Last updated: June 29, 2026
This Privacy Policy describes how Gallo Rojo Labs LLC ("Company", "we", "us", or "our") collects, uses, and shares information about you when you use Propidy ("the Service"). By using Propidy, you agree to the collection and use of information in accordance with this policy.
We collect the following categories of information:
Contact information: Name, email address, and phone number (if provided) when you register or contact support.
Account credentials: Your password, stored securely and encrypted via Supabase Auth. We never store passwords in plain text.
Profile information: Optional avatar photo and display name.
Financial information: If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not collect, store, or have access to your full credit card number. We retain only subscription status, plan tier, and billing history metadata necessary to manage your account.
User content: Information you enter about your properties, rooms, guests, reservations, access codes, WiFi credentials, house guides, and recommendations.
Identifiers: Your account ID, IP address, and device identifiers used for security and fraud prevention.
Usage data: Information about how you interact with the platform, including pages visited, features used, and session duration.
Authentication data: If you sign in with Google, we receive your name, email, and profile photo from Google as permitted by your Google account settings.
Diagnostic data: Crash logs and performance data used to improve platform stability.
We use the information we collect to:
— Provide, operate, and improve the Propidy platform
— Authenticate your identity and manage your account
— Process payments and manage subscriptions via Stripe
— Send transactional emails (account confirmation, password reset) via Resend
— Provide customer support
— Monitor platform security and prevent fraud
— Comply with legal obligations
When you create a reservation and share a guest portal link, your guests access a public page containing information you have provided (access codes, WiFi credentials, house guides, recommendations, contacts). This data is served exclusively through a secure server-side function using a unique token. Guests do not need to create an account and their access is limited to their specific reservation data.
We do not sell your personal data. We share data only with the following trusted third-party service providers necessary to operate the platform:
— Supabase: Database, authentication, and file storage
— Vercel: Application hosting and deployment
— Stripe: Payment processing and subscription billing
— Resend: Transactional email delivery
— Google: OAuth authentication and Places API
— Cloudflare: DNS and network security
Each provider processes data only as necessary and under appropriate data protection agreements.
We retain your account and property data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
We implement industry-standard security measures including row-level security (RLS) on all database tables, encrypted connections (HTTPS/TLS), and server-side-only access to sensitive credentials. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
Depending on your location, you may have the following rights regarding your personal data:
— Access: Request a copy of the data we hold about you
— Correction: Request correction of inaccurate data
— Deletion: Request deletion of your data
— Portability: Request your data in a machine-readable format
— Objection: Object to certain types of processing
To exercise any of these rights, contact us at [email protected].
Propidy uses browser localStorage to store your language preference and UI theme setting. We do not use third-party advertising cookies or tracking pixels.
Propidy is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
Propidy is operated from Costa Rica and the United States. Your data may be processed in countries outside your own. By using Propidy, you consent to the transfer of your data to these countries, which may have different data protection laws than your jurisdiction.
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Your continued use of Propidy after the effective date of any changes constitutes your acceptance of the revised policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us at:
Gallo Rojo Labs LLC
Email: [email protected]
Website: propidy.io