch — authentication and session management
• QuickBooks — payment processing and invoicing

We ensure sub-processors are bound by contractual obligations consistent with this policy. We will notify customers of material changes to our sub-processor list upon request.

Breach Notification

In the event of a confirmed data breach that affects your personal information, PropertyLens will notify affected customers within 72 hours of becoming aware of the breach, to the extent practicable. Notification will be provided via the email address associated with your account and will include the nature of the breach, data affected, and steps being taken to address it.

Children's Data

The Services are intended solely for use by business entities and their authorized adult representatives. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have inadvertently collected such information, we will delete it promptly.

Contact

For privacy-related requests or questions:

PropertyLens, Inc.
Email: support@propertylens.com
Address: 17330 Via Del Campo, San Diego, CA 92127

Changes to This Policy

We may update this policy from time to time. For material changes — including changes to data collection practices, retention periods, or sub-processors — we will provide at least 30 days advance notice via email to the address associated with your account. Continued use of the Services after the effective date of any update constitutes acceptance of the revised policy.