Polítika Privasida rehegua

Oñemoambue ipahaitépe: March 16, 2026

1. Ñepyrũrã

Foodfy ("Empresa", "ore", "ore", "ore") oñemoĩ oñangareko hag̃ua ne marandu tee ñeñongatu ha ñeñangareko rehe. Ko Polítika Privasida rehegua omyesakã mba’éichapa rombyaty, roipuru, roikuaauka, roñongatu ha roñangareko ne marandu rehe reñemongeta jave plataforma Foodfy ndive, umíva apytépe ore página web foodfy.ai-pe, aplicación móvil, API, cuadro de mando comerciante, servicio AI, red de entrega drone, ha opaite servicio ha mba’ekuaarã ojoajúva (oñondivepa, "Plataforma").

This Privacy Policy applies to all users of the Platform worldwide, including Customers, Business Partners, Delivery Partners, Territory Partners, Corporate Account administrators and employees, Investors, Influencers, NutriLife users, and visitors. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy.

Foodfy omba'apo 250+ tetã rupi. Umi léi específica protección de datos rehegua ojeporúva ndéve ikatu iñambue odependévo moõpa reime. Pe léi local ome’ẽhápe tuichave protección ko Política de Privacidad-gui, pe léi local ipu’aka. Umi disposición regional suplementaria oñedetalla Sección 16-pe.

2. Datokuéra Controlador rehegua

Foodfy ha’e pe controlador de datos oguerekóva responsabilidad nde dato personal oñemboguatáva Plataforma rupive, ndaha’éiramo oje’éva ambue mba’e. Foodfy for Work (Cuentas Corporativas)-pe g̃uarã, pe organización oinskrivíva ombaꞌapo controlador de datos ramo mbaꞌapohára dato personal-pe g̃uarã, ha Foodfy ombaꞌapo procesador de datos ramo hérape.

Oñeporandúramo dato ñeñangareko rehegua, ikatu reñe’ẽ ore Datos ñeñangareko rehegua ndive ko’ápe:

3. Marandu Ñambyatýva

We collect different categories of personal data depending on how you interact with the Platform and which services you use.

3.1 Opaite Pojoapy rehegua

  • Marandu Cuenta rehegua: Héra tee, dirección de correo electrónico, número de teléfono, fecha de nacimiento, fotografía de perfil ha contraseña cifrada.
  • Datokuéra Ñemoañete rehegua: Credencial jeikerã, secreto jekuaaukarã mokõi factor rehegua ha código jegueru jey rehegua, token API ha identificador sesión rehegua.
  • Dispositivo ha Datos Técnicos rehegua: Tembipuru ñemohenda, sistema operativo ha versión, kundahára ñemohenda ha versión, pantalla resolución, tembipuru jekuaaukaha ijojahaꞌeỹva, red móvil marandu, IP dirección ha push notification tokens (Expo tokens).
  • Usage Data: Pages visited, features used, search queries, click patterns, navigation paths, session duration, timestamps, referring URLs, and interaction events.
  • Datos Moõpa oĩ: Ubicación aproximada oúva IP dirección-gui. Nde consentimiento explícito reheve, GPS ñemohenda hekopete oñeme’ẽ hag̃ua, negocio jejuhu hi’aguĩva ha mba’ekuaarã moõpa oĩ.
  • Datos Ñe’ẽmondo rehegua: Marandu oñemondova’ekue Plataforma rupive, interacción soporte cliente rehegua, retroalimentación ha encuesta ñembohovái.

3.2 Cliente-kuéra rehegua

  • Order Data: Umi mba’e ojeordenáva, pedido rembiasakue, dirección de entrega (oikehápe edificio réra, tape, apartamento, piso, código de entrada, ha instrucción de entrega), pedido preferencia, requisito dietético especial ha fuente de pedido (web, app, kiosco, QR, WhatsApp, plan de comida).
  • Payment Data: Payment method type, billing address, transaction amounts, and transaction history. Full payment card numbers are processed by our PCI DSS-compliant payment processor (Stripe) and are never stored on Foodfy servers.
  • Kuatiañe’ẽ Dirección rehegua: Saved delivery addresses including structured address components, GPS coordinates, Google Place IDs, and formatted addresses.
  • Umi mba’e ojeiporavóva: Umi negocio ojehayhuvéva, umi mba’e oñeñongatúva, preferencia dietética, ñe’ẽ ha viru ñemboheko.
  • Reviews and Ratings: Product reviews, business ratings, delivery ratings, photos, and comments.

