Privacy Policy and Data Governance
At BotellónGo (platform developed, maintained, and operated by RFJ Software), user privacy, data governance, and cryptographic security are core foundational principles. This Privacy Policy details transparently which personal data we collect, how we process it, the legitimate purposes of processing, and your rights as a data subject.
1. Personal Data We Collect
We strictly collect data essential to delivering logistics and software services:
- Consumers (B2C): Full name, verified mobile phone (WhatsApp), delivery address with landmarks, GPS delivery coordinates, order history, loaned jug balance (Kardex), and accumulated loyalty stamps.
- Water Bottling Plants & Distributors (B2B): Legal company name, commercial name, Tax ID (RUC / NIT / RFC / CIF), physical branch addresses, billing contact email, and PKCS#12 (.p12) digital certificates for fiscal e-invoicing.
- Drivers and Field Personnel: Full name, email, assigned vehicle license plate/capacity, daily cash drawer reconciliation records, and on-duty live GPS telemetry.
- Technical and Device Data: IP address, device model, unique installation token, operating system version, and Firebase Cloud Messaging (FCM) push notification tokens.
2. Geolocation and Live GPS Telemetry Governance
- For End-Consumers: The application requests location access strictly to streamline pinpointing delivery addresses on the interactive map. No background tracking of consumer locations is ever conducted.
- For Drivers on Route: The driver app gathers high-precision GPS telemetry in both foreground and background strictly while an active delivery shift is ongoing. This telemetry is required to compute optimized road routing, estimate Arrival Times (ETA), and allow customers to track approaching delivery vehicles live. Telemetry ceases immediately upon shift reconciliation.
3. Legitimate Purposes of Data Processing
Your personal data is processed exclusively for:
- Coordinating, routing, and delivering purified water refill orders to your doorstep.
- Enabling two-way real-time communication between driver and customer via in-app chat or WhatsApp.
- Maintaining container deposit ledgers (Kardex) and loyalty club digital stamp balances.
- Signing and issuing legal electronic tax invoices with the Internal Revenue Service (SRI Ecuador) or corresponding fiscal authorities.
- Securing payments and SaaS subscriptions via PCI-DSS compliant gateways (PayPal).
- Dispatching critical operational push notifications regarding order progress, chat messages, or system maintenance.
4. Fiscal Vault and Cryptographic Security
Digital certificates (.p12) uploaded by bottling companies are isolated in an Encrypted Cryptographic Vault with AES-256-GCM symmetric encryption at rest and TLS 1.3 in transit. Passwords utilize salted Bcrypt key derivation. Document signing executes in volatile memory micro-tasks without plaintext key persistence.
5. Data Non-Commercialization and Disclosure
BotellónGo never sells, rents, or monetizes your personal data to third parties for advertising or telemarketing:
- Information is only shared with the servicing water bottling plant assigned to fulfill your order.
- Tax data is transmitted securely to the Tax Authority (SRI) when generating legally requested electronic invoices.
6. Data Retention Schedules
- Operational & Chat Records: Retained strictly for order auditing based on the subscribing water plant's SaaS plan (from 7 days to permanent archive).
- Tax Invoices and Accounting Data: Retained for a mandatory statutory period of 7 accounting years under Ecuadorian and international commercial tax laws.
7. Data Subject Rights (Access, Rectification, Erasure)
Under applicable personal data protection laws, you retain the following enforceable rights:
- Access: Request a copy of all personal records associated with your account.
- Rectification: Correct or update inaccurate data directly via your profile or customer support.
- Erasure: Request permanent deletion of your account and personal records, subject to statutory tax retention duties.
- Permission Revocation: Revoke GPS or push notification permissions at any moment via your device system settings.
8. Data Protection Officer and Legal Inquiries
To exercise your privacy rights or discuss data governance with our Data Protection Officer, contact us via verified WhatsApp at +593 96 260 6921 or through our dedicated in-app support channels.