Privacy Policy

1. Who We Are

Propeter ("Propeter", "we", "us") provides a revenue management and pricing system for hospitality to hotel owners, operators and management companies ("Clients"). This policy explains how we collect, use and protect personal data on propeter.com and in the Propeter platform.

2. Website Enquiries (Demo and Contact Forms)

When you submit the demo request or contact form we collect the details you enter: your name, email address, property name, room count, current PMS, enquiry category and message. The submission is sent by email to the Propeter team so we can respond to you.

• Purpose: responding to your enquiry and arranging a demo or follow-up.
• Lawful basis (GDPR): our legitimate interest in answering requests you send us, or steps you ask us to take before entering into a contract.
• Retention: kept for as long as needed to handle your enquiry and any resulting business relationship, and deleted on request.
• Sharing: we do not sell your data or share it with advertisers. It is processed by our email provider only to deliver the message to us.

The website does not set analytics or advertising cookies. See our Cookie Policy for details.

3. Hotel Guest Data in the Platform

For guest data processed in the Propeter platform, the hotel is the data controller and Propeter acts as a data processor on its instructions. That processing is governed by our Data Processing Agreement, and the third parties involved are listed on our Sub-Processors page.

4. Payment Card Data

Card payments on Propeter direct booking pages are processed by Windcave, a PCI DSS Level 1 certified payment service provider. Card details are entered on Windcave hosted payment pages, so card numbers never touch or reside on Propeter servers or databases.

5. Data Subject Rights

Depending on where you live (for example under the GDPR, UK GDPR, CCPA, India’s DPDP Act or Australia’s Privacy Act), you may have rights to access, correct, delete or export your personal data and to object to or restrict processing.

• Website enquiries: email privacy@propeter.com and we will act on your request.
• Hotel guests: contact the hotel you stayed with. Propeter provides hotels with built-in tools to export a guest’s data and to erase it, using pseudonymisation that keeps the anonymised financial records required for tax compliance.

6. Security

Client data is stored in PostgreSQL databases with row-level security policies that prevent cross-tenant access, encrypted at rest (AES-256) and in transit (TLS). Propeter is ISO 27001, ISO 9001, PCI DSS and SOC 2 Type II compliant; the SOC 2 Type II report is available to customers under NDA.

7. International Transfers

Propeter is hosted on Amazon Web Services, primarily in the Asia Pacific region. Transfers of EU/UK personal data are covered by Standard Contractual Clauses and, for UK data, the UK International Data Transfer Agreement, as described in our Data Processing Agreement.

8. Contact

Questions about this policy or requests about your personal data can be sent to privacy@propeter.com. We will update this policy, and the "Last Updated" date, when our practices change.