Privacy Policy
Last updated: September 2026
Disponible en español.
At Kofy Software SpA (“Kofy”) we take privacy seriously. This document explains what personal data we process in order to provide our service. It applies to the kofy.cl website, our platform, and the AI automation services we provide to our clients, including everything set out in our Terms and Conditions, Service Agreement and Annexes.
Definitions
Data:information that can lead to the identification of an individual, collected in the course of providing Kofy’s services.
Platform:Kofy’s technology used to deliver its services.
Client:the natural or legal person who contracts Kofy’s services.
Third-party user or client’s customer:the natural person who interacts with Kofy’s Client.
Cookies: small text files that a web server places on a computer or mobile device to create a unique identifier for an anonymous user.
What data we collect
- Contact details you provide when you write to us via WhatsApp or email (name, phone number, email address and the content of your message).
- Website usage data, such as pages visited and technical browser data, to understand interest in our services and improve the site.
- Data we process on behalf of our clients when we implement an automation. In that case we act as data processor: the data belongs to the client (the data controller) and we process it following their instructions.
Data processed through third-party platforms (Meta/Instagram, WhatsApp)
When we implement automations on our clients’ Instagram, WhatsApp or other platform accounts, we may process, on behalf of and under the instructions of the client:
- Basic information about the connected professional account (username, account ID, profile picture).
- Public comments left by end users on the client account’s posts or live broadcasts.
- Direct messages that end users send to the client’s account.
- Contact and shipping details that end users voluntarily provide to complete a purchase (name, address, phone number).
This data is processed solely to deliver the service contracted by the client (for example, answering enquiries, managing orders and sending payment links), and is not used for any other purpose.
Automated messages
Part of our service consists of sending replies and messages automatically on behalf of our clients. When interacting with our clients’ accounts (for example, by commenting or sending a message), end users may receive responses generated by an automated system. Commercial communications (offers or news) are only sent to those who have given prior, specific and revocable consent.
What we use your data for
- To answer your enquiries and arrange meetings or proposals.
- To provide, maintain and improve the contracted services.
- To send you service-related information, where applicable.
- To comply with legal and accounting obligations.
Who we share data with
We do not sell personal data. Data may only be shared with providers who assist in the operation and delivery of our services, who must process it exclusively to carry out the tasks entrusted to them, following Kofy’s instructions and under the corresponding security measures and contractual safeguards. These providers include:
- Meta Platforms, Inc. (Instagram / WhatsApp Business API), for sending and receiving messages.
- Payment gateway providers (for example, Mercado Pago), to process payments.
- Infrastructure and hosting providers (for example, Railway), to host the service.
We also share data where required by law.
How long we keep it
We keep data for as long as necessary for the purposes described and to comply with legal obligations. Data processed on behalf of a client is retained as instructed by that client and as agreed in the corresponding contract. When it is no longer needed, we delete or anonymise it.
Data deletion
You may request the deletion of your personal data at any time by writing to contacto@kofy.cl. For data processed on behalf of a client (for example, data of end users of an Instagram or WhatsApp account), the request will be handled together with the client responsible for that data. We will process deletion requests within a reasonable time, unless a legal retention obligation applies.
Security
We apply reasonable technical and organisational measures to protect information, including encryption of access credentials, secure communications (HTTPS/TLS), restricted access control to data, and the exclusion of personal data from logs and URLs. We work with the minimum access necessary on each client’s accounts and tools.
This level of security also depends on the Client, who must not share their account, access details or passwords with anyone. If the Client believes their account details have been exposed, they may request support to make changes.
Rights of third-party users
You may request access to, rectification or deletion of your personal data, or object to its processing, by writing to contacto@kofy.cl. Where the data is processed on behalf of a client, we will forward your request to the responsible client or handle it together with them.
Rights of the Client
The Client may request access to data they own. However, they may not object to the processing, as Kofy would then be unable to provide the service covered by the Contract.
All the rights set out above must be exercised in accordance with applicable national legislation.
Cookies
We use cookies and similar technologies to personalise and support the operation of our services, analyse their use, identify users, comply with regulatory obligations, protect accounts and enable links to other websites. You can manage or block the use of cookies through the settings of most browsers.
Changes
We may update this policy. The current version will be published on this page with its update date.
Governing law and jurisdiction
Any dispute arising from the use of the Data shall be resolved in accordance with the legislation in force and applicable in Chile, by the Chilean courts.
Contact
If you have questions about this policy or about your data, write to us at contacto@kofy.cl.
