Your community stays private.

1. Who is responsible

ZonaVecina is provided by Pabloku. For privacy questions, rights requests, or account deletion, email [email protected].

2. Information we process

• Account and profile: sign-in email, authentication identifier, full name, selected avatar, and account status.
• Community membership: community, role, housing or unit label, invitation and membership status.
• Community operations: facility settings, schedules, booking rules, reservations, cancellations, and the identity needed to show bookings to authorized members.
• Media: community or facility images uploaded by administrators and the metadata needed to protect and deliver them.
• Preferences and messages: notification choices, transactional email state, and support or privacy correspondence.
• Technical and security data: session information, device or browser data sent through standard network requests, and limited service logs used to operate and protect ZonaVecina.
• Product usage and errors: a pseudonymous account identifier, community identifier, role, screens and completed actions, closed result codes, platform, app version, language, environment, demo mode, and sanitized unexpected-error diagnostics.

We do not ask for passwords, verification codes, payment information, or precise location in support or deletion requests.

3. Why we use it

• To create and secure accounts and confirm email addresses.
• To show the correct private community, facilities, members, and availability.
• To create, prevent conflicts between, display, remind you about, and cancel bookings.
• To let administrators configure communities, facilities, invitations, housing, and media.
• To send service emails, answer support requests, prevent abuse, diagnose failures, and comply with applicable obligations.

Depending on the context, we rely on providing the service you request, our legitimate interests in running and securing it, consent where required, and applicable legal obligations.

4. Service providers

We use carefully selected providers to operate ZonaVecina:

• Supabase: authentication, database, private file storage, and backend functions.
• Google Sign-In: if you choose it, we receive your name, profile image, and email address. We use them only to authenticate you, create or complete your ZonaVecina profile, and identify you within your community. We do not use this sign-in data to personalize ads.
• Google AdSense: advertising delivery and Google's certified consent-management platform (CMP) on the web app.
• Resend: account and booking-related transactional email.
• Cloudflare: website delivery, DNS, and inbound email routing.
• PostHog Cloud EU: product analytics and unexpected-error tracking, configured without session replay, automatic click capture, or IP-address capture.

These providers process limited data on our instructions or under their own platform terms. Data may be processed outside your country with the safeguards required by applicable law.

5. Visibility and sharing

Profile, membership, housing, facility, and reservation information is shared only with authorized members of the relevant community as needed for the service. Community administrators receive additional management access. Public invitation pages do not reveal private community details before access is validated.

We may disclose information when required by law, to protect users or the service, or as part of a business reorganization with appropriate safeguards. We do not sell personal data.

6. Website storage, analytics, and ads

The web app uses necessary browser storage to keep your authenticated session, pending invitation, and language context. The public legal pages do not require JavaScript or marketing cookies.

In production, ZonaVecina uses PostHog Cloud EU to understand authenticated daily use, product flows, feature adoption, and reliability. This processing is part of operating and improving the service and is not controlled by the advertising-consent setting. ZonaVecina does not offer an in-product analytics opt-out in this version.

We identify authenticated activity using the Supabase account UUID and group it using the community UUID. We do not send email addresses, names, housing labels, invitation codes, community or facility names, typed text, tokens, request bodies, complete URLs, or arbitrary exception messages to PostHog. Session replay and automatic click capture are disabled.

The web app also uses Google AdSense to display advertising. In the European Economic Area, the United Kingdom, and Switzerland, Google's certified consent-management platform asks whether you allow the processing needed for personalized advertising.

If you do not consent, you can continue using ZonaVecina's core service. Depending on availability and the applicable rules, Google may show limited or non-personalized ads, or no ad. Once Google's consent message is active, you can change or withdraw your choice through the privacy and cookie settings control that Google displays on the website.

7. Retention and deletion

We keep account and community data while your account or relevant community relationship is active and for as long as needed to operate, secure, and document the service. When data is no longer required, it is deleted or anonymized.

Shared booking or administration records may need to be anonymized rather than immediately removed so other members' records remain consistent. Product-analytics events and sanitized error records are retained for up to 12 months unless a shorter period is required; provider backups and security logs expire under their own limited schedules.

Read the account-deletion instructions to request deletion.

8. Your choices and rights

Subject to applicable law, you can ask to access, correct, delete, restrict, or obtain a copy of your personal data, and object to certain uses. You can change notification preferences in the app, review advertising consent through Google's control available on the website, and sign out at any time.

Email [email protected]. We may need to verify that the request belongs to you. You can also contact the competent data-protection authority.

9. Security, children, and changes

We use access controls, private storage, encrypted transport, and tenant-level authorization to protect information. No online service can guarantee absolute security, so please report suspected misuse to [email protected].

ZonaVecina accounts are intended for adults or people otherwise authorized to participate in their residential community. The service is not directed to children under 16.

We may update this policy when the service or legal requirements change. The latest version and update date will remain available at this URL.