Skip to main content

Privacy Policy and Personal Data Protection

At Communeo, we believe property management should be built on trust and transparency. We understand that your home and business are private, and we are committed to protecting the personal information you share with us.

This Privacy Policy describes how we collect, use, and protect your information when you use our platform ("the Service"), and what choices you have regarding your data.

Who Is Responsible for Your Data

Who answers for your data depends on which data it is. There are two cases, and it is worth knowing which one you are in before you read on.

Your community's data. The responsible party (responsable) is whoever manages your condominium: the property manager, the board, or the management company that hired Communeo. That administration decides what data is collected from residents and what it is used for (fees, access, guests, packages, reservations, maintenance requests). Communeo processes that data as a processor (encargado): on the administration's behalf and under its instructions, solely to operate the platform, never for purposes of our own. Your administration has its own privacy notice; this policy explains how we handle that data on its behalf, and does not replace it.

Your account data and our website's data. Here the responsible party is Communeo: the data you use to create your account and sign in, billing and collection data for our service, support data, and what we collect on our website (contact forms, cookies, and analytics). For this data we answer to you directly.

Identification of the responsible party, for purposes of article 16 of the LFPDPPP:

  • Responsible party: Eric Yair Briseño Aguilera, an individual with business activity (persona física con actividad empresarial), operating under the trade name Communeo
  • Address: Avenida Eurípides 1716, El Refugio, Querétaro, Querétaro, C.P. 76147
  • Email for privacy matters: hello@communeo.io

Where your administration is the responsible party, its identification and address are the ones it gives you in its own notice. If you do not have them at hand, write to hello@communeo.io and we will help you find them.

1. Information We Collect

To enable Communeo to function as the "operating system" for your building, we need to process certain data. We collect information in three main ways:

1.1 Information You Provide Directly

  • Account Creation: When you sign up, we collect your full name, email address, phone number, and password.
  • Resident/Manager Profile: Details about your unit (apartment number), vehicle (for parking), pets, and emergency contacts.
  • Payments: If you make payments or subscribe to our services, our payment processor (Stripe) collects payment card information directly. Communeo does not store full card numbers.
  • Communications: Messages, maintenance requests, and other content you submit through the platform.

1.2 Information We Collect Automatically

  • Usage Data: Log files, IP addresses, browser type, pages visited, time spent on the platform, and other diagnostic data.
  • Device Data: Device identifiers, operating system, and mobile network information.
  • Cookies and Tracking: We use cookies and similar tracking technologies to improve your experience. See Section 1.3 for details.

1.3 Cookies and Tracking Technologies

We use cookies (small text files stored on your device) and similar technologies to maintain session state, remember your preferences, and analyze usage patterns. You may configure your browser to refuse cookies; however, some features of the Service may not function properly without them.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service.
  • Process payments and manage your subscription.
  • Send service-related communications (account updates, maintenance notifications, billing).
  • Respond to your requests and provide customer support.
  • Analyze usage patterns to improve the platform.
  • Comply with legal obligations.

We do not sell your personal information to third parties for marketing purposes.

  • Internal compliance record. Consolidating, for your community's administration and only within it, the history of the unit and its residents that the platform itself records (punctuality on maintenance fees, payment agreements, requests, guests, packages, reservations), in order to operate the community and handle requests. This record is not shared outside your community and is not a rent history.

3. Data Sharing and Disclosure

We may share your information with:

  • Service Providers: Third-party vendors who help us operate the platform, including: Stripe (payment processing), Amazon Web Services / Supabase (cloud infrastructure and database hosting), Vercel (application hosting and delivery), Pusher (real-time notifications), Amazon SES (email delivery), Sentry (error monitoring and diagnostics), and Upstash (rate limiting and abuse prevention). These providers are contractually bound to use your data only to provide services to Communeo.
  • Property Managers / Residents: Information necessary to facilitate the management relationship (e.g., a resident's unit number is shared with their property manager).
  • Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, subject to the same privacy protections.

Processing outside Mexico: the providers listed above (Stripe, Amazon Web Services, Supabase, Vercel, Pusher, Amazon SES, Sentry, and Upstash) run their infrastructure in the United States of America. Your personal data is therefore stored and processed outside Mexican territory. These providers act as processors (encargados): they handle your data solely on Communeo's behalf and under Communeo's instructions — and, where your community's data is concerned, on behalf of the responsible administration, through us — under the contracts we hold with them, and never for purposes of their own.

When we bring on a new processor that materially changes how your data is handled, you will see it here: we publish the updated notice at /privacy with its date, and if the change is material we will ask you to accept it the next time you enter the platform, as described in Section 8. We do not send a separate advance notice.

4. Data Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

  • Encryption in transit (TLS) and at rest for sensitive data.
  • Access controls limiting who within Communeo can access personal data.
  • Regular security reviews.

