Privacy Policy

Who we are and why we use data

Metro Uno provides property management tools for agencies, owners and renters. We process data to enable accounts, manage properties and rentals, record operations, share documents according to permissions, answer enquiries and secure the service. For data an agency supplies in managing its business, we act on its instructions; the agency is responsible for having a lawful basis and informing the people involved.

Data recorded

Accounts: name, email, phone and profile details where supplied, language, roles and memberships, sessions and access verification. Email sign-in uses temporary codes or links, without passwords. External sign-in provider data may also be present if you choose that option.

Management: agency and team information; properties, addresses, photos and listings; contacts, enquiries, visits and searches; rentals, contracts, parties and terms; tasks and communications. Payment, balance, expense and statement records may include amounts, currencies, dates, receipts and bank account details supplied by the parties. Metro Uno only records these facts: it never holds or moves third-party money.

Files: uploaded contracts, receipts, documents and media, with their names, types, authors and permissions. We also record activity events, errors and technical data needed for security and operation, such as IP addresses and request information.

Providers and infrastructure

Cloudflare hosts the application on Workers and stores documents and files in R2. The database is Neon Postgres in AWS sa-east-1 (São Paulo, Brazil). Sign-in and service emails are sent through Amazon SES in sa-east-1. These providers process the data necessary for their functions; the infrastructure and other providers may involve processing outside Argentina.

When assisted contract reading is used, the browser extracts the PDF text and sends it to the server for analysis through OpenRouter, using typesafe/jev-1.13 by default. The text may contain the parties’ personal data. Only if OCR is enabled may the document be sent to the provider for text recognition. Reading is optional, requires review of its results and does not replace legal advice. An attached file is retained under document permissions; AI processing is separate from that storage.

WhatsApp connected by the agency

If an agency connects its number using Meta WhatsApp Cloud API and Embedded Signup, we process account and number identifiers, protected connection credentials, contacts, incoming and outgoing messages, delivery statuses and media references. Incoming media are retrieved from Meta under access controls; they are not automatically archived as R2 documents.

With Coexistence, the number can continue to be used in WhatsApp Business and we receive echoes of messages sent from the phone and history shared during synchronization. Contact synchronization events may be received, but do not imply a complete address book import. The agency must have authorization to contact people. Meta processes the connection and communications under its own terms.

Cookies, storage and access

The metrouno_session cookie maintains the product session on app.metrouno.com; it is restricted to server access. metrouno_locale remembers the language. The browser also stores local preferences and drafts for workflows that need them. You can clear these data in your browser; signing out or removing the session cookie requires signing in again.

The application does not include advertising analytics tools or Cloudflare Web Analytics. Optional WhatsApp connection loads the Facebook SDK and opens Meta interfaces, subject to Meta’s practices. Private data are restricted by role, agency, property and document permissions; a public listing shows only information published for that purpose.

Retention and limits on deletion

We retain data needed to provide the service and meet legal obligations. Deleting an account does not automatically erase an agency’s financial or contractual history: contracts, recorded payments, receipts and evidence required by law or to protect third-party rights remain under restricted access for the applicable period. This exception does not justify keeping unnecessary data.

Backups, where present, may retain information until safely replaced; any restoration must respect completed deletions. We will explain specific restrictions and periods when responding to your request. We do not promise to erase records that must legally be kept.

Your rights in Argentina

Processing is governed by Argentina’s Personal Data Protection Law 25,326. You can request access, correction, updating or deletion by emailing admin@metrouno.com. We will verify your identity using the minimum information needed. Access is free every six months, or sooner where there is a legitimate interest.

The legal response period for access is ten calendar days; for correction, updating or deletion, five working days from receipt of the request. If information must be retained, we will explain which data, why and the applicable period. The Agencia de Acceso a la Información Pública (AAIP) is the supervisory authority and receives complaints.