3.3 Umi Socio Empresarial rehegua

  • Marandu Negocio rehegua: Negocio réra legal, comercial réra, subdominio, identificador tenda público, tipo de negocio (restaurante, tembi’u, farmacia, yvoty, ñemuha, proveedor, marca), dirección física, teléfono número, correo electrónico ha URL página web.
  • Datos Jurídicos ha Financieros rehegua: Tax identification name and number, legal entity type, banking details for payouts, and business registration documents.
  • Operational Data: Umi mba’e menúpegua, catálogo producto rehegua, precio, nivel inventario rehegua, aravo omba’apo hag̃ua, aravo oñembosako’i hag̃ua, zona de entrega ha configuraciones servicio rehegua.
  • Datos Relación Cliente rehegua: Umi perfil CRM oimehápe frecuencia pedido cliente, gasto total, puntaje RFM (Recencia, Frecuencia, Monetaria), etapa ciclo de vida, nivel de lealtad, estado opt-in marketing, lenguaje preferido, etiqueta ha nota.
  • Mba’apoharakuéra Dato: Staff member names, roles, employee codes, departments, designations, employment type, contact information, emergency contacts, banking details, identity documents, and HR records when using the People and HR feature.
  • Third-Party Integrations: Google Place ID, Google calificación, perfil medios sociales (WhatsApp, Facebook), ha dato oñembohasáva servicio integrado ndive (software contable, plataforma de entrega).
  • Datos de Franquicia rehegua: Franquicia asociación marca rehegua, código salida rehegua, configuración heta tendápe ha análisis nivel de marca rehegua.

3.4 Ñeme’ẽ Socio-kuéra

  • Identidad rehegua jehechauka: Identificación ome'êva gobierno, licencia de conducir, registro mba'yrumýime ha prueba de seguro.
  • Real-Time Location: Umi coordenada GPS oñembopyahúva umi entrega activa aja seguimiento de pedidos, optimización ruta ha seguridad rehegua.
  • Performance Data: Number of completed orders, rejected orders, delivery times, ratings received, and earnings history.
  • Datos de Entrega de Drones rehegua: Umi socio de entrega ikatúva drone-pe g̃uarã: estado capacidad de drone rehegua, tipo de corredor, estadística de entrega, asignación DronePort ha registro operativo drone rehegua.

3.5 Territorio Socio-kuéra rehegua

  • Umi Territorio Ojegestionáva: Nivel territorio asignado (Región, Tetã, Estado, Táva, Área), umi identificador territorio rehegua ha alcance geográfico.
  • Métrica de Desempeño rehegua: Tasa de onboarding empresarial, ingreso generado, puntuación satisfacción socio ha métrica territorio okakuaáva.
  • Datos Aplicación rehegua: Territory applicant profile information submitted during the application and onboarding process.

3.6 Cuenta Corporativa puruhára (Foodfy Tembiaporã) .

  • Organization Data: Empresa réra legal, tipo de entidad jurídica, número de licencia comercial, número de impuesto, dirección registrada, información de contacto facturación rehegua ha logotipo.
  • Mba’apoharakuéra Dato: Mba’apohara réra, correo electrónico, rembiapo (administrador/gerente/mba’apohara), departamento, centro de costo, mba’apoharakuéra número de referencia, saldo billetera rehegua, billetera transacción rembiasakue ha mba’apo reko.

3.7 Inversionista-kuéra rehegua

  • Perfil Inversionista rehegua: Estado de acreditación, preferencia inversión rehegua, kuatia verificación identidad rehegua ha tembiasakue comunicación rehegua.
  • Actividad de Inversión rehegua: Interés inversión rehegua, participación acuerdo rehegua, monto inversión rehegua ha correspondencia ojoajúva hese.

3.8 NutriLife puruhára rehegua

NutriLife collects sensitive health and biometric data. See Section 9 for detailed information.

