Privacy Policy

PRIVACY POLICY – PropNexus

1. Introduction: This Privacy Policy explains how PropDynamics OÜ (“Provider”, “we”, “us”) collects, uses, and protects personal data in connection with the PropNexus platform (“Service”).
This policy applies to all users of the Service.
2. Data Controller and Processor Roles: The Client (customer organization) acts as Data Controller, PropDynamics OÜ acts as Data Processor. We process personal data only on behalf of the Client and according to their instructions.
3. Data We Process: We may process the following types of data: User account data (name, email, role) Operational data entered into the system Tenant, vendor, and asset-related data System usage and activity logs
Support and communication data. We do
not collect personal data beyond what is necessary to provide the Service.
4. Purpose of Processing: We process data to: Provide and operate the ServiceEnable system functionality and workflows. Support customer operations. Maintain security and performance. Provide support and troubleshooting
5. Legal Basis for Processing: Processing is based on: Performance of a contract (Service delivery) Legitimate interest (service improvement, security) Compliance with legal obligations
6. Data Sharing: We may share data with: Microsoft (Azure, Dynamics 365, Power Platform infrastructure) Sub-processors required to operate the Service. We do not sell personal data. All third parties are bound by appropriate data protection agreements.
7. Data Storage and Security: Data is stored on Microsoft Azure infrastructure. We implement: Encryption in transit and at rest Access controls Role-based security Monitoring and logging
8. Data Retention: Data is retained: As long as required for service delivery According to client configuration Or as required by law Clients control their own data retention policies within the system.
9. International Transfers Data may be processed in regions where Microsoft Azure operates. Where applicable, safeguards such as standard contractual clauses are used.
10. Data Subject Rights Data subjects may have rights to: Access their dataCorrect inaccurate data Request deletion Restrict processing Requests should be directed to the Client (data controller).
11. Cookies and Tracking The Service may use minimal cookies or technical tracking required for functionality. We do not use tracking for advertising purposes.
12. Security Incidents We maintain procedures for: Detecting security incidents Responding to breaches Notifying affected parties where required
13. Changes to this Policy: We may update this Privacy Policy periodically. Updates will be published on this page.
14. Contact Information PropDynamics OÜ
info@propdynamics.io