Privacy Policy

1. What data we collect

We collect and store the following types of data:

• Account data: name, email address and password (stored encrypted), and preferred language.
• Organization data: the organization's name and the people who have access to it.
• Data you upload about your clients, members or unit owners: name, email address, and the invoicing or dues information you record (amounts, due dates, payment status).
• Ordinary technical usage data common to any web or mobile app (for example, server access logs), generated by the normal operation of the infrastructure hosting Cobrivo.

2. What we use this data for

We use the data above to: provide the service (organizing your clients, members, invoices and dues), send the payment reminders you configure on your behalf, manage your account's access and security, process billing for your own Cobrivo subscription, and provide support when you request it.

We do not use your clients', members' or partners' data for our own advertising purposes, and we do not sell it or hand it to third parties for purposes other than providing you the service.

3. Legal basis for processing

We process your account data to perform the contract you accept by using Cobrivo. Your clients', members' or owners' data is processed on your behalf, with you as the controller of that data, as explained in the Terms and Conditions.

The specific legal basis that applies may vary by jurisdiction; the laws of the Republic of Colombia. Any dispute will be submitted to the competent courts of Medellín, Antioquia, without prejudice to any mandatory consumer-protection rules that apply.

4. Who we share data with

We only share data with the technical providers needed to operate Cobrivo:

• A transactional email provider, to deliver reminders and notifications (for example, Resend or an equivalent provider).
• Paddle, acting as Merchant of Record and processing the data needed to manage sales, payments, taxes, invoices and refunds for web subscriptions; and RevenueCat for mobile in-app purchases.
• Infrastructure and hosting providers where the application runs and the database is stored.

5. Cookies and technical storage

The Cobrivo website (cobrivo.com) does not use tracking cookies, advertising pixels, or any analytics tools. The only browser storage it uses is local storage (localStorage), to remember your preferred language and whether you've visited the site before. It is never used for advertising or cross-site tracking. We do not show a cookie banner because there are no non-essential cookies to consent to on the website.

The Cobrivo application (app.cobrivo.com, web and mobile) uses a secure access token to keep you signed in. It is stored in the operating system's secure keychain or keystore on mobile and desktop, or in the browser's local storage on the web build, rather than in a tracking cookie. The authentication engine we use internally may generate a session cookie as part of its own technical operation; our applications do not read it or rely on it to function. We also store your preferred language locally for the app.

We do not use cookies or local storage for advertising or to build cross-site tracking profiles. If we ever add analytics, advertising, or any non-essential cookie, we will update this section to explain exactly what data is collected before turning it on.

6. Data retention

We retain your data and your organizations' data for as long as your account remains active. We run periodic backups; after you request account deletion, your data may persist for a limited period in those backups until overwritten by the normal rotation cycle.

7. Security

Each organization can only see its own clients, members and invoices, with this separation enforced at the database level, not just in the interface. We apply reasonable technical measures to protect your information, without this implying certification to any specific security standard we have not formally verified.

8. Your rights

You can access, export, correct or delete your account's information directly from the app at any time. See the next section. Depending on your jurisdiction, you may have additional rights over your personal data; to exercise them or contact us, write to privacy@cobrivo.com.

9. Exporting and deleting your account

From within the app you can export a file with your account's and organizations' data, and request deletion of your account by confirming your password. If you co-own an organization with someone else, you may need to resolve that first before deletion can complete.

10. Children

Cobrivo is not directed at children and is not designed to intentionally collect data from them.

11. Changes to this Policy

We may update this Privacy Policy to reflect changes to the service or to legal requirements. We will post the last-updated date on this same page.

12. Contact

For questions about this Privacy Policy, you can write to privacy@cobrivo.com.