Peva
Log inRegister

Privacy policy

Last updated: July 23, 2026

Peva is a workspace for real estate agencies and independent agents to manage properties and share them with clients. This policy explains what personal information we collect through peva.app, its agency subdomains and connected custom domains, how we use it, and the choices you have.

Peva and agency responsibilities

Peva handles account, billing, support, and technical information to provide and protect the service. Each agency decides what property and workspace information to add and who may access it. If an agency adds personal information about another person, the agency is responsible for having a lawful reason to use it, providing any required notices, and offering any required choices. Requests about information controlled by an agency may need to be directed to the agency owner.

Information we collect

We collect the following information when you use Peva:

  • Account and authentication details — your name, email address, profile image, login method, and information that securely verifies your password without storing the password itself when you register with email, or profile information provided by Google when you sign in with Google
  • Agency and property content — agency profiles, member roles and invitations, property addresses and coordinates, prices, descriptions, private notes, photos, branding, custom domains, and other content you or your agency add to the workspace
  • Billing details — your plan, billing interval, seat count, subscription status, and Stripe customer and subscription identifiers. Payment details are entered in Stripe-hosted pages; full card numbers do not reach our servers
  • Communications — support emails, feedback, and related account, agency, page, and subscription context needed to investigate your request
  • Technical and session data — IP address, browser and operating-system details, page addresses, language and interface preferences, and timestamps used to keep sessions secure and diagnose problems
  • Sources — directly from you; from colleagues when they invite you or add information to the shared agency workspace; automatically from your browser or device; and from providers such as Google and Stripe when you use their sign-in, mapping, or billing services
  • Error monitoring — When an error occurs, Sentry may receive diagnostic details such as the error, the affected page, browser information, and limited technical events leading up to it, such as navigation and request status. Some reports include account, agency, role, or subscription context so we can identify and fix the problem. Peva limits this diagnostic context, but reports may occasionally contain personal information such as your name or email address.

How we use your information

We use this information to provide and administer Peva, authenticate accounts, enforce agency roles and plan limits, process subscriptions, generate and publish the pages and documents an agency requests, send transactional emails, provide support, diagnose errors, improve performance and usability, prevent fraud and abuse, and comply with legal obligations. Where applicable law requires a legal basis, we rely on our contract to process account, agency, subscription, and requested publication data; on our legitimate interests to secure, support, diagnose errors in, and improve the service; and on legal obligations to keep required records. We do not sell personal information or use it for third-party advertising.

How we share information

To operate Peva, we disclose information to service providers that process it on our behalf: Cloudflare (application hosting, media storage and delivery, and custom domains), PlanetScale (database hosting), Resend (transactional and support-email delivery), and Sentry (error monitoring). Stripe and Google also receive information when you make a payment, manage a subscription, use the billing portal, sign in with Google, or use Maps/Places; their own terms and privacy policies apply to those parts of their services. To display public maps, your browser connects to CARTO, which receives routine connection data such as your IP address. Our service providers handle information under their agreements with us.

Shared workspace records, such as property listings and agency materials, are visible to agency members according to their roles and stay with the agency when a member leaves. Your personal Peva account remains separate. Requests about shared workspace records may need to be resolved with the agency owner.

We may also disclose information when required by law, to respond to valid legal process, or to protect the rights, safety, and security of Peva, our users, or others. If Peva is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction.

International data transfers

Our providers may process information in the United States and other countries whose privacy laws differ from those where you live. We use provider agreements and data-protection terms to protect this information. Where applicable law requires a transfer mechanism, the transfer relies on an adequacy decision for the destination or participating provider, or on another recognized safeguard, such as standard contractual clauses. You may contact us for information about, or a copy of, the safeguards that apply to your personal information.

Public content

Public agency pages, available property pages, and property datasheets are public by design and may be indexed by search engines. They can include the agency's name, branding, location and contact details, property addresses and coordinates, prices, descriptions, and photos. Do not put personal information or private notes in public listing fields unless you have the right to publish them.

Cookies and local storage

We use cookies and browser storage that are necessary for authentication and security, language and interface preferences, and navigation and display choices. We do not use advertising cookies or third-party advertising trackers.

Data retention

We keep account and workspace information while it is needed to provide Peva. Shared workspace records, such as property listings and agency materials, remain with the agency when a member leaves; the member's personal Peva account remains separate. When we complete a verified account or agency deletion request, we delete or de-identify the information in scope unless it must be retained for billing, fraud prevention, security, dispute resolution, or other legal reasons. Some records and deleted data may remain in logs and backups for a limited period before being overwritten. Before requesting deletion, contact support if you need a copy of information in scope; available export options depend on the account and agency data involved.

Security

We protect your information with measures such as encryption in transit, secure password verification, and access controls. No online service can guarantee absolute security, but we work to keep your data safe.

Your rights

You can view and update most account and agency information in Peva. Depending on where you live, you may also ask to access, correct, delete, or export personal information, or to restrict or object to certain uses. We may need to verify your identity and authority over the relevant account or agency before completing a request. To make a request, email us at support@email.peva.app.

If you are not satisfied with our response, you can also lodge a complaint with the data protection authority in your country.

California privacy notice

If California privacy law applies to you and Peva, you may have rights to know what personal information we collect, use, and disclose; to correct, delete, or obtain a copy of it; to limit certain uses or disclosures of sensitive personal information; and to receive equal service when you exercise those rights. The categories of information, sources, purposes, and recipients are described above. Peva does not sell personal information or share it for cross-context behavioral advertising. You or an authorized agent may submit an applicable request using the contact information in the Your rights section.

Children

Peva is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy as Peva evolves. We will post any changes on this page and update the date above; for significant changes we will notify you by email or in the app.

Contact us

If you have any questions, email us at support@email.peva.app.