Privacy Policy

1. Scope

This Privacy Policy explains how Papuc (“we,” “us”) collects, uses, and shares information when you use papuc.app and related apps (the “Service”). It applies alongside our Terms of Service.

2. Information we collect

• Account: email and basic profile fields from Google OAuth via Supabase Auth; optional display name you set.
• Product data: projects, constraints, deals, scores, scenarios, condition estimates, actions (saved/dismissed/etc.), follows, project watches, share tokens, and similar content you create or that we generate for you.
• Usage: approximate device and log data needed to operate and secure the Service (for example IP address, user agent, and error logs via our host).
• Communications: support emails and, if enabled, digests or alerts.
• Payments (when enabled): billing metadata from our payment processor (we do not store full card numbers).
• Legal acceptance: timestamp and document version when you agree to our Terms, Privacy Policy, and Acceptable Use Policy.

3. How we use information

• Provide, maintain, and improve the Service;
• Authenticate you and personalize your experience;
• Run scouting, scoring, and AI features you request (including sending prompts and listing context to model providers);
• Fetch property or listing-related data from third-party providers on your behalf;
• Send transactional or digest emails you enable;
• Enforce Terms, prevent abuse, and comply with law;
• Communicate about product changes or support.

4. Processors and third parties

We use service providers that process data on our behalf, including:

• Supabase — authentication and database;
• Vercel — hosting and serverless functions;
• Anthropic (or other LLM providers) — parsing and deal rationales;
• HasData, RealEstateAPI, AirROI, and similar vendors — property / listing / market data retrieval;
• Resend (or similar) — email delivery;
• Payment processors — when paid plans are enabled.

Search parameters, listing URLs, or property identifiers may be sent to data vendors so they can return results. We do not sell your personal information. If we later use advertising cookies that constitute a “sale” or “share” under CCPA, we will update this Policy and provide required opt-outs.

5. Public sharing

If you make a project public, share a deal/project link, or appear on another user’s feed, certain profile and deal information may be visible to other signed-in users or (for public share pages) to anyone with the link. Choose visibility carefully.

6. Retention

We retain account and product data while your account is active and as needed for backups, disputes, and legal obligations. You may request deletion via Support; some residual copies may remain in backups for a limited period.

7. Security

We use industry-standard measures appropriate to our size (including TLS in transit and access controls via our providers). No method of transmission or storage is 100% secure.

8. Your choices and rights

• Update display name and notification preferences in Settings;
• Disable digests or pause nightly scouts where offered;
• Request access, correction, or deletion of personal data by contacting us;
• Depending on your location (e.g. California / EEA), you may have additional rights under CCPA/GDPR. We will not discriminate against you for exercising privacy rights.

9. Children

The Service is not directed to children under 18. We do not knowingly collect personal information from children.

10. International transfers

We may process data in the United States and other countries where our providers operate. If you access the Service from elsewhere, you consent to that processing as needed to provide the Service.

11. Changes

We may update this Policy by posting a new version. Material changes may require re-acceptance before you continue using Papuc.

12. Contact

Privacy requests: support@papuc.app or Support. Include the email on your Papuc account.