Legal
Privacy policy
What PropBot Studio collects, why, how long it is kept, and how to exercise your rights.
1. Introduction
PropBot Studio (“we”, “our”, “us”) is a real-estate technology studio operated by CodeAustral LLC. This policy explains how we handle personal data when you visit propbotstudio.com, subscribe to the newsletter, apply for an engagement or become a client. It also explains the consent record used by this site.
If you do not agree with this policy, do not use the site. Questions and requests go to hello@codeaustral.com.
2. Data we collect
Data you provide
- Contact and application data: name, work email, company, team size, channels, tools and the description of the problem you send through the contact form or the application form.
- Newsletter data: the email address you submit and the date of subscription.
- Engagement data: the material you choose to share during an audit or build — workflow descriptions, field maps, access lists, sample records — under the scope and access rules stated in the proposal.
- Billing data: handled by our payment processor. We do not store full card details.
- Sandbox input: text you type into the public chatbot or voice sandbox. Do not enter real names, contact details, addresses, listing identifiers or client conversations.
Data collected automatically
- Usage data: pages viewed, referring source, approximate location derived from IP, device and browser type.
- Technical logs: access times, requested URLs, error information and security events.
3. How we use it
- Delivering the work: scoping an audit, preparing a proposal, building and supporting the agreed system.
- Answering you: replying to applications, corrections, support requests and data requests.
- Newsletter: sending articles, guides and corrections. Every message has an unsubscribe link.
- Analytics: understanding which pages and guides are used, so we can keep or fix them.
- Marketing measurement: reporting whether a campaign led to an enquiry, where marketing consent is present.
- Security and legal compliance: preventing abuse, keeping audit logs, meeting accounting and legal obligations.
We do not sell personal data. We do not use client data to train a public model. We do not send promotional offers for the paid services — there are no discount campaigns.
4. Cookies and consent
The site uses a consent bar with three optional categories plus necessary storage. Optional categories are on by default, matching the reference behaviour of the design, and each can be switched off. The choice is stored in the cookie propbot_consent_v1 (also mirrored in local storage) with a version and a timestamp, for twelve months.
- Necessary: page delivery, security, load balancing and the consent record itself. Always active.
- Analytics: Google Analytics (measurement ID G-H0M5TG7NGW) and Microsoft Clarity (project w2xauqhcrh). Used in aggregate to understand page use.
- Marketing: advertising and campaign measurement signals.
- Functionality: remembering choices such as language and dismissed notices.
The choice is applied to Google Consent Mode v2 (analytics_storage, ad_storage, ad_user_data, ad_personalization, functionality_storage, security_storage). Consent Mode defaults to granted and the stored refusal is applied before measurement tags are configured; scripts are not hard-blocked. You can change the choice at any time with “Cookie preferences” in the footer. The cookie policy lists the categories in more detail.
You can also refuse cookies in your browser. Some site features may then behave differently.
5. Third-party services
We use service providers for hosting and content delivery, payment processing, analytics, email delivery and AI model inference in builds where the proposal says so. They receive only what is needed for their task and are not permitted to use it for their own purposes.
- Hosting and edge delivery: serving the site and protecting it from abuse.
- Payments: Stripe processes subscription payments for management. Card data is entered on Stripe's infrastructure.
- Analytics: Google Analytics and Microsoft Clarity, subject to the consent record above.
- Email and newsletter: delivery of replies and of the newsletter you asked for.
- AI services: where a client build uses a model provider, the provider and data terms are named in that build's proposal. Client data is not used to train a public model.
6. Data security
We use TLS in transit, access controls limiting who can reach client material, separate credentials per client system, and logging of production changes. No method of transmission or storage is completely secure; we do not claim otherwise. If a breach affects your data, we notify you and the relevant authority as required by law.
7. Data retention
- Applications and correspondence: kept while the enquiry is active and for 24 months afterwards, so a later question has context.
- Newsletter: kept until you unsubscribe, plus a suppression record so you are not re-added.
- Engagement records: kept for the duration of the engagement and for the period required by contract and accounting rules.
- Technical logs: up to 12 months.
- Financial records: as required by tax and accounting rules.
8. Your rights (EEA and UK)
If you are in the European Economic Area or the United Kingdom, you have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. You also have rights regarding automated decision-making. Write to hello@codeaustral.com; we respond within 30 days. You may complain to your local supervisory authority.
9. Your rights (California)
California residents have the right to know what personal information is collected, to request deletion, to opt out of sale or sharing, and not to be discriminated against for exercising those rights. We do not sell personal information. Requests go to hello@codeaustral.com.
10. Children
The site and services are for businesses and are not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has provided data, contact us and we will delete it.
11. International transfers
Our team and providers may process data outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses. The countries involved depend on the providers named in the relevant proposal.
12. Changes to this policy
We update this policy when our practices change. The date at the top changes only when the text changes. Material changes are noted on the standards page.
13. Contact for data requests
CodeAustral LLC
Email: hello@codeaustral.com
WhatsApp: +55 48 99986-5474
Requests are answered within 30 days.