Privacy Policy

• Legal name: Digitraffic SAS
• Tax ID (NIT): 901528902
• Address: Carrera 46 No. 90-17, Of. 904, Barranquilla, Colombia
• Email: soporte@divochat.com
• Phone: +57 305 443 9847

Privacy questions and requests: soporte@divochat.com.

• Shopify merchants who install the DivoChat app on their store.
• WordPress customers who create an account or buy a license at https://portal.divochat.com.
• Visitors of stores and sites that use the DivoChat button. What the Shopify app collects is explained in its section. In WordPress, that data is stored on our customer’s own site and the customer is the controller.

When a visitor clicks the WhatsApp button on a merchant’s store, DivoChat may collect:

• Anonymous click data: page type, product name and variant.
• UTM parameters: source, medium, campaign, term and content.
• IP address and user agent, only to send events to the Meta Conversions API.
• Facebook browser cookies (fbp, fbc), if present.

We do not collect names, emails, phone numbers or any other personally identifiable information from store visitors.

From the merchant we store the settings configured in the app, such as the Meta Pixel and its access token, which is encrypted with AES-256-GCM.

We use the data exclusively to:

• Provide click analytics to the merchant inside the Shopify admin.
• Send conversion events to the Meta Conversions API, only if the merchant has configured a Meta Pixel.

We do not sell or share data with third parties, except for Meta Platforms, and only when the merchant enables it.

Click data is stored securely. Sensitive data, such as Meta access tokens, is encrypted using AES-256-GCM. When a merchant uninstalls the app, their data is permanently deleted.

• Account data: name, email, company (optional) and password, which is stored encrypted and that we can never see.
• Purchase data: plan, billing cycle, charge dates, amounts and transaction identifiers. Your card details are received and stored directly by Paddle; we never see or store them.
• License data: license key and the websites where you activate it (domain, plugin and WordPress version).
• Usage and security data: login times, plugin downloads, IP address and browser type, to protect your account and prevent fraud.

To create and manage your account, process purchases and renewals, issue licenses and downloads, verify that a license is used on authorized sites, send service emails (purchase confirmation, license key, renewals, failed payments, changes to terms), provide support, prevent fraud and meet legal, accounting and tax obligations.

We only send promotional emails if you expressly agree, and you can unsubscribe at any time.

The data the plugin captures from your site’s visitors (name, phone, visit origin and approximate location) is stored in your own WordPress and sent only to the services you configure, such as Meta, Google or your CRM. You are the controller of that data and must inform your visitors and obtain any consent required by law. Digitraffic SAS does not access it. To estimate location, the plugin queries an external IP geolocation service.

We do not sell or rent your data. We share it only with providers needed to run the service:

• Paddle (United Kingdom): payments, invoicing and taxes.
• Supabase (United States): database and sign-in.
• Hostinger: the server where the portal runs.
• Resend (United States): service emails.

Some of these providers are outside Colombia, so your data may be transferred internationally. We only work with providers that offer adequate protection. We may also disclose data to authorities when required by law.

While your account exists. If you ask us to delete it, we delete your personal data within 30 days, except purchase and payment records, which we keep as long as accounting and tax rules require.

You may, at any time and free of charge:

• Access, update and correct your data.
• Ask for proof of the consent you gave us, and know how your data has been used.
• Withdraw your consent or ask us to delete your data, unless we must keep it by law or contract.
• File a complaint with the Colombian Superintendence of Industry and Commerce (SIC).

Write to soporte@divochat.com from the email of your account. We answer requests within 10 business days (extendable by 5) and complaints within 15 business days (extendable by 8). Our full procedure is in the data processing policy (in Spanish).

We use encrypted connections (HTTPS), encrypted passwords, restricted database access and account activity logs. No system is infallible: if we detect an incident affecting your data we will tell you and notify the authority when required.

Our website does not use analytics, advertising or tracking cookies. The customer portal only uses strictly necessary session cookies, and Paddle’s checkout may set its own. On Shopify, the app reads the Facebook cookies (fbp, fbc) if present, only when the merchant enables Meta events. Details in the cookie policy (in Spanish).

The service is aimed at businesses and adults. We do not knowingly collect data from minors.

If we make a material change we will notify you before it takes effect. The date of the last update is shown at the top of this page.