Who is responsible
Mercazul LLC operates Vecinoti and is responsible for website inquiries, subscription administration and its own business and security records. The subscribing community decides why and how resident, staff and visitor records are used; Mercazul LLC processes those records on its behalf under the applicable service and data processing agreements. Contact your community about its collection practices and local notices.
What we collect
Account data: name, email address, phone number if given, language, profile photo if uploaded, and the community, building and unit a membership belongs to. Activity data: entry passes and visits, notices and reactions, service requests and their photos, reservations, conversations and messages, posts and replies in the neighbour feed, documents, votes and financial records, all as entered by users and administrators. Security data: sign-in events, multi-factor enrolment, session and device identifiers, the network address and browser of requests, and an audit trail of administrative actions. Crash reports from the applications, with the page address stripped of any query string.
Visitors
If you visit a community that uses Vecinoti, the gate records your name, your ID number and, when taken, your photo, to control access and notify the unit you are visiting. The community is responsible for that record; only its gate and its administration see it, and the ID number is shown in full only to the staff member checking it. The photo is deleted after 90 days and the visit after a year, unless the community sets a different horizon. To view or delete your data, write to that community's administration.
Why we use it
To run the service the Customer contracted: let the right people in, notify residents, resolve requests, keep the community's records and let neighbours talk to each other by name. To keep accounts and communities secure, including rate limits, lockouts and audit logs. To support administrators and answer their questions. We do not profile people, sell data or use it for advertising.
Who can see your information
Access depends on role, community membership and enabled features. Administrators and guards access the records needed for their responsibilities. Posts, replies and profile details may be visible to other members of your community. The optional neighbour directory can share the contact details you choose to publish; you can withdraw that listing. Platform operators may access records for authorized support, security and service administration. Community members are not granted access to another community’s records.
Service providers and disclosures
We use providers for hosting, file storage, email and backups, as configured for the deployment. Optional integrations may send necessary information to corporate sign-in providers, Apple or Google for wallet passes, and Apple or Google push services for notifications. Ask Mercazul LLC for the provider information relevant to your deployment. We may disclose information to comply with law, protect security or legal rights, or support a business transfer subject to appropriate confidentiality and applicable law.
How long we keep it
While your membership is active and, for the community's records (dues, votes, audit trails), for as long as the community's retention policy says. The defaults, which each community can adjust and the platform enforces automatically: visitor photos 90 days; visits, used passes, packages, incidents, shift handoffs and intercom calls 1 year; messages, closed requests and resolved panic alerts 2 years; invitations 90 days; read notifications 180 days; files never attached 7 days. Contact and signup requests are kept for 1 year at platform level; crash reports for 30 days. When you delete your account, your session ends at once and the account is erased 30 days later unless you sign in and cancel. Your personal data is erased; what you shared with the community is kept without your name. Backups rotate within 30 days.
Your rights
From the application you can see and correct your profile, download a copy of everything the platform holds about you, choose which notifications you receive, and delete your account after confirming your password. You can ask the Customer, or us, to exercise access, rectification, erasure, restriction, portability or objection rights under the law that applies to you, and you can complain to your supervisory authority.
Security measures
The service supports encrypted connections, password hashing, multi-factor authentication, access controls, file validation and administrative audit logs. The protection of a deployment also depends on its configuration, its operators and users keeping credentials secure. No system can guarantee absolute security. Report suspected account misuse to your administrator and service security concerns through the website contact form.
Network addresses
We keep the full network address only in sign-in records, to investigate abuse, and for as long as the community sets. Everywhere else we keep only the network (the first three groups of an IPv4 address), and on public forms and rate limits a keyed pseudonym from which the address cannot be recovered.
Processing locations
Hosting locations and service providers depend on the Customer’s deployment and agreement. An enabled integration may process information in another country. Where required, the relevant agreements must provide safeguards for international transfers. Contact Mercazul LLC or your community for the locations and arrangements applicable to your records.
Children
The platform is for adults who are members of a community. Accounts are created by invitation from an administrator; we do not knowingly collect data from children.
Changes to this Policy
We may update this Policy. Material changes are announced to the Customer's administrators before they take effect, and the current version is always published on the website.
Privacy requests
Use the website contact form or Contact Vecinoti in the application to reach Mercazul LLC about privacy. Include your community and the right or information you are requesting. We may verify your identity and, when your community controls the records, coordinate with its administration. Do not send passwords or identity documents unless a secure verification process specifically requests them.
Purposes and legal grounds
Where applicable law requires a legal basis, processing relies on providing the contracted service, complying with legal obligations, legitimate interests such as security and support, or consent for optional features where required. Acknowledging this Policy does not give blanket consent to unrelated uses. Optional device permissions and directory participation can be changed separately.