01Who handles your information
J.R.SOSA & CO. LLC operates AlquilaOS. Its mailing address is 2125 Biscayne Blvd, Ste 204 #24427, Miami, Florida 33137 US. We act as a controller for information needed for our accounts, subscriptions, security, support, and business obligations. For property, tenant, and vendor information a customer manages, we generally act under that customer’s instructions; the customer determines its management purposes and retains its own privacy duties.
This policy covers AlquilaOS websites, applications, and services. Landlord websites, Stripe, and other third parties have their own notices. Another brand in the same group, including FacturaOS, does not automatically receive access to your account or portfolio because it belongs to the same company.
02Information we receive
We receive information you or authorized users provide: name, email, phone, organization, addresses, units, rental relationships, amounts, dates, terms, documents, photos, maintenance requests, vendors, comments, and support communications. Landlords may enter tenant information before tenants access the portal.
Systems may generate account and session identifiers, IP addresses, browser and device details, language, timestamps, access events, error logs, and activity needed for security and operation. We keep legal-version acceptance records, including account identity, language, role, and time, to document the agreement presented. Where a screen uses Cloudflare Turnstile, that provider processes technical browser and interaction signals to distinguish legitimate traffic from abusive automation. For subscriptions and payments, we receive references, status, amounts, and limited payment-method or transaction details. Stripe collects full card details through its forms; do not email us full card numbers, security codes, passwords, or identity documents or put them in free-text fields.
03How we use it
We use information to authenticate users, enforce permissions, organize records, share authorized information, handle maintenance, provide document and payment functions, manage subscriptions, send operational communications, answer requests, detect abuse, and maintain the service. We may also retain evidence to meet legal duties, resolve disputes, and protect rights.
Where law requires a legal basis, we rely as appropriate on contract performance, legal obligations, proportionate legitimate interests such as security and operation, or consent when needed. We do not use private customer documents to train general-purpose artificial intelligence models. Public calculators run in your browser and do not send entered amounts to AlquilaOS.
04Who receives information
We share information with authorized account users and with tenants or vendors according to available functions and permissions. Landlords control which rental-relationship information they enable; verify recipients before sharing. Authorized staff and technical providers may access information as necessary for service delivery, support, security, or compliance.
Key providers are described in Subprocessors: Supabase for data, authentication, and storage; Vercel for hosting; Resend for email where used; Stripe for subscriptions and payments; and Cloudflare Turnstile for abuse prevention on enabled screens. Stripe may act as an independent controller for verification, fraud, and financial obligations. We may disclose information when required by law, to protect rights, or in a business transaction subject to confidentiality protections and this policy. We do not sell personal information or share it for cross-context behavioral advertising.
05Retention and security
We retain information for as long as reasonably needed for the service, account relationship, and described purposes. Duration depends on record type, customer instructions, activity, legal requirements, disputes, and fraud prevention. Canceling a subscription or revoking tenant access does not immediately erase every record. Backups may remain until normal rotation, and records under a legal retention duty remain restricted to that purpose.
We use access controls and technical and organizational measures appropriate to risk. No system or transmission is completely secure. For a confirmed incident affecting personal information, we will assess its scope and notify customers, individuals, and authorities as applicable law requires. We do not promise a certification, a universal erasure deadline, or complete file recovery.
06Your choices and rights
Email soporte@alquilaos.com with the subject “Privacy” to request access, correction, a copy, or deletion of your information. Depending on applicable law, you may also request restriction, object to certain uses, withdraw consent, or appeal a decision. We will verify identity proportionately and respond within applicable deadlines. Do not send unnecessary sensitive information to start a request.
When a record belongs to a landlord’s account, we may refer the request to that controller and help them respond. We will evaluate requests before deleting records another person has a legal duty or legitimate right to retain. Losing portal access does not end your lease or right to bring a claim. You may contact a competent authority and will not face discrimination for exercising protected rights.
07Location, minors, and changes
AlquilaOS primarily serves Puerto Rico and the United States. Information may be processed in the United States and other locations where providers operate. Where transfers require specific safeguards, we will use an appropriate legal mechanism; we do not represent that all data stays in Puerto Rico.
The service is not directed to minors who cannot legally contract. We do not knowingly solicit children’s accounts. Contact us if you identify a minor’s information provided without authority. We will publish changes with an updated date and give reasonable notice of material changes, requesting consent where appropriate.