Privacy
Your information.
This policy explains how Rangol Services ("Rangol", "we"), RFC RSE110602QY8, with address at San José del Cabo, Los Cabos, Baja California Sur, México, handles personal information on rangol.com and in the Rangol Maintenance Desk. It is our privacy notice (aviso de privacidad) under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
Effective date: October 26, 2026. Last updated: 26 October 2026.
Who this covers
- Travelers and visitors who use rangol.com, our concierge chat and inquiry forms.
- Property managers and their staff who subscribe to the Rangol Maintenance Desk ("customers").
- Tenants, guests, owners, residents, vendors and contractors who message the Maintenance Desk about a property managed by one of our customers.
Part 1: Traveler and concierge website
Planning your stay
Submitted inquiries, contact details, quotes and request status are saved so Rangol can respond and you can follow progress. Your signed-in account identifies your requests and favorites; sign-in is handled through Sign in to dashboard, which applies its own privacy policy. Photo selections are saved for the site owner. Concierge conversations remain in page memory until a request is submitted; refreshing clears the chat. Notification delivery may involve the email service connected by Rangol (Hostinger email (the mailbox service for jr@rangol.com)). Contact jr@rangol.com to request deletion of your saved information.
Reservations and external websites
Reservations and messages to residence hosts are handled on the linked listing websites. Those providers apply their own privacy policies. Rangol does not process payments or confirm availability on their behalf.
Property information
Property information is summarized from publicly available listings. Confirm current amenities, policies and rates with the host before booking. A listing link does not imply a management agreement or affiliation with Airbnb.
Website operation
Rangol records aggregate page views and actions such as WhatsApp, listing and inquiry clicks to understand which services are useful. These counts do not include form entries, chat messages or advertising profiles. The hosting provider (ChatGPT Sites (OpenAI), which serves the site through Cloudflare) may process standard access logs and sign-in information needed to provide access to the website.
Part 2: Rangol Maintenance Desk
What the Maintenance Desk is
The Rangol Maintenance Desk is a maintenance ticketing service for property managers. Tenants, guests, owners and vendors report and follow up on maintenance requests mainly by WhatsApp. Property managers handle those requests in a web dashboard, with help from an AI assistant. Where a property manager enables them, Telegram or a web chat link may also be used.
Who is responsible for your data
- If you message a property's maintenance line (as a tenant, guest, owner, resident, vendor or contractor), the property manager who runs that property is responsible for your data (the responsable, or controller). Rangol processes it on the property manager's behalf and under their instructions (as encargado, or processor). Questions about why your data is collected or how it is used should go first to that property manager. We will help them answer, and you can also contact us.
- For our own customer accounts, billing and the rangol.com website, Rangol is the responsable (controller).
Information we collect in the Maintenance Desk
From messages (WhatsApp and, where enabled, Telegram or web chat):
- Phone number, WhatsApp profile name and the name you give us
- Message text, voice-note transcripts if enabled, photos and documents you send
- Message metadata such as time sent, delivery and read status
- Your opt-in or opt-out choices for receiving messages
Ticket and property details:
- Ticket description, category, priority, status, notes, approvals and costs
- Property, unit, tower or building, and access details such as where a key or lockbox is kept
- Photos of the issue and of completed work, and receipts or invoices for the job
Vendors and contractors:
- Name, phone number, trade and availability
- Vendor ID (identification document or number) and, for electricians, CFE certification details, when the property manager asks for them
Property manager accounts:
- Name, email, phone, company, role and sign-in details of authorized users
- Billing contact, tax details for invoices (CFDI), subscription and payment records
- Dashboard activity and audit logs needed for security
We remove embedded location data (EXIF/GPS) from photos when we store them. We do not ask for sensitive personal data (such as health, religious or biometric data). Please do not send it, or send lockbox or door codes, by message.
How messages reach us: WhatsApp and Meta
The Maintenance Desk uses the WhatsApp Business Platform, provided by Meta (WhatsApp LLC and its affiliates). Rangol owns the WhatsApp Business account and phone number used by the Desk. When you message that number, Meta transmits the message to us and acts as our service provider for delivery; Meta may temporarily store message content to deliver it. Your use of WhatsApp itself is governed by WhatsApp's own Terms of Service and Privacy Policy (whatsapp.com/legal), which Rangol does not control. Telegram, where enabled, applies its own privacy policy in the same way.
What we use the information for
Primary purposes (needed to provide the service):
- Receive, log, route and track maintenance requests
- Send confirmations, updates, approvals and reminders to the people involved in a ticket
- Coordinate vendors and contractors, including sharing the job details they need to do the work
- Let property managers review history, photos, costs and reports
- Operate customer accounts, billing and CFDI invoicing
- Keep the service secure, prevent abuse, and meet legal and tax obligations
Secondary purposes (you may object; see "Your rights"):
- Improve the service using aggregated or de-identified usage statistics
- Send customers product updates about the Maintenance Desk
We do not use Maintenance Desk data for advertising and we do not sell personal data.
AI assistant
The Maintenance Desk includes an AI assistant that helps property managers by drafting replies, translating between English and Spanish, summarizing conversations, suggesting which ticket or contact a message belongs to, reading receipts into draft entries, and removing owner or resident details before messages go to vendors. A property manager reviews and confirms AI drafts before they are saved, linked or sent, and can take over any conversation. The AI does not approve costs, change status or consent, or make decisions with legal effects about you.
To do this, relevant message text, ticket details and images are sent to a third-party AI provider (OpenAI) that acts as our processor. We choose providers whose terms do not allow them to use this data to train their models, and we send only what a task needs. AI output can be wrong; property managers remain responsible for what they send.