3.9 Marandu Mbohapyhagui oúva

  • Social media platforms when you sign in using social login (Google, Facebook, Apple).
  • Payment processors and financial institutions for transaction verification and fraud prevention.
  • Public business directories and government registries for business verification and directory building.
  • Open Food Facts and other nutritional databases for product nutritional data.
  • Third-party delivery platforms (Uber Eats, Deliveroo, Talabat, Keeta, Careem) for integrated order management.
  • Google Maps and Places API moõpa oĩ, mapeo ha dirección rehegua marandu.
  • Analítica ha socio publicitario análisis tráfico sitio web ha medición campaña-pe guarã.

4. Base Legal rehegua Procesamiento rehegua

We process your personal data on the following legal bases, as applicable under the General Data Protection Regulation (GDPR) and similar frameworks:

  • Performance of Contract: Processing necessary to fulfill our contractual obligations to you, including account creation, order processing, payment handling, delivery coordination, and provision of Platform features you have subscribed to or requested.
  • Potárupi: Processing based on your freely given, specific, informed, and unambiguous consent. This applies to: precise GPS location tracking, NutriLife health and biometric data collection (special category data), marketing communications and promotional emails, non-essential cookies and tracking technologies, and AI-powered photo analysis of meals.
  • Interés Legítimo rehegua: Processing necessary for our legitimate business interests, provided these interests are not overridden by your fundamental rights and freedoms. This includes: Platform security and fraud prevention, analytics and service improvement, personalized search results and recommendations (non-AI profiling), customer support and communication, and enforcement of our Terms of Service.
  • Obligación Legal rehegua: Processing necessary to comply with applicable legal requirements, including tax and accounting regulations, anti-money laundering (AML) and know-your-customer (KYC) requirements, food safety and public health regulations, data retention mandated by law, and responses to lawful government or regulatory requests.
  • Vital Interest: Umi circunstancia excepcional-pe, procesamiento oñeikotevêva oñangareko haguã peteî tapicha interes vital rehe, ha'eháicha situación de emergencia oimehápe alergia hi'upyrã, incidente seguridad térã emergencia salud pública.

5. Mba’éichapa Roipuru Ne Marandu

We use the personal data we collect for the following purposes:

5.1 Plataforma Núcleo rehegua Operaciones

  • Provide, maintain, operate, and improve the Platform and all its features and services.
  • Process and fulfill orders, payments, refunds, and deliveries.
  • Emoheñói, emoañete ha emohenda puruhára kuatia opaite puruhára ñemohenda rupive.
  • Emboguata seguimiento pedido tiempo real-pe, coordinación entrega ha despacho chofer/drone rehegua.
  • Process Business Partner payouts and financial reconciliation.
  • Emohenda Foodfy Gold suscripción, beneficio ha facturación.
  • Operate Foodfy for Work corporate wallets, allocations, and expense tracking.

5.2 Ñe’ẽmondo rehegua

  • Send transactional communications including order confirmations, delivery updates, payment receipts, and account notifications.
  • Provide customer support and respond to inquiries through all channels (email, in-app, WhatsApp, SMS).
  • With your consent, send promotional communications, marketing offers, and personalized recommendations.

5.3 Personalización ha AI rehegua

  • Personalize your experience through AI-powered search results, business recommendations, and product suggestions.
  • Provide Business Partners with AI-powered tools including menu optimization, demand forecasting, automated marketing content generation, and customer analytics.
  • Power NutriLife features including AI meal photo analysis, nutritional calculation, and personalized dietary guidance.
  • Emboguata umi chatbot AI ha soporte automatizado cliente-pe g̃uarã.

5.4 Seguridad, Seguridad ha Cumplimiento rehegua

  • Oikuaa, oinvestiga ha ojoko fraude, abuso, acceso no autorizado ha ambue tembiapo ilegal térã perjudicial.
  • Verify the identity of Business Partners, Delivery Partners, Territory Partners, and Investors.
  • Omoañete obligaciones legales aplicables, requisito tributario ha mandato regulatorio.
  • Emoañete ore Términos de Servicio ha ambue ñe’ẽme’ẽ.

5.5 Ñe’ẽñemi ha Ñemoporãve

  • Ejapo análisis agregado ha anonimato oikuaa hag̃ua jepuru reko ha emoporãve hag̃ua Plataforma mba’ekuaarã.
  • Perform A/B testing and user experience research.
  • Train and improve AI and machine learning models using anonymized and aggregated data.
  • Omoheñói marandu inteligencia empresarial ha jesareko mercado rehegua.

