Privacy Policy

PropThrive is a CRM for real estate sales teams, operated from India by the PropThrive team ("we", "us"). This policy explains what personal data PropThrive holds, why, who it is shared with, how long it is kept, and how to have it deleted.

Who this covers

• Customers: the real estate companies (builders, developers, brokers) that subscribe to PropThrive, and their staff who sign in.
• Their contacts: buyers, enquirers, channel partners and site visitors whose details a customer keeps in PropThrive.

For the second group, the customer company decides what is collected and why; we process it on the customer's behalf and only as this policy allows.

What we collect

• Account details: name, work email, mobile number, company name, role, password (stored only as a one-way hash), sign-in history and two-step sign-in settings.
• Lead and customer records a customer adds or receives: name, mobile, email, city, preferred location, budget, project interest, notes, call logs, site visits, bookings and documents.
• Leads from connected sources, when a customer connects them:
• Facebook and Instagram Lead Ads: the answers a person submits on the customer's lead form (for example name, phone, email, city and any custom questions), with the form, campaign and ad names.
• Google Ads lead forms and property portals (99acres, MagicBricks, Housing.com, JustDial): the fields the portal or form sends, such as name, phone, email and message.
• WhatsApp messages: when a customer connects its WhatsApp Business number, the messages it sends and receives through PropThrive, delivery status and message templates.
• Facebook Page and WhatsApp Business account identifiers and access tokens that a customer grants with "Connect with Facebook". Tokens are stored encrypted and used only to fetch that customer's leads and send its messages.
• Billing details: plan, invoices and payment status. Card and UPI details are handled by Razorpay; we never see or store them.
• Technical data: IP address, browser, device and error logs, kept for security and to fix problems.

How we use it

• To run the CRM for the customer: show, assign and follow up leads, send reminders, send WhatsApp messages and emails the customer sets up, and produce reports.
• To bring in leads from the sources the customer connects, and to match each lead to the right project.
• To secure accounts, prevent abuse, and keep audit logs.
• To bill for subscriptions and send service emails (sign-in, invites, password resets, billing).

We do not sell personal data, and we do not use a customer's leads or Meta data for advertising or for any purpose other than providing PropThrive to that customer.

Data from Meta (Facebook, Instagram, WhatsApp)

Data received through Meta's platforms is used only to provide the features the customer turned on: importing that customer's Lead Ads submissions into its own CRM and sending and receiving that customer's WhatsApp messages. It is not shared with other customers, sold, or used to build profiles. A customer can disconnect at any time in Settings → Integrations; we then stop fetching data and delete the stored access tokens.

Who we share it with

Only the service providers needed to run PropThrive, each under its own privacy and security terms:

We may also disclose data where the law requires it.

Security

Data is sent over HTTPS. Access tokens, API keys and other secrets are encrypted at rest (AES-256-GCM). Passwords are hashed. Each customer's data is kept separate from every other customer's, and staff access inside a customer account follows the roles that customer sets.

How long we keep it

• Lead and customer records: for as long as the customer's account is active, or until the customer deletes them.
• After an account is closed: deleted within 90 days, except invoices and records we must keep by law.
• Database backups: overwritten on a rolling basis within 30 days.

Deleting your data

• Customers can delete any lead, contact or file in PropThrive at any time, disconnect Facebook, WhatsApp or any other integration in Settings → Integrations, or ask us to close the account and delete all its data.
• Anyone whose details reached a PropThrive customer (for example through a Facebook lead form) can ask that customer directly, or write to us at thryvoowork@gmail.com with the phone number or email used. We will pass the request to the customer concerned and confirm once the data is deleted, within 30 days.
• If you used "Connect with Facebook" and want PropThrive's access removed, remove PropThrive under Facebook Settings → Business Integrations, and email thryvoowork@gmail.com to have the stored data deleted.

Your rights

You can ask to see, correct or delete personal data we hold about you, and to withdraw consent, as provided by India's Digital Personal Data Protection Act, 2023 and other applicable law.

Grievance officer

Grievance Officer, PropThrive, thryvoowork@gmail.com. We acknowledge complaints within 48 hours and resolve them within 30 days.

Changes

We will post any change to this policy on this page, with a new date and version number. Significant changes will also be emailed to customers.