Communfy

Privacy Policy

This Privacy Policy explains how Quorien Shift LLC (“Communfy”, “we”, “us”), a limited liability company registered in Wyoming, USA with its registered office at 30 N Gould St, STE R, Sheridan, WY 82801, USA, collects and processes personal data through the Communfy platform (the “Service”). We act as a data controller for account, subscription and billing data, and as a data processor for the resident, building and financial records that management companies and building committees enter into the Service. Customers can request a Data Processing Agreement (DPA) at privacy@communfy.com.

1. Data we collect

  • Account data — name, email address, phone number, role, preferred language, hashed password, and sign-in timestamps.
  • Building & financial data — buildings, units, ownership shares, budgets, invoices, payments, expenses, maintenance requests and uploaded documents, entered by management-company or committee users.
  • Correspondence — emails, notes and attachments exchanged through the Service between managers, committee members, owners and third parties such as contractors.
  • Payment data — when an owner pays online, card details are collected and processed directly by Stripe; we receive only a payment reference, amount, status and the last four digits of the instrument. Subscription card details are handled by Lemon Squeezy and never stored by us.
  • Technical data — standard server logs (IP address, request path, timestamp) retained for security and debugging.
  • Support data — messages you send us when asking for help.

2. How we use it

To provide and secure the Service, authenticate users, generate and deliver invoices and reports, process owner payments through Stripe and subscriptions through Lemon Squeezy, send service-related notifications (announcements, request updates, reminders), provide support, comply with legal and tax obligations, and detect or prevent fraud and abuse.

3. Legal bases

For users in the EEA and UK we rely on: performance of a contract (providing the Service to account holders); legitimate interests (securing the platform, improving the product, communicating about the Service); compliance with legal obligations (accounting and tax records); and consent for optional communications, which you can withdraw at any time. Where a management company or committee is the controller, its own lawful basis governs the resident data it enters.

4. Sharing

We share data with sub-processors who help run the Service: our hosting and database providers, blob storage for documents, Stripe for owner payments, Link, LLC (Lemon Squeezy, our merchant of record) for subscription billing, email and SMS delivery providers for notifications, and network providers (CDN, DNS, firewall). We do not sell or rent personal data. We may disclose data where required by law.

5. International transfers

Our infrastructure is hosted in the European Union. Where a sub-processor processes data outside the EEA, the transfer is covered by an adequacy decision or Standard Contractual Clauses.

6. Retention

Account data is kept for the life of the account. After an account is closed, personal data is erased or anonymised from our production databases within 30 days. Financial records (invoices, payments, ledgers) may be archived for longer where tax or accounting law requires it. Server logs are kept for a limited period. On a management company’s or committee’s instruction we will delete or return the data it controls.

7. Your rights

Subject to applicable law you may request access, rectification, erasure, restriction or portability of your data, object to processing, and withdraw consent at any time. Residents should contact their management company or committee (the controller) first; requests to Communfy can be sent to privacy@communfy.com. You also have the right to lodge a complaint with a data protection supervisory authority — in the EU/EEA, usually the one where you live (see the list at edpb.europa.eu).

8. Cookies

We use only functional cookies: a strictly-necessary session cookie that keeps you signed in and a language-preference cookie. Some interface preferences (such as collapsed menu sections) are stored in your browser’s local storage. We do not use advertising or tracking cookies.

9. Security

Data is encrypted in transit (TLS) and at rest by our hosting providers. Passwords are stored hashed with bcrypt. Sessions use signed, HTTP-only, secure cookies. Access to production data is restricted and logged. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

10. Changes

We will notify you by email or in the Service at least 14 days before a material change to this policy takes effect.

11. Contact

Quorien Shift LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA. Email: privacy@communfy.com.