Privacy

Account data — your name, work email, organization and role. Supplied by you or by whoever invited you.

Usage data — which pages and API endpoints you call, and how much of your plan allowance you have used. This is what metering and rate limiting are built on.

Security data — sign-in attempts, the IP address they came from, and active sessions, so you can see and revoke them.

Content you create — portfolios, saved searches, alerts, reports and any dataset you upload.

Everything in the list above belongs to the organization that created it. It is isolated at the database level: every query is scoped to the authenticated organization, and a request for another organization’s resource returns not found rather than forbidden, because confirming that something exists is itself information.

A private dataset you upload is never merged into the shared PropertyMetric corpus. If you choose to contribute aggregates, they are published only once they cover at least five records from at least three contributors, so no single transaction can be identified from them — and only under an explicit agreement.

• Sell your data, or share it with another customer.
• Use one organization’s private data to answer another’s question.
• Store a recoverable copy of your password or your API keys — only a hash, so a database disclosure is not a credential disclosure.
• Put personal data in a URL, where it would end up in logs and browser history.

Transaction and rental records describe properties, not people. Where a source includes party names, they are stored as roles — agency, broker, developer — and never used to build a profile of an individual.

Account and workspace data is kept while your organization is active and for 90 days afterwards, so an accidental closure is recoverable. Security logs are kept for 12 months. Raw ingested source records are retained under the retention policy for the source they came from.

You can export your workspace data, correct it, or ask for it to be deleted. Write to [email protected]. Deleting an organization revokes its sessions and API keys immediately.