← Vecinto

Draft — this document has not yet been reviewed by a lawyer and must not be relied upon as it stands.

Privacy notice

Version 1.0 · last updated 2026-08-25

This notice explains what Vecinto does with personal data: what we hold, why, who we share it with, how long we keep it, and what you can ask us to do about it.

Two different roles

Vecinto is used by comunidades de propietarios. Which of us decides what happens to your data depends on how it reached us, and it changes what you should do about it.

Who we are

Vecinto is operated by SYS82 LTD.

CompanySYS82 LTD
Company number17431448
AddressRegistered office, United Kingdom
Contactprivacy@sys82.com

Which law applies

Two sets of rules cover what we do, and both give you the same rights:

Our representative in the European Union

Because we are established outside the European Union and offer this service to people living in it, we are required to appoint a representative there. We have not yet done so. Until we have, write to us directly at privacy@sys82.com about anything in this notice, and we will answer within one month.

What we hold, and why

If you are a member of a community

Your name and email address, because they are how you are listed in the register and how you sign in. Optionally a telephone number, a photograph and a short description of yourself — those are yours to add or remove, and yours to decide who sees.

Which property you are registered against, and whether you are an owner or an occupier. What you contribute to the community: tickets you raise, items you propose for the junta, notices you put on the board, replies you write, and documents you upload.

The lawful basis is the legitimate interests of your comunidad in running itself (Article 6(1)(f)) — keeping a register of owners, convening juntas and communicating with members are things the Ley de Propiedad Horizontal expects it to do.

If you write to us through this website

Your name, email address, optionally a telephone number, and whatever you tell us about your community. We use it to answer you and to keep track of the conversation. The lawful basis is our legitimate interest in responding to an enquiry you chose to send us.

What we deliberately do not hold

No passwords — there are none in this product. No IP addresses or browser details in the history log, which records what changed in the community rather than watching the people in it. No payment details: invoicing is handled outside the platform. No advertising, no tracking, and no profiling of any kind.

Who else sees it

Other members of your own community see what you have chosen to share with them — you control that under “My details”. Nobody outside your community sees anything: a community's portal is closed, and there is no public page anywhere on it.

We use two companies to run the service. They act only on our instructions, and neither may use your data for anything of their own:

Company What for Where
DigitalOcean, LLC Hosting: the application, the database and uploaded files. Frankfurt, Germany (EU)
Postmark (ActiveCampaign, LLC) Sending email: sign-in links, invitations, notices of meetings and notifications. United States
EU Standard Contractual Clauses together with the UK International Data Transfer Addendum, under the provider's data processing agreement.

Where your data goes

Everything the platform stores — the register, the documents, the whole database — is held on servers in the European Union. Two things cross a border from there, and each has a legal basis for doing so:

Route Why What makes it lawful
Spain → European UnionEverything the platform stores is held on servers in Frankfurt.No transfer: the data stays within the European Economic Area.
European Union → United KingdomWe are established in the United Kingdom, so administering the service means reaching the data from there.The European Commission's adequacy decision for the United Kingdom.
→ United StatesEmail delivery only: sign-in links, invitations, notices of meetings and notifications.EU Standard Contractual Clauses together with the UK International Data Transfer Addendum.

We do not sell personal data, and we never will. We would disclose it to a public authority only where the law requires it.

How long we keep it

WhatHow long
Your member account and profile For as long as you are a member of a community, and until you ask us to erase it.
Sign-in links and invitations Thirty minutes and forty-eight hours respectively. The record that a link was used is deleted once the link could not have worked.
A community's records — minutes, tickets, agenda items, documents For as long as the community uses the platform. If it leaves, we send the committee a copy and delete everything thirty days after closure.
The history log of who changed what For as long as the community uses the platform. It never records IP addresses, and a member who erases their data is shown in it only as a former member.
Enquiries from the website Two years from the last contact, unless the enquiry becomes a customer relationship.
Queued notification emails Ninety days after they are sent. They hold the first line of what happened — a ticket's title, a notice's — and nothing needs that twice.
Your sign-in session 30 days from signing in, and the row recording it is deleted once it has expired. Signing out ends it at once. It holds which account is signed in and nothing else — no IP address.
Database backups 60 days. A backup cannot be edited, so a member erased today may still appear in a copy taken yesterday; those copies age out within that period and are never used to reinstate erased data.

Your rights

You can ask us — or your community — to:

Two of these you can exercise yourself, without asking anybody. “My details” lets you correct your own information and decide who sees each field, and the red box at the foot of that page erases everything of yours from the platform, permanently and immediately.

One thing erasure does not do: it does not delete what you contributed to the community. A ticket you raised, a proposal you made, an acta you uploaded — those are the community's records, and several of them it is obliged to keep. Your name comes off them and they are shown as written by “a former member”. Your own notices on the board are deleted outright, because an advertisement nobody can answer is worse than none.

For anything else, write to privacy@sys82.com. We answer within one month.

If you are not satisfied with our answer, you may complain to a data protection authority. Either of these will take your complaint:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid
if you live in Spain
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
the authority for the country we are established in

Cookies

These, and nothing else. Two are needed for the portal to work at all; the other two only appear once you have pressed the control that sets them, and they remember what you chose.

Name What it does How long it lasts Why it does not ask
sessionid Keeps you signed in after you follow your link. 30 days The portal cannot work without it.
csrftoken Stops another site submitting a form as you. A year The portal cannot work without it.
django_language Remembers the language you picked. Until you close your browser Only set when you press the control that changes it.
scheme Remembers whether you chose light or dark on this device. A year Only set when you press the control that changes it.

None of them needs your consent, so there is no banner to click away: consent is for cookies that track you, and there are none here. What the law does require is that you are told, which is what this table is.

There is no analytics, no advertising and no third-party script of any kind on this site.

Keeping it safe

The connection is encrypted end to end. Documents are stored privately and served only to members of the community they belong to, over links that expire. Every photograph you upload — your own picture, something on the notice board, a photograph attached to a ticket — is stripped of the location your camera recorded in it, before anybody else can read it. There are no passwords to steal, and a sign-in link works once and then never again.

Changes

If we change anything that matters here, we will raise the version number at the top and tell members through the portal before it takes effect.


© 2026 Vecinto

Privacy Terms Data processing agreement