Privacy policy

1. Who is responsible

Christopher Familia, operator of Cobrix, is the controller of account data (companies and their users). Contact: psacchristopherfamilia@gmail.com.

Each company is the controller of its own clients' data (the people who receive loans). Cobrix only stores and processes it on the company's behalf, following its instructions, and does not use it for anything else.

2. What data we process

Users: name, email or username, phone, role, the company they belong to and a log of what they do (for example, who recorded or voided a payment).

Companies: name, tax ID (RNC), address, phone, logo, monthly fee status and settings (WhatsApp, contract, routes).

Companies' clients: name, national ID, phone, address, references, route, loans, installments, payments, collateral (with photos and guarantor details), signed contracts and the WhatsApp reminders sent.

3. What we use it for

To provide the service: calculate installments and late fees, record collections, generate receipts, reports and contracts, send the reminders the company turns on, give access according to each user's role, provide support and charge the monthly fee.

We do not sell or rent data, use it for advertising or build credit profiles with it.

4. Basis and consent

We process account data to perform the service agreement with the company. The company must inform its clients and obtain their consent to record their data and send them WhatsApp reminders; the Cobrix contract template includes clauses for this.

5. Who it is shared with

Only with the providers needed to run the service: Supabase (database, files and sign-in), Render (application servers), Meta / WhatsApp (sending reminders from the company's number) and Google (account emails such as invitations and password resets).

These providers may store data on servers outside the Dominican Republic or the Turks and Caicos Islands (for example, in the United States), with their own security measures. We may also disclose data if a competent authority lawfully orders it.

6. Security

Connections are encrypted. Each user sees only what their role allows, and the database checks it on every query. Collateral photos and signed contracts are private and only open through temporary links. No measure is infallible: if an incident affects your data, we will notify the affected companies.

7. How long it is kept

While the company's account is active. If the company asks to close its account, we delete its data within the following 90 days, except what the law requires us to keep. Backups are deleted in their normal cycle.

8. Your rights

You can request access to, correction or deletion of, or object to the use of your personal data by writing to psacchristopherfamilia@gmail.com. We will reply within the legal deadlines.

If you are a client of a company that uses Cobrix, contact that company first, as it is responsible for your data; we will help it handle your request.

You may also file a complaint with the data protection authority of your country.

9. Cookies

We only use the cookies needed to keep you signed in and remember the active company and language. We do not use advertising or third-party tracking cookies.

10. Minors

The service is not intended for people under 18 and accounts must not be created for them.

11. Changes

If we change this policy, we will publish the new version with its date and notify administrators if the change is significant.