Privacy Policy

1. Data Controller

TRUJO TECHNOLOGIES S.A.S., a company incorporated under the laws of the Republic of Colombia, domiciled in Bogota, D.C., is the data controller responsible for the processing of personal data collected through its digital services.

• Website: https://trujotechnologies.com
• Contact email: [email protected]
• Application name: TRUJO BOT
• Meta App ID: 1436781278184588

2. Personal Data We Collect

Through our services, particularly TRUJO BOT, we may collect:

• Contact data: WhatsApp phone number, profile name.
• Conversation data: messages exchanged with the bot for the purpose of automated response.
• Technical data: WhatsApp user identifier (WAID), message timestamps.
• Usage data: types of queries submitted, frequency of service usage.
• Voluntarily provided data: full name, email address, business information, when shared by the user during conversation.

3. Purposes of Data Processing

Personal data is processed for the following purposes:

• To provide and operate the TRUJO BOT service via Meta's WhatsApp Cloud API.
• To respond to inquiries, requests, and manage automated interactions.
• To improve the quality, security, and features of the service.
• To comply with applicable legal and regulatory obligations.
• To prevent fraud, abuse, or misuse of the service.
• To send service-related communications, only with prior consent.

4. Legal Basis for Processing

Data processing is based on:

• Consent of the data subject: by initiating a conversation with TRUJO BOT, the user consents to the processing of their data in accordance with this policy.
• Performance of a contract: to provide the requested services.
• Compliance with legal obligations: Law 1581 of 2012 (Colombia) and applicable regulations.
• Legitimate interest: to improve the security and quality of the service.

5. Sharing of Data with Third Parties

TRUJO TECHNOLOGIES S.A.S. may share data with:

• Meta Platforms Inc.: as the provider of the WhatsApp Cloud API, in accordance with their WhatsApp Business Platform Policies.
• Infrastructure providers: cloud and hosting services under confidentiality agreements.
• Competent authorities: only when legally required.

We do not sell, lease, or trade personal data to third parties for advertising purposes.

6. International Data Transfers

By using Meta's WhatsApp Cloud API, data may be processed on servers located in the United States or other jurisdictions. Meta maintains transfer mechanisms compliant with the GDPR and applicable legislation. TRUJO TECHNOLOGIES S.A.S. ensures that such providers offer an adequate level of protection.

7. Data Retention

Personal data is retained for:

• The period necessary to provide the active service.
• Up to 12 months after the last use, unless a longer legal retention obligation applies.
• Conversation messages may be deleted earlier upon the data subject's request.

8. Data Subject Rights

In accordance with Law 1581 of 2012 and other applicable regulations, the data subject has the right to:

• Access: know what personal data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure/Deletion: request the deletion of your personal data.
• Withdrawal of consent: revoke consent granted at any time.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing under certain circumstances.

To exercise your rights, send a request to: [email protected] with the subject line "ARCO Rights - Personal Data". We will respond within a maximum of 15 business days.

You may also request the deletion of your data at: trujotechnologies.com/legal/delete-data

9. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or disclosure, including: encryption in transit (TLS/SSL), access controls, multi-factor authentication, and continuous infrastructure monitoring.

10. Cookies and Tracking Technologies

Our website may use essential cookies for its operation. TRUJO BOT does not use cookies. You may configure your browser to reject cookies, although this may affect site functionality.

11. Minors

TRUJO BOT and the services of TRUJO TECHNOLOGIES S.A.S. are intended for individuals aged 18 and older. We do not knowingly collect data from minors. If you become aware that a minor has provided data without authorization, please contact us so we may proceed with immediate deletion.

12. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Modifications will take effect upon publication on this website. We recommend reviewing it periodically. Continued use of the service after publication of changes implies acceptance thereof.

13. Supervisory Authority

In Colombia, the data protection authority is the Superintendence of Industry and Commerce (SIC). You may file complaints at: www.sic.gov.co

14. Mobile Applications (Android / Play Store)

This section applies specifically to mobile applications published by TRUJO TECHNOLOGIES S.A.S. on Google Play Store, including (but not limited to) TRUJO Mostrador.

14.1 Data we collect

• User email: for authentication (login).
• User name (optional): for interface personalization.
• User identifiers (internal UUID): to associate actions with your account.
• Device identifier: to keep your session active between uses.
• Error and diagnostic logs: to detect and fix app failures.

We do NOT collect: location, photos, audio, contacts, calendars, SMS, browsing history, financial data, or health data.

14.2 How we use the data

• Application operation (login, navigation, displaying your information).
• Customer support (when you contact [email protected]).
• Application improvement (aggregate error analysis, without identifying individual users).

14.3 Sharing with third parties

We do NOT share your data with third parties for advertising, marketing, or external analytics. Your data is stored on our servers under strict access controls.

14.4 Encryption

All communication between the app and our servers is encrypted with HTTPS / TLS 1.2 or higher. Passwords are stored with bcrypt hashing (never in plain text).

14.5 Device permissions

The application only requests the following Android operating system permissions:

• Internet access (INTERNET): required to connect to the server.
• Network state (ACCESS_NETWORK_STATE): to detect if there is a connection.

We do not request access to camera, microphone, location, contacts, storage, SMS, or any permission considered sensitive by Google Play.

14.6 Data deletion

You can request the complete deletion of your personal data at any time by following the procedure described on our data deletion page or by sending an email to [email protected].

15. Contact