Last Updated: May 30, 2026 · Version v1.1
Zorex Holdings, LLC (“Zorex,” “we,” “us,” or “our”) respects your privacy and is committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, retain, and protect information when you access or use the Zorex platform and related services (collectively, the “Services”).
By using the Services, you acknowledge that you have read and understand this Privacy Policy. Also see our Terms of Service.
This Privacy Policy applies to information collected through:
This Privacy Policy does not apply to third-party websites, applications, or services that may be linked from or integrated with the Services.
Zorex provides software services to homeowners associations, condominium associations, community associations, property managers, and similar organizations (“Subscribers”).
For most information submitted through the Services, the Subscriber determines why and how personal information is collected and used; Zorex processes such information on behalf of the Subscriber solely to provide the Services. Accordingly, Subscribers generally act as the party responsible for determining the purposes and means of processing community-related information, while Zorex generally acts as a service provider or processor performing services on behalf of Subscribers.
The Services may involve personal information relating to homeowners, residents, tenants, board members, committee members, vendors, contractors, property managers, and other authorized community participants. Questions regarding HOA records, community decisions, invoices, assessments, governing documents, collections, rule enforcement, or other community-specific matters may need to be directed to the applicable Subscriber.
Account Information
Resident and Household Information
Community Administration Records
Communications
Email Processing Information
Service Requests and Workflows
Documents and Files
Vendor and Contractor Information
Payment Information
Collections and Delinquency Information
Imported Community Data
Device and Usage Information
Engagement and Activation Information
Diagnostic Information
We use cookies and similar technologies to operate and improve the Services:
The Services do not currently respond to browser-based “Do Not Track” signals. Users may modify cookie preferences through browser settings; disabling certain cookies may affect platform functionality.
We use information to:
The Services may provide automated recommendations, workflow actions, classifications, reminders, summaries, notifications, reporting tools, analytics, artificial intelligence features, machine-learning functionality, or similar automated functionality.
Information submitted through the Services may be processed by automated systems for purposes including classification, routing, prioritization, summarization, recommendation generation, notification delivery, workflow automation, operational reporting, community management insights, and platform analytics.
Automated outputs are intended to support operational efficiency and do not replace human review, legal advice, financial advice, professional judgment, or community governance decisions.
We do not sell personal information and have not sold personal information during the preceding twelve (12) months. We do not share personal information for cross-context behavioral advertising.
Information may be accessible to the Subscriber administering a community and to Authorized Users granted access by that Subscriber.
We may disclose information to trusted providers that assist us in operating the Services, including providers of cloud infrastructure, database hosting, data storage, email delivery, customer support, analytics, security monitoring, payment processing, error monitoring, and authentication and access management.
A list of service provider categories or subprocessors may be made available upon request.
Where a Subscriber uses vendor or contractor workflows, the Services may provide token-scoped or limited-access links to vendors or contractors. Such access is intended to provide the minimum information reasonably necessary for the vendor or contractor to perform the requested work. Activity associated with such access may be logged and retained.
We may disclose information to comply with law, to respond to lawful requests, to enforce agreements, to protect rights, safety, or security, or to investigate fraud or abuse.
Information may be disclosed or transferred in connection with mergers, acquisitions, financing transactions, reorganizations, asset sales, or bankruptcy proceedings. Any successor entity will be required to honor this Privacy Policy or provide notice of material changes as required by applicable law.
Subscribers determine which individuals are granted access to the Services. Subscribers may invite residents, modify permissions, disable accounts, remove access, and control available community records. Residents should understand that certain information visible within the Services is controlled by the applicable Subscriber rather than Zorex.
Upon termination of a Subscriber relationship, resident access may be suspended or terminated and resident accounts associated solely with that Subscriber may be deactivated. Associated data will remain subject to the retention provisions described in this Privacy Policy.
Community records maintained by a Subscriber may remain subject to inspection, disclosure, retention, or access obligations imposed by applicable homeowners association, condominium, nonprofit corporation, corporate governance, or similar laws. Zorex is not responsible for determining whether a particular record must be disclosed, retained, produced, or made available to residents, homeowners, regulators, or other parties.
We retain information for as long as reasonably necessary to provide the Services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.
Following termination of a Subscriber account, Zorex generally retains Subscriber Data for up to ninety (90) days to facilitate transition and export activities. After the retention period expires, information may be deleted, anonymized, aggregated, or otherwise retained only as required by law or legitimate business necessity.
Notwithstanding the foregoing, Zorex may retain information as necessary to comply with legal obligations, resolve disputes, enforce agreements, investigate fraud, maintain security, respond to subpoenas or lawful requests, maintain tax or accounting records, or protect legal rights.
Subscribers remain solely responsible for maintaining records required by applicable law, including HOA statutory record-retention requirements. Zorex is not a records custodian or archival service.
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. Security measures may include encryption in transit, access controls, authentication safeguards, audit logging, security monitoring, and backup procedures.
No security system is perfect, and we cannot guarantee absolute security.
If Zorex becomes aware of unauthorized access to personal information resulting from a security incident affecting the Services, Zorex will provide notice to affected Subscribers without unreasonable delay as required by applicable law.
Subscribers are responsible for providing any downstream notices to residents, homeowners, regulators, or other persons where required by applicable law. The timing, content, and method of any notification may be subject to legal, regulatory, investigative, and security considerations.
Depending on your jurisdiction, you may have rights regarding your personal information, including rights to access, correction, deletion, data portability, restriction of processing, and objection to certain processing activities.
To submit a privacy request, contact us using the information in Section 17 below. We will respond within the timeframe required by applicable law. Certain requests involving HOA-controlled records may need to be directed to the applicable Subscriber because the Subscriber controls those records.
Before responding to certain privacy rights requests, Zorex may require verification of the requestor's identity. Requests that cannot be reasonably verified may be denied to protect personal information and account security. Information provided for verification will be used only to verify the request and will not be used for unrelated purposes.
California residents may have rights under applicable California privacy laws. Subject to applicable exceptions, California residents may request:
Zorex does not sell personal information and has not sold personal information during the preceding twelve (12) months. Zorex does not share personal information for cross-context behavioral advertising.
California residents may exercise applicable rights by contacting us using the information in Section 17 below. We will respond to verifiable California privacy requests within forty-five (45) days, unless an extension is permitted by applicable law; if an extension is necessary, we will provide notice as required by law. Zorex will not discriminate against users for exercising applicable California privacy rights.
The Services are not intended for children under thirteen (13) years of age. We do not knowingly collect personal information directly from children under thirteen. If we become aware that such information has been collected, we will take reasonable steps to delete it.
The Services are primarily intended for communities located within the United States. Information may be processed and stored in the United States and other jurisdictions where our service providers operate. By using the Services, you consent to such transfers where permitted by applicable law.
The Services may integrate with third-party products and services. Those services maintain their own privacy practices and policies. We encourage users to review the privacy policies of third-party providers before using their services.
We may update this Privacy Policy from time to time. For material changes, Zorex will provide at least fourteen (14) days' written notice through the Services, email, website notice, or other reasonable means. The updated version becomes effective upon posting unless otherwise specified. The “Last Updated” date at the top of this Privacy Policy indicates when revisions were most recently made.
If you have questions regarding this Privacy Policy or wish to exercise applicable privacy rights, please contact:
Zorex Holdings, LLC
1312 17th Street, Unit #2868
Denver, CO 80202
Privacy Inquiries: privacy@zorexhoa.com
Legal Notices: legal@zorexhoa.com
By using the Services, you acknowledge that you have read and understand this Privacy Policy.
Also see our Terms of Service