No method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your information using commercially acceptable means, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal retention obligations.
  • Objection: Object to certain processing activities.
  • Portability: Request your data in a machine-readable format.

Portability is not a right granted by the LFPDPPP. We offer it as a courtesy, to the extent it is technically feasible, and it is not part of the Mexican framework described in Section 5A.

To exercise any of these rights, write to us at hello@communeo.io. If your request concerns your community's data, Section 5A explains who resolves it and how we help you get there.

5A. Rights Under Mexican Law (LFPDPPP) — Derechos ARCO

If you are located in Mexico, you have specific rights under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP). These ARCO rights are held against the responsible party for the data in question — Communeo for your account and website data, your administration for your community's data, as described in "Who Is Responsible for Your Data" above. Both roles are recognized and respected here:

  • Acceso (Access): The right to know what personal data we hold about you and how it is being used.
  • Rectificación (Correction): The right to correct inaccurate or incomplete personal data.
  • Cancelación (Deletion): The right to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when the legal relationship with the responsible party has ended, subject to legal retention obligations.
  • Oposición (Objection): The right to object to the processing of your personal data for specific purposes.

Where to send your request, depending on which data it concerns:

  • Your account, billing, support, or website data: we are the responsible party. Write directly to hello@communeo.io and we resolve it.
  • Your community's data (fees, access, guests, packages, reservations, requests, and everything else your administration records in the platform): your administration is the responsible party, and it is the one that resolves the request. You may go to it directly. If you would rather start with us, write to us anyway: as its processor we assist you, route your request to the right administration, and confirm to you who we sent it to and when. We also help that administration locate, correct, or delete data inside the platform when it instructs us to.

If you are not sure which case your request falls under, write to us and we will place it: you do not need to know beforehand in order to exercise your right.

To exercise your ARCO rights:

  • Send an email to hello@communeo.io with the subject line "Solicitud ARCO".
  • Include: your full name, a copy of your official ID, a description of the right you wish to exercise, and any supporting documentation.
  • Where Communeo is the responsible party, we will communicate our determination on your request within a maximum of twenty (20) business days from the day we receive it. If the request is well founded, we will give effect to it within the fifteen (15) business days following the date we communicate that determination.
  • Where your administration is the responsible party, those same deadlines run against it. We acknowledge receipt, route your request without delay, and tell you who it was directed to.

If you believe your ARCO rights have not been respected, you may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI) at www.inai.org.mx.

Note for Mexican users: Communeo processes your personal data in accordance with the LFPDPPP. This Privacy Policy constitutes Communeo's Aviso de Privacidad under Mexican law for the data Communeo is responsible for, and describes how Communeo acts as processor for your community's data. The name and address of the responsible party are at the top of this document, under "Who Is Responsible for Your Data". For sensitive personal data (datos personales sensibles) such as biometric information used in building access systems, your express consent is required and will be requested separately.

5B. Options and Means to Limit the Use or Disclosure of Your Data

Beyond ARCO rights, you may limit the use or disclosure of your personal data without having to exercise an ARCO right:

  • Communications: from Profile → Preferences you can turn off email alerts and push notifications. Communications essential to running your account (security, billing, and legal notices) continue while your account is active.
  • Cookies and tracking: you may configure your browser to refuse cookies, with the effects described in Section 1.3.
  • Direct request: write to hello@communeo.io with the subject "Limitación de uso", stating which use or disclosure you wish to limit. We will confirm by the same means and record your request in our files.

Communeo does not market to you using your personal data, nor disclose it to third parties for advertising purposes.

6. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with our legal obligations:

  • Account data: Retained while your account is active, then deleted within ninety (90) days of account closure.
  • Payment records: Retained for five (5) years to comply with Mexican tax law (Ley del SAT) and commercial law obligations.
  • Communication logs and maintenance records: Retained for one (1) year after the related matter is resolved.
  • Backup copies: May be retained for up to ninety (90) additional days in encrypted backup systems before permanent deletion.

You may request early deletion of your data by contacting hello@communeo.io. Such requests will be honored subject to legal retention requirements.

7. Children's Privacy

Our Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@communeo.io and we will delete such information promptly.

8. Changes to This Policy

We may update this Privacy Policy. Every version is published at /privacy with its effective date; that date is the version recorded alongside your acceptance.

When a change is material — when it alters the purposes of processing or the conditions under which we use your personal data — we will ask for your express acceptance: the next time you enter the platform we will show you the updated notice for you to accept, and in the resident portal that acceptance is required to continue. Each acceptance is kept with its date and version, and earlier ones are not deleted.

Continued use of the Service does not amount to accepting a new version: only your express acceptance does.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

  • Email: hello@communeo.io
  • Subject for privacy inquiries: "Privacy Policy — [Your Name]"

This Privacy Policy is permanently published at /privacy and constitutes the current version. For data protection inquiries, including ARCO rights requests, please use the email above.