Privacy Notice
Last updated: 2026-10-08
Short privacy notice
Repartamos is the data controller for the personal data of the user accounts of its platform. You can write to us at privacidad@repartamos.com.
We use your data to create and manage your account and your business account, give you access according to your job role, sync the mobile app, charge the subscription, send you service emails, provide support and protect the platform. If you are a driver, the app shares your location with your business only while your route is in progress and the app is open on screen, and tells you so with the "Sharing location" notice.
We process the data of your business's customers only on behalf of your business, as a processor.
The full privacy notice is on this same page (section "Full privacy notice"), at repartamos.com/en/legal/privacy.
Full privacy notice
1. Data controller
Repartamos is the data controller for the personal data of user accounts, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). For any matter related to your personal data, write to privacidad@repartamos.com.
2. User account data
For the owners and employees of each business that uses Repartamos we process:
- Name.
- Email address.
- Phone number.
- IP address.
- Data about the device you use the mobile app on.
We do not process sensitive personal data. GPS location is recorded when a delivery is marked or a customer is located. In addition, while a driver has their route of the day in progress and the app open on screen, the app records their position about once a minute (coordinates, accuracy and time) and shows the "Sharing location" notice the whole time. Repartamos does not record location while the app is closed or in the background, or outside a route in progress.
A driver's position during their route is only visible to the people of their business with an administration or sales and office role. Repartamos processes it on behalf of the business, which decides to use it to know where each vehicle is.
3. Data of your business's customers (Repartamos as processor)
The data of each business's end customers (name, phone, WhatsApp, address, coordinates, balance and delivery photos) is captured by the business itself. The business is the data controller for that data and Repartamos acts as processor: it processes the data only on behalf of the business and following its instructions, under the processing clause of the Terms and Conditions.
4. Purposes
We process user account data to:
- Create and manage your account and your business account.
- Verify your identity when you sign in and give you access according to your job role.
- Register the drivers' phones and sync the mobile app.
- Show your business's administration and office the driver's last position and route of the day while their route is in progress.
- Charge the subscription and manage your business's plan.
- Send you service emails (verification, invitations and payment notices).
- Handle your support and contact requests.
- Protect the platform, prevent abuse and detect errors.
These purposes are required to provide the service. We do not process your data for secondary purposes.
5. Transfers to processors
To operate the platform we share data with providers that act as processors, located in the United States:
- Supabase: database and file storage.
- Vercel: web application hosting.
- Railway: background jobs.
- Resend: email delivery.
- Stripe: subscription billing.
- Sentry: error monitoring.
Sharing data with processors does not require your consent.
6. ARCO rights and withdrawal of consent
You can access, rectify, cancel or object to the processing of your data (ARCO rights), and withdraw your consent, by writing to privacidad@repartamos.com with your name, your account email and a description of your request.
- We answer within 20 business days at most.
- If the request is granted, we carry it out within the following 15 business days.
- If you are a customer of a business that uses Repartamos, we forward your request to the responsible business within 5 business days at most.
7. Retention
- Delivery evidence photos: 90 days.
- Change history used to sync the mobile app: 30 days.
- Driver positions during their route: 7 days.
- Exported CSV files: 7 days.
- Business transactions: while the organization exists.
- When an organization is deleted, its data is deleted in cascade and disappears from backups within 7 days, and from the weekly backup within 8 weeks.
8. Security and breaches
We protect data with technical and administrative controls: access isolated per business, encrypted connections, immediate revocation of phones and secrets kept out of the code. If a breach significantly affects your property or moral rights, we will notify you and the affected businesses without delay, with the nature of the incident, the data compromised and the measures you can take.
9. Changes to this notice
We will publish any change to this notice on this page, with its last updated date.
Last updated: 2026-10-08