Privacy Policy
Privacy Policy
PropertySage — operated by Boeger IT Services SHPK
*Last updated: 6 October 2026*
1. Who We Are
This Privacy Policy explains how Boeger IT Services SHPK, a company registered in the Republic of Albania ("we", "us", "our"), collects, uses, stores, and protects personal data in connection with the PropertySage platform (the "Service"), including the website at https://www.property-sage.com.
We process personal data in accordance with the Law No. 9887 of 10 March 2008 on the Protection of Personal Data of the Republic of Albania, the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") where it applies, and other applicable data protection laws.
2. Data We Collect
Information you provide:
- Account data: name, email address, telephone number, password (stored as a salted hash), language and theme preferences.
- Company and property data: company details, property information, addresses, and related records you enter into the Service.
- Tenant, applicant, and vendor data: names, contact details, documents, and other personal data about individuals you manage through the Service. You are the controller of this data; we process it on your behalf as a processor.
- Payment information: we do not store full card numbers. Payment data is collected and processed by our third-party payment providers.
- Communications: messages sent through the Service, support requests, and correspondence with us.
Information collected automatically:
- Usage data: pages visited, features used, device type, browser, IP address, and timestamps.
- Log data: server logs and error reports.
- Cookies and similar technologies, as described in Section 6.
AI assistant data: when you use the AI assistant, the content of your queries and the data you reference may be transmitted to third-party AI service providers to generate responses.
3. How We Use Your Data
We use personal data to:
- provide, operate, and maintain the Service and its features;
- create and manage accounts, verify identity, and secure the Service;
- process transactions and send service and administrative communications;
- send account verification emails and password resets;
- provide the AI assistant and generate responses to your queries;
- respond to support requests and feedback;
- analyze and improve the Service, its performance, and user experience;
- detect, prevent, and address fraud, abuse, and security incidents;
- comply with legal obligations; and
- with your consent, send marketing communications (you may opt out at any time).
4. Legal Bases for Processing
Where the GDPR applies, we rely on the following legal bases:
- Performance of a contract — to provide the Service you have subscribed to.
- Legitimate interests — to secure the Service, prevent fraud, and improve our products, balanced against your rights.
- Legal obligation — where we must retain or disclose data by law.
- Consent — for marketing communications and optional features, which you may withdraw at any time.
5. Sharing of Data
We do not sell personal data. We share data only as follows:
- Service providers — hosting providers, email delivery services (e.g., Mailgun), AI service providers, payment processors, analytics providers, and other vendors who process data on our behalf under contract.
- Within your organization — data you enter about tenants, applicants, and vendors is accessible to users you authorize within your company account, and may be shared with third parties you designate (e.g., credit reporting agencies, screening services) through Service features.
- Legal and safety — where required by law, court order, or government request, or where necessary to protect the rights, property, or safety of us, our users, or the public.
- Business transfers — in connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred to the successor entity.
6. Cookies and Tracking
We use cookies and similar technologies to keep you logged in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling them may affect Service functionality.
7. Data Retention
We retain personal data only as long as necessary for the purposes described in this Policy or as required by law. Specifically:
- Account data is retained while your account is active and for a reasonable period after closure to comply with legal obligations (including tax and accounting records).
- Tenant, applicant, and vendor data you enter is retained according to your configuration and deleted when you delete it or close your account, subject to legal retention requirements.
- Logs and usage data are retained for security and analytics purposes for a limited period.
- Cached AI answers are retained at most 2 days and are deleted when your company is deleted.
- Your AI usage logs and chat conversation history are deleted when your account is erased.
You may delete data through the Service features; where automated deletion is not available, contact us and we will delete it within a reasonable time.
8. Your Rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase ("right to be forgotten") your data, subject to legal retention obligations;
- Restrict or object to processing in certain circumstances;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time, where processing is based on consent; and
- Lodge a complaint with a supervisory authority (in Albania, the Commissioner for the Right to Information and Protection of Personal Data; in the EU, your local data protection authority).
To exercise these rights, contact us at admin@property-sage.com. We will respond within the timeframes required by applicable law (generally one month).
9. Data Controllers and Processors
- Boeger IT Services SHPK is the controller of data about you as a user of the Service (account data, usage data).
- For tenant, applicant, and vendor data you enter into the Service, you are the controller and we are a processor. You are responsible for providing required notices and lawful bases to those individuals, and for responding to their data-protection requests. Where required, we will assist you by providing appropriate safeguards and data-processing terms.
10. International Data Transfers
Your data may be processed in countries outside the Republic of Albania and the European Economic Area, including through third-party service providers. Where the GDPR applies to such transfers, we rely on appropriate safeguards, including the European Commission's adequacy decisions or Standard Contractual Clauses.
11. Security
We implement appropriate technical and organizational measures to protect personal data, including encryption in transit (TLS), hashed passwords, access controls, and monitoring. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential and for the security of devices used to access the Service.
12. Children
The Service is not intended for children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on the Service and updating the "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance.
14. Contact
Questions about this Privacy Policy or our data practices:
Boeger IT Services SHPK
PropertySage
Email: admin@property-sage.com
Website: https://www.property-sage.com