← Back to Home

Privacy Policy

Last updated: February 7, 2026

1. Introduction

Property.Photos ("we," "us," or "our") provides a photo management platform for property owners and real estate investors. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services at property.photos (the "Service").

2. Information We Collect

Account Information

When you sign up, we collect information from your Google account through Google OAuth, including your name, email address, and Google profile information. We use Google sign-in exclusively for authentication.

Photos and Location Data

Photos uploaded or captured through the Service may include GPS coordinates (geolocation data). For photos taken through our magic link capture feature, GPS confirmation is required to confirm the photo was taken at your property. This location data is stored alongside the photo metadata.

Property Information

You may provide property addresses, room labels, contact information for contractors or other third parties, and other details related to your properties.

Usage Data

We collect standard usage data such as browser type, device information, pages visited, and actions taken within the Service.

3. How We Use Your Information

  • To provide, maintain, and improve the Service
  • To organize and store your property photos
  • To verify photo locations using GPS data
  • To back up photos to Google Drive or Dropbox on your behalf, if you choose to connect either service
  • To send transactional emails (e.g., waitlist confirmation, account notifications)
  • To respond to your requests and provide support

4. Photo Storage and Ownership

Your photos are stored on Bunny CDN, a content delivery network we operate on your behalf. You retain full ownership of your photos at all times. If you connect an optional backup provider (Google Drive or Dropbox), we will also copy your photos there nightly so you have an off-platform copy under your direct control. If you cancel your account, we will delete your photos from our infrastructure; any copies in your connected backup provider remain under your control.

5. Third-Party Services

We use the following third-party services:

  • Google — Authentication (OAuth). Optionally, Google Drive for off-platform photo backups if you choose to connect it.
  • Bunny CDN — Primary photo storage and delivery
  • Supabase — Database hosting and authentication infrastructure
  • Vercel — Website hosting and deployment
  • Resend — Transactional email delivery
  • Dropbox — Optional off-platform photo backups, if you choose to connect your Dropbox account

Each third-party service has its own privacy policy governing how they handle data.

6. Optional Backup Provider Access

If you connect Google Drive or Dropbox as an optional backup provider, we request access only to a single dedicated folder created by our Service ("Apps/Property Photos Backup" for Dropbox, or a designated folder in Google Drive). We do not read, modify, or delete any other files in your connected account.

7. Cookies

We use essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

8. Data Retention

We retain your account information and photo metadata for as long as your account is active. Photos are stored on Bunny CDN for as long as your account is active. If you delete your account, we will remove your data and photos from our infrastructure. Any copies in a connected backup provider (Google Drive or Dropbox) remain in your account under your control after deletion.

9. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication through Google OAuth, and access controls on our infrastructure. However, no method of transmission over the Internet is 100% secure.

10. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Export your data by connecting Google Drive or Dropbox backup and downloading your copies
  • Revoke Google Drive or Dropbox access at any time through Settings > Backups

11. Magic Link Photo Capture

When a property owner sends a magic link to a contractor or other third party, the recipient does not need to create an account. Photos taken through a magic link are associated with the property owner's account. The recipient's GPS location is collected only during the photo capture session to verify the photo was taken at the correct property.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at hi@property.photos.