6. Mba’éichapa Rokomparti Ne Marandu

We share your personal data only as necessary to operate the Platform and provide our services. We do not sell your personal data to third parties.

6.1 Ambue Plataforma puruhára ndive

  • Umi Socio Empresarial-kuéra rehegua: When you place an order, we share your name, delivery address, phone number, and order details with the relevant Business Partner to fulfill your order. Business Partners on Foodfy retain full ownership of their customer data and can export it at any time.
  • Socios de Entrega rehegua: We share your delivery address, order pickup location, and necessary contact information with Delivery Partners to complete deliveries. Delivery Partner access to your data is limited to what is necessary for the current delivery.
  • Umi cliente-kuéra: Marandu Socio Empresarial rehegua (héra, dirección, calificación, menú, aravo ombaꞌapo hag̃ua) ojehechauka públicamente Plataforma-pe ikatu hag̃uáicha ojejuhu ha ojejapo pedido.

6.2 Umi Servicio ome’ẽva ndive

We engage trusted third-party service providers who process data on our behalf under strict data processing agreements:

  • Stripe: Payment processing, subscription billing, and fraud detection.
  • Arai ñemongu’e: Contenido ñeme’ẽ, DDoS ñeñangareko ha firewall purupyrã web rehegua.
  • Antrópico ha OpenAI: AI ha inferencia modelo aprendizaje automático rehegua umi mbaꞌekuaarã AI Plataforma rehegua. Umi dato oñemondovaꞌekue umi proveedor AI-pe oñemboguata umi término procesamiento de datos empresa rehegua rupive ha ndojeporúi oñembokatupyry hag̃ua umi modelo general orekóva.
  • Deepgram rehegua: Speech-to-text processing for voice-enabled features.
  • Twilio: SMS delivery and voice communication services.
  • Google: Mapa, Lugares API, análisis ha servicio publicitario rehegua.
  • Meta: Campaña publicitaria jesareko ha seguimiento conversión rehegua.
  • Umi Infraestructura Cloud rehegua: Server hosting, data storage, and computing services.

6.3 Umi Plataforma Ñeme’ẽ Mbohapyha rehegua ndive

When Business Partners use delivery platform integrations (Uber Eats, Deliveroo, Talabat, Keeta, Careem, and others), order data and necessary operational information is exchanged between the Platform and these third-party services to enable cross-platform order management. This sharing is initiated by the Business Partner and governed by the terms of each delivery platform.

6.4 Integraciones Contables rehegua ndive

When Business Partners connect accounting software (Xero, QuickBooks), financial transaction data, invoices, and business records are synchronized as configured by the Business Partner.

6.5 Propósito Legal ha Regulatorio-pe g̃uarã

  • When required by applicable law, regulation, legal process, subpoena, court order, or enforceable governmental request.
  • To enforce our Terms of Service and other agreements.
  • To protect the rights, property, safety, or security of Foodfy, our Users, or the public.
  • To detect, prevent, or address fraud, security, or technical issues.

6.6 Negocio ñembohasa rehegua

Ojoajúvo peteĩ fusión, adquisición, reorganización, quiebra, venta de activos térã transacción corporativa ojoguáva rehe, ikatu oñembohasa ne dato personal entidad adquirente-pe. Rome’ẽta marandu ne dato personal oñemoĩ mboyve peteĩ política de privacidad iñambuévape.

6.7 Nde Consentimiento reheve

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

7. Datokuéra Ñeñongatu

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, provide our services, and comply with legal obligations. Specific retention periods include:

  • Datos Cuenta Activa rehegua: Retained for the duration of your account plus 30 days after account deletion request to allow for recovery.
  • Order and Transaction Records: Retained for a minimum of 7 years to comply with tax, accounting, and financial regulations in applicable jurisdictions.
  • Payment Records: Retained as required by PCI DSS standards and financial regulations, typically 7 years.
  • Datos Socio Empresarial rehegua: Retained for the duration of the business relationship plus the legally required retention period for business records.
  • NutriLife Health Data: Retained while your NutriLife profile is active. Upon deletion request, health data is permanently deleted within 30 days, except where retention is required by law.
  • Foodfy Oro Datos de Suscripción rehegua: Retained for the duration of the subscription plus 3 years for billing dispute resolution.
  • Cuenta Corporativa Mba’apoharakuéra Dato: Retained for the duration of the employee enrollment plus 1 year after removal from the Corporate Account.
  • Ñe’ẽmondo rehegua Registro: Umi interacción soporte cliente-pe oñemantene 3 ary pukukue garantía de calidad ha resolución de conflictos.
  • Datos Analítica rehegua: Umi dato análisis agregado ha anonimato ikatu oñeñongatu tiempo indefinido ndohechakuaáigui tapichakuéra.

