Valore policies
Privacy Policy
Effective 7 October 2026
In short:
- We collect what we need to run your account, produce your reports and take payment. We do not sell personal information and we do not run advertising trackers.
- Card details go straight to Paystack. We never see or store your full card number.
- You can ask to see, correct or delete your information at any time.
1. Who is responsible for your information
Valore, including the PropFlow rental-management workspace, is built, owned and operated by FlowState Development, a registered South African software company (www.flowstatedev.co.za). In these documents “Valore”, “we”, “us” and “our” mean FlowState Development.
This policy explains how we handle personal information in line with the Protection of Personal Information Act 4 of 2013 (POPIA).
- For your own account information, FlowState Development is the responsible party.
- For information you load about other people in PropFlow — such as leads, tenants, landlords, vetting details and trust-ledger entries — you (or your agency) are the responsible party and we act as your operator. We process it only to provide the service to you.
2. What we collect
| Category | Examples | Why we use it |
|---|---|---|
| Account | Name, email address, password (stored only as a one-way hash), account type, agency membership and role | To create and secure your account and control access |
| Property work | Addresses you search, figures you enter, saved analyses, valuations and reports | To produce and save your reports |
| PropFlow records | Contacts, properties, tickets, messages, vetting records, trust-ledger entries and their audit trail | To provide the rental-management workspace to your agency |
| Billing | Wallet transactions, payment references, subscription status, and a card token issued by Paystack for renewals | To take payment, renew subscriptions and keep financial records |
| Messages to us | What you send through the contact form or by email | To reply and provide support |
| Technical | IP address, browser type and server logs | To keep the service secure and diagnose faults |
We collect this directly from you, from your agency when it invites or approves you, and from our data providers when you run a property search.
3. Who we share it with
We share information only with service providers that help us run Valore, and only what each one needs:
| Provider | What it does | What it receives |
|---|---|---|
| Paystack | Payment processing | Your email, the amount, and the card details you enter on Paystack’s own checkout |
| Anthropic | AI research and report drafting | The property address, type and figures for the analysis you run — not your name, login or payment details |
| Lightstone | Property and deeds-office sales data | The property address or erf details you search |
| OpenStreetMap | Maps and address location | The address being located; map requests are relayed through our server |
| Google Fonts | Typefaces used on the site | Your browser requests the font files directly, which exposes your IP address to Google |
| Our hosting provider | Servers and database | All data stored in Valore |
We may also disclose information where the law requires it, or to protect our rights or the safety of users. We do not sell personal information and we do not share it for third-party marketing.
4. Transfers outside South Africa
Some of these providers process data outside South Africa, including in the United States and the European Union. Where that happens we rely on the provider’s contractual commitments to protect the information to a standard comparable to POPIA.
5. Cookies and local storage
Valore uses one essential cookie to keep you signed in (it lasts up to 30 days and is not readable by scripts), and your browser’s local storage to remember preferences such as light or dark theme. We do not use advertising or cross-site tracking cookies.
6. How long we keep information
- Account and saved work: for as long as your account is open. When an account is closed we delete or anonymise it, normally within 90 days.
- Billing and trust-ledger records: for at least five years, because tax and financial-record laws require it.
- Server logs: for a limited period needed for security and troubleshooting.
7. How we protect it
Connections to Valore are encrypted (HTTPS), passwords are stored only as salted one-way hashes, sign-in sessions use protected cookies, and agency data is separated so that members see only their own agency’s records. No system is perfectly secure; if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
8. Your rights
Under POPIA you may:
- ask what personal information we hold about you and request a copy;
- ask us to correct or delete it;
- object to, or ask us to restrict, how we process it;
- withdraw consent where we rely on consent;
- lodge a complaint with the Information Regulator (inforegulator.org.za).
To exercise any of these, contact us using the details below. We respond within 30 days. If your information was loaded into PropFlow by an agency, we will refer your request to that agency, which is responsible for it.
9. Children
Valore is for adults. We do not knowingly collect personal information from anyone under 18.
10. Changes to this policy
We will post any changes here with a new effective date, and notify account holders of material changes by email or in the app.
11. Contact
Privacy questions and requests go to our Information Officer.
Email migal@flowstatedev.co.za or call +27 60 521 4772, Monday to Friday, 09:00–17:00 SAST.