Privacy policy.
This policy explains what personal data Waroi collects, why we use it, who we share it with and how to exercise your habeas data rights under Colombian Law 1581 of 2012 and Decree 1377 of 2013. The controller is [RAZÓN SOCIAL].
Last updated:
Replace [RAZÓN SOCIAL], [NIT] and [DIRECCIÓN] with the company’s legal name, Colombian tax ID and address before publishing this page.
Who is responsible for your data
The data controller is [RAZÓN SOCIAL], NIT [NIT], address [DIRECCIÓN], Bogotá, Colombia. In this policy, “Waroi” means that company.
Privacy requests go to hola@waroi.com. You can also write through the contact page.
What this policy covers
It covers personal data handled through waroi.com, the app at app.waroi.com and the WhatsApp button installed on a customer’s website.
That includes people who visit this site or write to us, customers who open an account, and people who interact with a customer’s button. For that last group the customer is the controller and Waroi acts as processor (encargado).
Data we collect
We collect only what the product needs to run the button, measure results and bill the plan you choose.
- Account data: name, email, company, website, language and the plan you choose (Free, Pro or Business).
- Billing data: plan, amount, currency (COP or USD), payment status and a reference from the payment provider. Waroi does not store the full card number.
- Product use: the buttons you create and the events the product measures (impressions, clicks, widget openings, forms and conversions), with dimensions such as channel, campaign, page and device.
- Attribution data: UTM parameters and click identifiers such as gclid and fbclid, stored in a first-party cookie on the domain where the button is installed.
- Contacts and catalog data you choose to collect or sync, such as a name, phone number, message or product, so you can follow up.
- Messages you send from the contact form, by email to hola@waroi.com or by WhatsApp.
Why we use it
We use personal data for the following purposes and not for a different one without a new authorization when Law 1581 of 2012 requires it.
- To create and operate your account, the WhatsApp button, the widgets, analytics, A/B tests and, on plans that include it, the AI bot.
- To attribute each conversation to the visit or ad that started it, and to send conversions to Google Ads and Meta when you connect those accounts.
- To charge for a Pro, Business or custom plan and to keep the billing records the law requires.
- To answer support requests and other messages about the service.
- To protect the service, prevent abuse and understand aggregated use so we can fix and improve the product.
Legal basis
Treatment of personal data in Colombia follows Law 1581 of 2012 and Decree 1377 of 2013. The general rule is prior, express and informed authorization from the data subject.
When you create an account or write to us, you authorize the treatment described in this policy. You can revoke that authorization later, as explained below. We also treat data when it is necessary to perform the service you asked for, and when a legal duty requires us to keep it, including the cases in article 10 of Law 1581 of 2012 where authorization is not required.
- Your authorization, given when you create an account, contact us or accept this policy.
- Performance of the service you request by signing up.
- A legal duty, including the billing records Colombian law requires us to keep.
- An exception in article 10 of Law 1581 of 2012, only when that exception actually applies.
Your rights (habeas data)
Law 1581 of 2012 recognizes the right of habeas data. You can exercise the rights below at any time by writing to hola@waroi.com with your name, what you are asking and, if you have an account, the email on that account. You can also use the contact page.
Questions about your data (consultas) are answered within ten business days, which may be extended by five more, as article 14 of Law 1581 provides. Requests to correct or delete data (reclamos) are answered within fifteen business days, which may be extended by eight more, as article 15 provides.
- Know, update and rectify your personal data.
- Request proof of the authorization you gave, unless the law does not require that authorization.
- Be informed, when you ask, about the use that has been given to your data.
- Revoke the authorization and ask for deletion when there is no legal duty to keep the data.
- Access your personal data free of charge.
- File a complaint with the Superintendence of Industry and Commerce (SIC).
When you install the button on your site
You choose what the button collects from your visitors. For that data you are the controller and Waroi is the processor under Law 1581 of 2012. We treat it on your instructions in order to provide the service.
You must have a valid basis and, when the law requires it, the visitor’s authorization. You must not use Waroi to collect personal data unlawfully. The features page explains how to hold tracking until the visitor accepts.
Transfers outside Colombia
Some of those providers process data outside Colombia. The transfer is limited to what the purpose requires (payment, ad conversions, hosting or the AI bot) and we require the provider to protect the data.
How long we keep it
Account data is kept while the account is open. Billing records are kept for the period Colombian tax and commercial law requires, including after the account is closed.
Stats history follows the limit of your plan, published on the pricing page. Contacts remain until you delete them or the account is closed. If you ask us to delete personal data, we delete it or anonymize it unless the law requires us to keep it or we need it to defend a claim.
Children
Waroi is a service for businesses. It is not directed at children under 18, and we do not knowingly collect their personal data. If you believe we have, write to hola@waroi.com and we will delete it.
Security
We protect data with measures suited to the service, including HTTPS and access limited to people who need it to operate Waroi. No method of storage or transmission is completely secure. Use a strong password on your account.
Changes to this policy
We may update this policy when the product or the law changes. The date at the top of this page will change with it.
If a new purpose needs a fresh authorization under Law 1581 of 2012, we will ask for that authorization before using the data for the new purpose.
Contact
To use your rights or ask about this policy, write to hola@waroi.com. Controller: [RAZÓN SOCIAL], NIT [NIT], [DIRECCIÓN], Bogotá, Colombia. The habeas data authority is the Superintendence of Industry and Commerce (SIC), sic.gov.co.