Privacy policy

Controller and scope

The Chilean company identified alongside this policy, with its tax ID, address, legal representative and privacy email, controls DondeQueda processing. This policy covers accounts, businesses, orders, public content, reports, support, security, analytics and email campaigns.

Accounts and public content

Accounts are for people aged 18 or older. We receive a name, email, age declaration and protected credentials; Google sign-in may provide a name, email, photo and identifiers. Your chosen alias appears on reviews and comments. We never automatically copy your Google name into that alias. Business listings, photos, posts and replies are public. Avoid submitting third-party or sensitive information.

Orders and recipients

We use order details, status, name, contact and supplied notes to coordinate an order. These details are shared with your selected business through its email or WhatsApp according to your choice. Each business determines processing necessary for its commercial relationship and has its own legal responsibilities. Publishing a business does not authorize DondeQueda campaigns. Messages already received by a business are outside the application’s exclusive control. Where required, we communicate corrections, withdrawals or erasures to recipients and require handling under their respective responsibilities.

Purposes and legal grounds

Necessary information supports requested functions, verification, service protection, moderation and rights requests. We seek authorization where required under Law 19.628. From December 1, 2026, the reform’s lawful grounds apply by purpose, including consent, contractual relationships and legal obligations where applicable. Accepting terms does not authorize campaigns or analytics. Optional processing requires separate choices.

Providers and international transfers

Company-operated infrastructure and email are hosted on Contabo in France according to the company’s operating configuration. Google provides sign-in and, with your permission, Google Analytics; its flows may include other countries. Cloudflare Turnstile may process technical signals when protected forms are enabled. Agreements, covered services, recipients and international transfer safeguards must be documented before use is enabled. European hosting does not replace Chilean safeguards. Ask for information about applicable recipients and safeguards.

Analytics and communications

Google Analytics stays disabled until consent and stops measuring when consent is withdrawn. Account, support and order journeys and identifying parameters are excluded. Analytics permission expires after 180 days or earlier when purposes or providers change. First-party metrics are retained for up to 30 days. Automated campaigns use email only and require express permission, email confirmation and renewal every 12 months. Unsubscribe in a message, your preferences or through the privacy contact. Withdrawal stops new delivery, including pending messages.

Retention and erasure

Order contacts and notes are retained for up to 24 months after closure, subject to earlier warranted erasure. Security and access records are retained for up to 180 days. Minimal acceptance, permission and request evidence is retained for up to five years after closure, withdrawal or resolution; this does not automatically include your entire history. Account closure removes identity, content and operational copies and revokes access. A restricted identifier may remain for necessary references and evidence. Legal obligations or disputes require justified exceptions with restricted access, review and end dates. Backups have deletion cycles and restored data is subject to erasure and suppression replay before operations resume.

Your rights and response periods

Request access, rectification, erasure, objection, temporary blocking and portability where its legal conditions apply through your account or the privacy email. Identity verification is proportionate; do not submit passwords or identity documents in these forms. We provide tracking and a reasoned response. Private exports expire after seven days and exclude others’ information. Under the current regime, failure to respond within two business days enables judicial recourse. From December 1, 2026, the general period is 30 calendar days with the legally permitted justified, notified extension. Temporary blocking requests are handled within two business days.

Security, incidents and changes

Controls include individual team access with two-factor authentication, permissions by function, audit records, risk reviews and recovery and incident procedures. Authorities and affected individuals are notified where required. Policy versions and dates are published. Optional permissions are renewed when purposes or providers change, and material changes are communicated before use.

Inquiries, commercial collaboration and artificial intelligence

An inquiry shares its reason, optional product, name, email and chosen contact method with the selected business. The basic inquiry inbox is available on every plan. Businesses using Enterprise CRM can organize contacts, opportunities, tasks and quotes, and grant authorized commercial team members access according to role and assignment. If AI is enabled, necessary text and authorized business context are sent to MiniMax to draft content, interpret commercial intent and support customer attention. The AI provider processes data outside DondeQueda infrastructure; the operator must document recipients, locations and applicable safeguards before enabling it. Do not submit sensitive or unnecessary information.

Commercial retention and messages

Inquiries and CRM commercial records are retained until express erasure or applicable closure, including after a plan change. Messages, attachments and conversation copies or summaries have a 90-day retention period and are deleted even while CRM is paused. Request access, correction, blocking or erasure through the privacy channels. Opt-out stops automatic follow-up; allowing attention does not authorize campaigns.

Advertising within the platform

Registered accounts may receive identified business advertising. As part of the service, authenticated deliveries measure viewable impressions, video plays and clicks to bill accurately, prevent duplicate charges and provide aggregate advertiser results. This first-party measurement does not enable Google Analytics or communications permissions. Advertisers do not receive your identity or individual history. Personalization is configured separately in Your interests: when enabled, it uses selected categories, followed and saved businesses, hearts, clicks and video viewing within DondeQueda. Without personalization, ads use the selected local context. Unregistered visitors receive organic content. Individual advertising delivery signals are unlinked after 60 days; anonymous results and necessary financial records remain.