When personal data is no longer needed and no legal obligation requires its retention, we securely delete or irreversibly anonymize it using industry-standard methods.

8. AI ha Decisión Automática rehegua

Foodfy oipuru inteligencia artificial ha procesamiento automatizado heta mba’ekuaarã Plataforma rupive. Roñekompromete transparencia rehe mba’éichapa ko’ã tecnología oprocesa ne datokuéra.

8.1 Mba’éichapa AI omboguata ne marandu

  • Personalized Recommendations: Umi modelo AI ohesa’ỹijo ne pedido rembiasakue, jeporeka jeiko, moõpa oĩ ha mba’e reipotáva orecomenda hag̃ua umi negocio, producto ha oferta. Ko procesamiento oñemopyenda interés legítimo rehe.
  • Search Ranking: Search results are ranked using algorithms that consider relevance, distance, popularity, ratings, and personalization signals.
  • Pronóstico de Demanda rehegua: Umi Socio Empresarial-pe g̃uarã, AI ohesa’ỹijo umi dato orden histórico rehegua, umi patrón estacional, umi acontecimiento local ha umi dato tiempo rehegua opredici hag̃ua demanda. Kóva oiporu dato empresarial agregado.
  • Menú Optimización rehegua: AI opropone umi ajuste precio ha modificación menú oñemopyendáva dato venta, análisis competidor ha preferencia cliente. Umi decisión paha akóinte ojapo pe Socio Empresarial.
  • Fraude jekuaauka: Umi sistema automatizado ohesaꞌeꞌo umi transacción rape, tembipuru marandu ha tekoha rehegua señal ohechakuaa hag̃ua tembiapo ikatúva ojejapo fraudulento. Umi transacción oñembohapéva ikatu ohesa’ỹijo umi analista yvypóra.
  • NutriLife AI: AI ohesa’ỹijo umi fotografía tembi’u rehegua oestima haĝua contenido nutricional ha ogenera recomendación dietética personalizada oñemopyendáva nde perfil de salud rehe. Ehecha Sección 9-pe reikuaa hag̃ua hetave mbaʼe.
  • Marketing Automatizado rehegua: AI omoheñói contenido marketing rehegua, campaña correo electrónico rehegua ha oferta promocional Socio Empresarial-pe g̃uarã oñemopyendáva segmentación cliente ha dato conductual rehe.

8.2 Nde Derechokuéra Decisión Automática rehegua

Under applicable law (including GDPR Article 22), you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Where such automated decisions are made:

  • You have the right to obtain human intervention and review of the decision.
  • You have the right to express your point of view and contest the decision.
  • You may request an explanation of the logic involved in the automated decision.

To exercise these rights, contact us at [email protected].

8.3 AI Datokuéra Ñangareko

  • Umi marandu oñemondova’ekue umi AI mbohapýha tapicha (Anthropic, OpenAI)-pe oñemboguata umi ñe’ẽme’ẽ empresa-pegua datokuéra ñemboguata rehegua rupive. Nde datokuéra ndojeporúi oñembokatupyry hag̃ua imodelo AI propósito general rehegua.
  • Pe capacitación modelo AI rehegua Foodfy ojapova’ekue oipuru dato anónimo ha agregado ndohechakuaáiva umi usuario individual.
  • Umi salida AI rehegua ha e probabilística ha oñepresenta sugerencia térã estimación ramo, ndaha éi determinación definitiva ramo.

9. Tesãi ha Dato Biométrico (NutriLife) .

NutriLife processes sensitive health-related and biometric data that requires special protection under applicable privacy laws. This section provides detailed information about how we handle this data.

