Privacy Policy
Last updated: 24 October 2026
Who we are
Propscalr is operated by Roomszy Vacation Home Rental L.L.C., trading as Propscalr (Trade Licence 1282455), Office 1001, Ibn Battuta Gate Office Complex, Jabal Ali, Dubai, UAE, PO Box 334035. We are responsible for the personal data described here. You can reach us at hello@propscalr.com.
What we collect
- Account details: your name, email address, company name and the settings you choose.
- Hostaway data: your listings and bookings, read through the Hostaway API key you give us.
- Bank statement data: the transactions in the statements you upload.
- Usage and analytics data: how the app and this website are used, such as pages viewed, device and browser type, and approximate location from your IP address.
- Payment data: payments are handled by Stripe. We never see or store your card number; we receive only what we need for billing, such as your plan and payment status.
When you fill in a form on this website or book a call, we also receive the details you enter, such as your name and email address.
Why we use it
- to run the service: build your reports, forecasts and what is due;
- to support you when you ask for help;
- to bill you for your subscription;
- to keep Propscalr and your account secure;
- to improve the product, using usage data.
We do not sell your data, and we do not use it for advertising.
Legal bases
We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). For visitors and customers in the EU or UK, the GDPR and UK GDPR also apply, and we rely on these bases:
- Contract: to provide the service you signed up for and bill you for it.
- Legitimate interests: to support you, keep the service secure and improve it.
- Consent: for analytics cookies on this website, where the law requires it.
- Legal obligation: to keep records the law requires, such as invoices.
Who processes it for us
We use these providers to run Propscalr. Each handles data only on our instructions.
- Supabase: database and sign-in
- Railway: API hosting
- Vercel: web hosting
- Resend: email
- Stripe: payments
- Google Analytics and Google Tag Manager: website analytics, only if you accept
- PostHog (EU hosting): session recordings and heatmaps of the home page, only if you accept
- Tally: forms
- Cal.com: call booking
We may also share data where the law requires it.
International transfers
Some of these providers store or process data outside the UAE, for example in the United States. Where data leaves the UAE, the EU or the UK, we rely on the safeguards the law provides, such as the provider’s standard contractual clauses.
How long we keep it
We keep your data while your account is active. If you ask us to close your account, we delete your data within 30 days, unless the law requires us to keep part of it for longer, such as billing records.
How we keep it safe
- Everything between your browser, the app and our providers travels over encrypted connections (HTTPS).
- Your data is tied to your account, and the app checks who is asking before it returns anything.
- Passwords are never stored in readable form.
- Only the people who need access to run and support the service have it.
No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.
Your rights
You can ask us to:
- give you a copy of your data (access);
- correct data that is wrong (correction);
- delete your data (deletion);
- send your data to you in a portable format (export);
- stop processing it for a particular purpose (objection).
Email hello@propscalr.com. We reply within 30 days. You can also complain to your data protection authority.
Cookies
The app uses essential cookies to keep you signed in; it cannot work without them. This website sends first-party analytics events (pages viewed, scrolling, clicks on key links and the product images, and demo form use, with your email address only as a one-way hash) to our own servers, linked by a ps_sid cookie that lasts 30 days. Only if you accept on the home page does it also use Google Analytics and Google Tag Manager, to understand how visitors use it, and PostHog, which records how you use the home page (page views, clicks and scrolling, with anything you type hidden) so we can watch recordings and heatmaps. Both set their own cookies, neither loads until you accept, and the Cookies link at the foot of the home page changes your choice. You can block or delete cookies in your browser settings.
Children
Propscalr is not for anyone under 18, and we do not knowingly collect their data.
Changes to this policy
We may update this policy. If a change matters, we will email the address on your account before it takes effect. The date at the top shows the latest version.
Contact
Questions about your data or this policy: hello@propscalr.com.