Who we share information with
We share personal data only as needed to provide the service:
- With the property manager who runs the property you message about, and their authorized staff.
- With vendors and contractors assigned to a job, limited to what they need (for example, the unit and issue, not the owner's identity or costs).
- With our processors (service providers): Meta (WhatsApp Business Platform); Telegram where enabled; our hosting provider (Render) and storage and network provider (Cloudflare); OpenAI; Hostinger email (the mailbox service for jr@rangol.com); and our accounting and invoicing providers. They may use the data only to provide their services to us.
- When required by law, for example to respond to a valid order from a competent authority, or to protect the rights, safety or property of people or of Rangol.
- In a business transfer, such as a merger or sale, subject to this policy.
We do not sell or rent personal data.
International transfers
Some of our processors store or process data outside Mexico, mainly in the United States and possibly other countries where they operate (for example Meta, Render, Cloudflare and OpenAI). These are transfers to processors needed to provide the service and do not require your separate consent under the LFPDPPP. We rely on their contractual commitments to protect the data in line with this policy.
How long we keep data
These are our default retention periods (proposed, TO CONFIRM). A property manager may ask us to delete their data sooner, and we keep data longer only when the law requires it or to resolve a dispute.
| Data | Default retention (TO CONFIRM) |
|---|---|
| Traveler inquiries, quotes and request status | 24 months after your last activity |
| Traveler sign-in account and favorites | Until you ask us to delete it, or 24 months of inactivity |
| Maintenance tickets, messages, photos and ticket details | While the customer's subscription is active; closed tickets deleted or anonymized 12 months after closing (longer if linked to an open warranty claim) |
| Messages from unknown numbers not linked to a ticket | 30 days |
| Vendor ID and CFE certification details | While the vendor is active with the property manager, plus 12 months |
| AI drafts and AI processing logs | 30 days (a draft that is sent becomes part of the ticket) |
| Opt-in and opt-out records | While the contact is active, plus 12 months; opt-outs are kept so we can honor them |
| Customer account and billing contacts | Subscription term plus 12 months |
| Invoices (CFDI) and tax records | 5 years, as required by Mexican tax law |
| Security and server logs | 90 days |
| Backups | Rolling 30 days |
| After a customer cancels | 30 days to export, then deletion within 90 days, except data we must keep by law |
Security
We use administrative, technical and physical measures appropriate to the data, including encrypted connections, private storage for photos and documents, access limited by role and by property manager, separation of each customer's data, audit logs, and backups. No system is completely secure; if a breach significantly affects your rights, we will notify affected people and customers as the law requires.
Rights and choices (both services)
Your rights (ARCO)
Under the LFPDPPP you have the right to:
- Access the personal data we hold about you and how we use it
- Rectify it if it is inaccurate or incomplete
- Cancel it (ask us to delete it) when it is no longer needed or was processed improperly
- Oppose its use for specific purposes, including the secondary purposes above
You may also revoke your consent and ask us to limit how we use or disclose your data.
How to exercise them: email jr@rangol.com with the subject "ARCO request". Include your name, a contact for our reply, the phone number or account involved, a document proving your identity (or that of your legal representative), and a clear description of what you are asking for. We will reply within 20 business days and, if your request is granted, carry it out within 15 business days after our reply (deadlines TO CONFIRM under current law). If your request concerns a property managed by one of our customers, we will pass it to that property manager and support their response. If you are not satisfied with our answer, you may contact the Mexican data protection authority.
To stop receiving messages from the Maintenance Desk, reply STOP (or ALTO) to the WhatsApp number or tell the property manager.
Deleting your information
Website: email jr@rangol.com to delete your inquiries, account and favorites.
Maintenance Desk, including WhatsApp message data: ask the property manager or email jr@rangol.com with the phone number involved. We will delete or anonymize the messages, photos and contact details linked to that number in the Maintenance Desk, unless the property manager or Rangol must keep a record (for example, an invoice or an open dispute). Deleting data from Rangol does not delete messages stored in your own WhatsApp app or on the other person's phone, and Meta handles its own copies under its privacy policy.
Cookies and analytics
rangol.com uses only the cookies and local storage needed to run the site, keep you signed in and protect it from abuse, plus the aggregate counts described under "Website operation". The Maintenance Desk dashboard uses essential session cookies to keep authorized users signed in. We do not use advertising cookies or build advertising profiles. Our network and hosting providers may set security cookies. You can block cookies in your browser, but sign-in may stop working.
Children
Our services are meant for adults. We do not knowingly collect data from anyone under 18. Property managers should not register minors as contacts. If you believe a minor's data was sent to us, contact jr@rangol.com and we will delete it.
Changes to this policy
We may update this policy when our services or the law change. We will post the new version on this page with a new date and, for material changes, notify Maintenance Desk customers by email or in the dashboard before the change applies.
Aviso de privacidad (short note)
Rangol Services, with address at San José del Cabo, Los Cabos, Baja California Sur, México, is responsible for the personal data described in this notice for its own customers and website users, and processes Maintenance Desk message data as encargado on behalf of property managers. We use your data to respond to inquiries, run maintenance tickets and provide our services, and, secondarily, for aggregated service improvement and product updates, which you may refuse by emailing jr@rangol.com. We share data with the processors listed above and do not sell it. You may exercise your ARCO rights at jr@rangol.com. This full notice is available at rangol.com/privacy. A Mexican Spanish version will be published.
Contact
Rangol Services · RFC RSE110602QY8 · San José del Cabo, Los Cabos, Baja California Sur, México
Privacy questions and requests: jr@rangol.com