9.1 Categorías de Datos de Salud oñembyatýva

With your explicit consent, NutriLife may collect and process the following categories of health data:

  • Physical Measurements: Peso corporal, ijyvate, porcentaje de grasa corporal, circunferencia cintura, circunferencia cadera ha índice de masa corporal (IMC).
  • Vital Signs: Tuguype glucosa, tuguy presión ha korasõ ryrýi.
  • Tekove reko rehegua jehechaukaha: Sleep duration, hydration levels, daily step count, energy levels, stress levels, mood, and digestive health indicators.
  • Marandu Dietético rehegua: Tembi’u diario jeike, tembi’u ta’anga, caloría ha macronutriente je’u (proteína, carbohidrato, ikyra, fibra, asuka, sodio), micronutriente je’u (vitamina A guive B12 peve, calcio, hierro, potasio ha ambue), tipo dietético ha alergia hi’upyrã rehegua.
  • Perfil de Salud rehegua: Fecha de nacimiento, género, nivel de actividad, metas de salud (pérdida de peso, ganancia, mantenimiento), peso objetivo, condición médica, suplemento jeporu, embarazo térã estado de lactancia materna.
  • AI Análisis Datos rehegua: Umi fotografía tembi'u rehegua oñeanalisáva AI rupive, umi puntuación de confianza ha umi estimación nutricional AI rupive ojejapóva.

9.2 Base Legal ha Consentimiento rehegua

Umi dato salud ha biométrico oñemboja'o dato categoría especial GDPR (Artículo 9) ha léi equivalente mundo pukukue. Roprocesa ko’ã dato exclusivamente ne consentimiento explícito rehe, reme’ẽva NutriLife onboarding aja. Ikatu reipe’a ne consentimiento oimeha ára remboykévo NutriLife nde cuenta ñembohekorãme, upévagui oñembogue ne dato salud rehegua 30 ára ryepýpe.

9.3 Hembipotápe ñemboty

Your NutriLife health data is used strictly for the following purposes:

  • Ojekalkulávo nde tasa metabólica basal (RMC), gasto total diario energía (TDEE), ha umi meta personalizada caloría ha macronutriente rehegua.
  • Tracking your food diary entries and nutritional intake over time.
  • Providing AI-powered dietary suggestions and meal plan recommendations.
  • Ohechaukávo tendencia salud rehegua ha progreso umi meta declarada gotyo.

9.4 Datokuéra ñeñangareko mbarete

  • NutriLife health data is encrypted at rest and in transit using AES-256 and TLS 1.3 encryption.
  • Umi dato salud rehegua oñeñongatu aparte umi dato Plataforma general-gui orekóva control de acceso adicional.
  • NutriLife health data is NEVER shared with insurance companies, employers, advertisers, or any third party for purposes unrelated to providing the NutriLife service.
  • Umi dato salud rehegua Araka’eve ndojeporúi ojejapo hag̃ua publicidad ojepytasóva térã oñevende hag̃ua mbohapýha tapichápe.
  • Ojeike haguã umi dato salud rehegua Foodfy ryepýpe ojejoko personal ha sistema esencial-pe, péva estricto tekotevê ojekuaa haguã.

10. Foodfy Oro Datos de Suscripción rehegua

When you subscribe to Foodfy Gold, we process additional data related to your membership:

  • Subscription Data: Plan type, subscription status (active, trial, paused, cancelled, expired), start and end dates, trial period dates, and renewal dates.
  • Payment Data: Stripe customer ID, Stripe subscription ID, payment method (last four digits and card type only), and billing history. Full card details are stored exclusively by Stripe.
  • Beneficio Jeporu rehegua: Total orders placed with Gold benefits, delivery savings, discount savings, total calculated savings, and benefit redemption logs.

This data is processed to manage your subscription, apply benefits to eligible orders, calculate your savings, and provide you with subscription management features. Legal basis: performance of contract.

11. Cuenta Corporativa ha Mba’apoharakuéra Dato

Foodfy for Work (Cuentas Corporativas)-pe g̃uarã, oñembojaꞌo umi responsabilidad procesamiento de datos rehegua:

11.1 Datokuéra Controlador Joaju

The enrolling organization (employer) acts as the data controller for employee personal data provided through the Corporate Account. Foodfy acts as a data processor, processing employee data solely as instructed by the employer and in accordance with the Foodfy for Work Data Processing Agreement.

