Skip to main content

Privacy Policy and Personal Data Protection

At Communeo, we believe property management should be built on trust and transparency. We understand that your home and business are private, and we are committed to protecting the personal information you share with us.

This Privacy Policy describes how we collect, use, and protect your information when you use our platform ("the Service"), and what choices you have regarding your data.

1. Information We Collect

To enable Communeo to function as the "operating system" for your building, we need to process certain data. We collect information in three main ways:

1.1 Information You Provide Directly

  • Account Creation: When you sign up, we collect your full name, email address, phone number, and password.
  • Resident/Manager Profile: Details about your unit (apartment number), vehicle (for parking), pets, and emergency contacts.
  • Payments: If you make payments or subscribe to our services, our payment processor (Stripe) collects payment card information directly. Communeo does not store full card numbers.
  • Communications: Messages, maintenance requests, and other content you submit through the platform.

1.2 Information We Collect Automatically

  • Usage Data: Log files, IP addresses, browser type, pages visited, time spent on the platform, and other diagnostic data.
  • Device Data: Device identifiers, operating system, and mobile network information.
  • Cookies and Tracking: We use cookies and similar tracking technologies to improve your experience. See Section 1.3 for details.

1.3 Cookies and Tracking Technologies

We use cookies (small text files stored on your device) and similar technologies to maintain session state, remember your preferences, and analyze usage patterns. You may configure your browser to refuse cookies; however, some features of the Service may not function properly without them.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Process payments and manage your subscription.
  • Send service-related communications (account updates, maintenance notifications, billing).
  • Respond to your requests and provide customer support.
  • Analyze usage patterns to improve the platform.
  • Comply with legal obligations.

We do not sell your personal information to third parties for marketing purposes.

3. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who help us operate the platform, including: Stripe (payment processing), Amazon Web Services / Supabase (cloud infrastructure and database hosting), Vercel (application hosting and delivery), Pusher (real-time notifications), Amazon SES (email delivery), Sentry (error monitoring and diagnostics), and Upstash (rate limiting and abuse prevention). These providers are contractually bound to use your data only to provide services to Communeo.
  • Property Managers / Residents: Information necessary to facilitate the management relationship (e.g., a resident's unit number is shared with their property manager).
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

We will notify you of any new sub-processor that materially affects how your data is processed, with at least 30 days' advance notice.

4. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

  • Encryption in transit (TLS) and at rest for sensitive data.
  • Access controls limiting who within Communeo can access personal data.
  • Regular security reviews.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention obligations.
  • Objection: Object to certain processing activities.
  • Portability: Request your data in a machine-readable format.

To exercise any of these rights, contact us at legal@communeo.io.

5A. Rights Under Mexican Law (LFPDPPP) — Derechos ARCO

If you are located in Mexico, you have specific rights under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). Communeo, as the responsible party (responsable) for the processing of your personal data, recognizes and respects the following ARCO rights:

  • Acceso (Access): The right to know what personal data we hold about you and how it is being used.
  • Rectificación (Correction): The right to correct inaccurate or incomplete personal data.
  • Cancelación (Deletion): The right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
  • Oposición (Objection): The right to object to the processing of your personal data for specific purposes.

To exercise your ARCO rights:

  • Send an email to legal@communeo.io with the subject line "Solicitud ARCO".
  • Include: your full name, a copy of your official ID, a description of the right you wish to exercise, and any supporting documentation.
  • We will acknowledge your request within twenty (20) business days and respond within fifteen (15) additional business days.

If you believe your ARCO rights have not been respected, you may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) at www.inai.org.mx.

Note for Mexican users: Communeo processes your personal data in accordance with the LFPDPPP. This Privacy Policy constitutes Communeo's Aviso de Privacidad under Mexican law. For sensitive personal data (datos personales sensibles) such as biometric information used in building access systems, your express consent is required and will be requested separately.

6. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with our legal obligations:

  • Account data: Retained while your account is active, then deleted within ninety (90) days of account closure.
  • Payment records: Retained for five (5) years to comply with Mexican tax law (Ley del SAT) and commercial law obligations.
  • Communication logs and maintenance records: Retained for one (1) year after the related matter is resolved.
  • Backup copies: May be retained for up to ninety (90) additional days in encrypted backup systems before permanent deletion.

You may request early deletion of your data by contacting legal@communeo.io. Such requests will be honored subject to legal retention requirements.

7. Children's Privacy

Our Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at legal@communeo.io and we will delete such information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes that affect how we process your personal data, we will provide at least thirty (30) days' advance notice by email to the address associated with your account, before the changes take effect.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after the effective date of changes constitutes your acceptance of the revised Policy.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: legal@communeo.io
  • Subject for privacy inquiries: "Privacy Policy — [Your Name]"

This Privacy Policy is permanently published at /privacy and constitutes the current version. For data protection inquiries, including ARCO rights requests, please use the email above.