Legal
What we collect, why we collect it, and what you can do about it. Written for humans first — lawyers second.
Effective date: 2026-07-11
PropSocket is a unified API middleware that connects to Property Management Systems (PMS) — starting with Entrata — normalizes the data into a Common Data Model, and exposes it through a REST API, HMAC-signed webhooks, and scheduled CSV exports.
This policy explains what data we handle, both about the people who visit this website and about the PMS records our customers route through our platform. When we say "you," we mean the visitor or customer reading this — not the residents whose records flow through our customers' integrations.
PropSocket is operated by Results Theory, Inc., a Pennsylvania corporation with its registered office at 4 Ogden Ave, Swarthmore, PA 19081. Results Theory, Inc. is the data controller for the website data described in this policy, and the data processor for the PMS records our customers route through the platform. You can reach us atpropsocket.io/contact.
Where we operate. PropSocket is a US company, our infrastructure runs in the United States, and our services are directed to US-based businesses. We do not target, market to, or knowingly provide the service to individuals in the European Economic Area, the United Kingdom, or Switzerland, and we do not act as a controller or processor subject to the EU or UK GDPR. This policy is written around US privacy law.
Name, work email, company, role, and password (hashed). When you sign up through SSO, we receive the identity claims your provider sends — typically email, name, and a stable subject identifier.
When you connect a PMS integration, we pull the records you've scoped: properties, units, residents, leases, and lease-resident relationships. That data includes resident personal information — names, contact details, lease terms, and similar fields — that your PMS already holds. We store it because that's the product. You stay the data controller; we operate as your data processor.
API request logs (endpoint, status code, timestamp, request ID, organization ID), webhook delivery records, sync job history, and dashboard activity (logins, integration changes, key rotations). We use this to operate the service, debug failures, and respond to your support tickets.
Standard, privacy-friendly web analytics on this marketing site — page views, referrer, coarse device and browser info. We do not use third-party advertising trackers. SeeCookies and trackingfor the specifics.
The contact form on this site posts to HubSpot — seeCookies and tracking. Anything you write in the message field, plus the name and email you give us, gets stored there so we can reply.
We do not sell your data. We do not use your synced PMS data to train machine-learning models, build aggregate benchmarks, or generate any product output that other customers see.
We share data with a short list of subprocessors that we need to run the service — cloud hosting, identity, email, analytics, and customer support tooling. The current, authoritative list lives attrust.resultstheory.com.
We do not share your data with advertisers, data brokers, or any third party that wants it for their own purposes. We share data with law enforcement only when compelled by valid legal process, and we'll tell you when we can.
If we're ever acquired or merged, your data goes with the business. We'll notify you before any transfer changes who controls it.
We keep account and synced PMS data for as long as your organization has an active PropSocket workspace. When you cancel, we retain data for a short wind-down window so you can export it, then delete it on the schedule below.
On request, we'll hard-delete your data sooner. SeeYour rights.
Depending on where you live, you have some or all of these rights:
For residents whose PMS records flow through our platform: we process that data on behalf of the customer (the rental operator or PropTech company). Data subject requests for those records should go to the customer first; we'll cooperate with them to fulfill the request.
If you're a California resident, seeYour U.S. state privacy rightsfor the CCPA/CPRA-specific disclosures and how they apply to us.
To exercise any of these rights, emailprivacy@propsocket.ioor use the form onour contact page.
This site uses cookies and similar technologies in three categories:
Data is encrypted in transit (TLS 1.2 or higher) and at rest. PMS credentials are encrypted at rest and never displayed after entry. Webhook payloads are signed with HMAC-SHA256. Access to production systems is restricted, logged, and reviewed.
PropSocket's SOC 2 Type II audit is in progress — we're in the observation period, with our report expected Q4 2026. Our current security posture and any incident disclosures live attrust.resultstheory.comonce provisioned.
PropSocket operates from and stores data in the United States. Because our services are directed to US-based businesses (seeWho we are), we do not rely on EU/UK cross-border transfer mechanisms such as the Standard Contractual Clauses. If you access this website from outside the US, your data will be processed in the US.
This section applies to residents of California under the CCPA/CPRA. It describes the personal information we handle, the limited role we play, and the rights you can exercise.
PropSocket is a staging and integration layer. For the PMS records our customers route through the platform, we act as a service provider under the CCPA/CPRA: we process that data solely on behalf of the customer, under a written contract (our Data Processing Addendum, which reflects our US-only scope), to provide the service. We are not the source of truth for that data and not its final destination — the customer's PMS is the system of record, and the customer decides where the normalized data goes. For the account and website data we collect directly, we act as abusiness.
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising — and we have not done either in the preceding 12 months. We arenot a data broker. Because we neither sell nor share, there is no "Do Not Sell or Share My Personal Information" action to take; the rights below still apply.
In the past 12 months we have collected these CCPA categories of personal information:
We collect this information from you directly, from the PMS integrations you connect, and automatically as you use the service. We use it for the purposes inHow we use it, disclose it only to the subprocessors inWho we share data withfor those business purposes, and keep it for the windows inHow long we keep your data.
Some PMS records include a Social Security number. Our integration layer never persists a full SSN — where one is present we store it masked (for example, the last four digits) or hashed, never the complete number. We use and disclose sensitive personal information only to provide the service on the customer's behalf, which does not trigger the CCPA/CPRA right to limit its use.
For residents whose PMS records flow through the platform, direct your request to the business customer that operates the integration (the "business" that controls the data); we will assist them as their service provider. For your own account or website data, emailprivacy@propsocket.io. We will verify your request against the information we already hold, and you may use an authorized agent to submit it.
We'll update this policy when our practices change. The effective date at the top reflects the current version. For material changes, we'll email account admins at least 30 days before the new version takes effect.
Privacy questions go toprivacy@propsocket.io. For anything else, thecontact pagegoes to the same humans.
Talk to the engineers building PropSocket. Real replies within one business day — no sales funnel between you and the answer.