Privacy Policy

1. Who is the data controller

The data controller for personal data collected through PropDraft is [Company name], Company registration number [EIK], registered address: [address]. You can contact us about data protection at support@propdraft.ai.

2. What personal data we collect

• Account data: name, email address and password (stored in hashed form by Supabase Auth).
• Property data: location, price, size, number of rooms, description and other information you enter in the generator.
• Generated content: drafts and history of generated materials.
• Subscription and payment data: plan, subscription status and Stripe customer/subscription identifiers. We do not store card numbers — they are processed directly by Stripe.
• Technical data: IP address, browser type, date and time of access, security logs — to the extent collected by our hosting provider.

3. Why we process data and legal bases

• Performance of a contract (Art. 6(1)(b) GDPR): creating and managing your account, generating content, providing credits and subscriptions.
• Legitimate interests (Art. 6(1)(f) GDPR): security, fraud prevention and service improvement.
• Legal obligation (Art. 6(1)(c) GDPR): accounting and tax records.
• Consent (Art. 6(1)(a) GDPR): where you explicitly agree to receive marketing communications.

4. AI services

To generate text, we send the property information you enter to Google Gemini (Google LLC/Google Ireland Limited) through the official API. Google processes this data in accordance with its terms and privacy policies. We recommend that you do not enter sensitive personal data (national ID numbers, bank details, health data) or personal data of third parties without a legal basis.

Generated content may be inaccurate. You are responsible for reviewing it and ensuring that publishing it is lawful.

5. Processors and recipients

• Supabase — database, authentication and data storage.
• Stripe — payment processing and subscription management.
• Google — content generation through the Gemini API.
• Hosting provider — technical infrastructure and logs.

All processors are bound by data protection contractual clauses. Where data is transferred outside the EEA, appropriate safeguards such as the European Commission's Standard Contractual Clauses apply.

6. Cookies and local storage

We use strictly necessary cookies and localStorage to maintain your login session and basic preferences. We do not use third-party advertising or tracking cookies.

7. How long we keep data

• Account data — until you delete your account, plus statutory retention periods.
• Drafts and generated content — until you delete them or your account.
• Payment and accounting records — up to 10 years under Bulgarian law.
• Technical logs — for a limited period necessary for security and diagnostics.

8. Your rights

Under the GDPR, you have the right to:

• access your personal data and information about how it is processed;
• correct inaccurate or incomplete data;
• erasure (“the right to be forgotten”) where there is no legal basis for retention;
• restrict processing;
• data portability in a structured, machine-readable format;
• object to processing based on legitimate interests;
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email support@propdraft.ai. We respond within one month. You have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), 2 Prof. Tsvetan Lazarov Blvd., Sofia, www.cpdp.bg.

9. Security

We apply technical and organizational measures to protect data: encryption in transit (HTTPS), password hashing, access controls and database-level security rules (Row Level Security). However, no system is completely secure; in the event of an incident, we will notify the competent authorities and affected individuals where required by law.

10. Children

The Service is not intended for individuals under 18 and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. We will notify you of material changes by email or through a notice in the Platform. The current version is always available on this page.

12. Contact

Provider: [Company name], Company registration number [EIK], registered address: [address].
Email: support@propdraft.ai