Last Updated: January 2025
PropDefend LLC ("PropDefend," "we," "our," or "us") is a Managed Security Service Provider (MSSP) that offers cybersecurity, IT automation, and cloud management services for small and mid-sized businesses. This privacy policy explains how we collect, use, and protect data across all of our services.
Services Covered by This Policy
This policy applies to all PropDefend services, including:
- Google Workspace and Microsoft 365 security management
- Endpoint monitoring and management (PropDefend Security Agent)
- SMS-based security alerts and IT notifications
- Remote monitoring and management (RMM) services
Google Workspace Integration
When a Google Workspace Super Admin authorizes our application, we may access the following data through Google's Admin APIs:
- User account information (email, status, organizational unit)
- Group information and memberships
- Organizational structure and metadata
- Audit and usage reports (e.g., sign-ins, activity logs)
- Device data (for ChromeOS management)
- Group settings and domain-level metadata
We do not access, read, or store end-user content such as Gmail messages, Calendar events, Drive files, or Contacts.
Endpoint Monitoring (Security Agent)
When the PropDefend Security Agent is installed on a device, we collect:
- Hardware and software inventory
- System performance metrics
- Security status and alerts
- Network configuration
- Event logs and system diagnostics
SMS Messaging Service
When your organization enrolls in our SMS notification service, we collect:
- Employee phone numbers (provided by your organization's IT administrator)
- Message delivery status and timestamps
- Opt-out preferences
- Device sign-in events that trigger security alerts
We use collected information strictly to provide services requested by our clients, including:
- User onboarding and offboarding automation
- Security monitoring, alerting, and incident response
- Device verification and access control
- System maintenance reminders and IT notifications
- Reporting and usage analysis
- Policy enforcement and compliance monitoring
We do not use your information for marketing purposes. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
SMS Messaging Details
What Messages We Send
Our SMS service sends transactional IT and security messages only:
- Device verification requests - When a new device attempts to access a work account
- Security alerts - Notifications about potential account compromise or suspicious activity
- System maintenance reminders - Occasional notifications about required updates or device maintenance
Message Frequency
Message frequency varies based on security events and system conditions. Most users receive fewer than 5 messages per month. Messages are only sent when triggered by specific events—we do not send scheduled or promotional messages.
Consent and Opt-Out
- Consent: Employees are enrolled in SMS alerts when their organization contracts with PropDefend for managed IT services. Your employer's IT administrator provides phone numbers and confirms that employees have been notified about the service.
- Opt-Out: You may opt out of SMS messages at any time by replying STOP to any message. You may also contact your IT administrator to remove your phone number from the system.
- Help: Reply HELP to any message for assistance, or contact support@propdefend.com.
Message and Data Rates
Standard message and data rates from your mobile carrier may apply to messages sent and received.
Data Security
PropDefend implements industry-standard security measures to protect your data:
- All data transmission uses TLS/SSL encryption
- Access credentials are stored using secure service accounts and encrypted storage
- Google Workspace access uses Google's official OAuth 2.0 authorization flow
- System access is logged and monitored
- Employee access to client data is restricted on a need-to-know basis
Data Retention
- Active clients: We retain data for the duration of the service agreement plus 90 days
- SMS records: Message logs are retained for 12 months for compliance and troubleshooting purposes
- Security logs: Retained according to your organization's policies and applicable regulations
Data Sharing
We do not share client data with third parties except:
- When required by law or legal process
- When contractually authorized by the client
- With service providers who assist in delivering our services (subject to confidentiality agreements)
Your Rights and Choices
Revoking Access
Clients may revoke PropDefend's access at any time by:
- Removing the app from the Google Workspace Admin Console
- Disabling API access in your admin settings
- Uninstalling the PropDefend Security Agent via Windows Add/Remove Programs
- Contacting our support team at support@propdefend.com
SMS Opt-Out
Reply STOP to any message to opt out of SMS notifications.
Data Requests
To request access to, correction of, or deletion of your personal data, contact us at support@propdefend.com.
Compliance
PropDefend complies with:
- Google API Services User Data Policy
- Telephone Consumer Protection Act (TCPA) requirements for transactional messages
- CTIA Messaging Principles and Best Practices
- Applicable data protection laws and industry best practices
Changes to This Policy
We may update this privacy policy from time to time. We will notify clients of material changes via email or through our service portal.
If you have questions about this privacy policy, please contact us:
PropDefend LLC
Email: support@propdefend.com
Web: https://propdefend.com
This policy was last updated in January 2025.