Data Protection
How Propflow handles the data your tenants trust you with
Capability-level posture — what we do for the operator, not the machinery underneath.
Six capabilities · tap any to dive in
EncryptionData stays protected from the moment it leaves a device to the moment we store it.
Industry-standard protection in transit and at rest, backed by managed cloud storage with automated, encrypted backups. The specifics are maintained with our infrastructure provider and available under a DPA.
Access controlEvery request runs through role-based scoping before it reaches a response.
Property managers, regional leads, and portfolio roles each see only the properties they own. Tenants only see their own thread. Scoping is enforced server-side — Clara never gets a request without it.
Audit trailEvery action taken inside Propflow — by a human or by Clara — is attributable.
Dashboard actions and Clara tool calls are captured alongside the conversation they belong to. Operators can replay what happened, who did it, and why, without leaving the record.
RetentionWe keep data as long as the operator requires, then hand it back.
Records stay with the account for the life of the subscription and a short window after. Exact windows by data type live in the DPA, sized to the obligations the operator needs to meet.
ExportOperators can walk away with their data, in a format their teams can read.
Conversations, work orders, and leasing pipelines are exportable on request. Tenants can ask the property manager for a copy of what we hold, and we help assemble it.
Right to deleteTenants and operators can close the loop and have their data removed.
Delete requests are actioned on request, with normal legal-hold and accounting obligations respected. STOP on SMS lands a contact on a permanent suppression list — no further Clara messages, ever.
Architecture
One path through the system
Ingress
Tenant message arrives
Process
Scoped, routed, resolved
Store
Encrypted, attributable
Egress
Operator + tenant views
Delete
On request or schedule
One inbound turns into one record, one response, one audit entry.
Need more depth?
The Trust Center has the longer version
For the legal agreement, read our Privacy Policy.