11.2 Dato oñembyatýva

  • Mba’apohara réra, dirección de correo electrónico ha rol Cuenta Corporativa ryepýpe (admin, gerente, mba’apohara).
  • Departamento, centro de costo, ha número de referencia mba'apohára ome'ëva empleador.
  • Wallet balance, credit history, spending history, and refund records.
  • Order history made using the corporate wallet, including items ordered and amounts.

11.3 Mba’apoharakuéra rembiaporã

Umi mba’apoharakuéra oguereko responsabilidad: (a) oguereko haguã base legal okomparti haguã mba’apoharakuéra dato Foodfy ndive; b) oikuaaukávo mba’apoharakuérape umi dato ñemboguata rehegua Plataforma rupive; c) ombohováivo umi mba’ejerure derecho de datos mba’apoharakuéra rehegua ojoajúva umi dato ocontroláva empleador; ha d) oasegura oñekumpliha umi léi ojeporúva mba’apo ha datokuéra ñeñangareko rehegua.

12. Drone Ñeme’ẽ Datos Operativos rehegua

When drone delivery services are used, the following additional data is processed:

  • Route and GPS Data: Umi tape vuelo drone rehegua, umi punto de relé DronePort tenda rupive, coordenada GPS ñeme’ẽ rehegua ha aravo ojeestimáva og̃uahẽha.
  • Datos Socio de Entrega rehegua: Umi socio de entrega ikatúva drone-pe g̃uarã: ubicación tiempo real-pe umi entrega activa aja, estadística de entrega ha registro operativo.
  • DronePort Datos rehegua: DronePort jepuru métrica, mantenimiento horario ha estado operativo rehegua.
  • Datos de Entrega Cliente rehegua: Precise delivery coordinates required for safe and accurate drone landing, which may be more precise than standard address-based delivery.

Umi dato entrega drone oñeprocesa base legal desempeño contrato ha, oimehápe, interés legítimo omantene haguã operaciones de entrega segura ha eficiente. Umi dato ubicación tiempo real-pegua umi Socio de Entrega rehegua oñemboguata umi entrega activa aja añoite.

13. Datokuéra Ñeñangareko rehegua

Foodfy omoañetéva medida técnica ha organizativa amplio, industria-pegua oñangareko hag̃ua nde dato personal rehe:

13.1 Ñangareko Técnico rehegua

  • Opaite marandu oñembohasáva cifrado ojeporúvo TLS 1.2+ (HTTPS oñembohapéva opaite Plataforma paha rupi).
  • Cifrado umi dato sensitivo opytuꞌu jave ojeporúvo cifrado AES-256.
  • Web application firewall (WAF) and DDoS protection powered by Cloudflare.
  • Red de entrega de contenido (CDN) orekóva caché borde rehegua rendimiento ha seguridad rehegua.
  • PCI DSS-compliant payment processing through Stripe, with no storage of full card numbers on Foodfy servers.
  • Two-factor authentication (2FA) available for all accounts and mandatory for privileged accounts.
  • API jekuaauka oipurúva token seguro orekóva limitación tasa ha detección de abuso.
  • Regular automated vulnerability scanning and penetration testing.

13.2 Ñangareko Organización rehegua

  • Role-based access controls ensuring employees can only access data necessary for their function.
  • Arquitectura de datos multiinquilino orekóva compartición base de datos tetãme, oaseguráva umi dato oúva jurisdicción iñambuéva ojeipe'áva lógicamente.
  • Umi acuerdo procesamiento de datos rehegua opaite proveedor servicio mbohapýha ndive.
  • Regular security awareness training for all personnel with access to personal data.
  • Umi procedimiento ombohováiva incidente ha peteî equipo de seguridad dedicado.
  • Datokuéra ñemboguejyrã jepokuaa: rombyaty umi dato oñeikotevẽva añoite upe mba’e oje’évape g̃uarã.

While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security and encourage all users to take steps to protect their own accounts, including using strong, unique passwords and enabling two-factor authentication.

14. Datokuéra Ñembohasa Tetãnguéra Joaju rehegua

Foodfy omba’apo 250+ tetã rupi infraestructura mundial ha red Territory Partner rupive. Umi dato personal ikatu oñembohasa ha oñemboguata tetã ambuépe ndaha’éiva tetã reikohápe. Rombohasávo dato personal internacionalmente, romoĩ salvaguardia hekopete ikatu hag̃uáicha ne datokuéra opyta protegido:

  • Standard Contractual Clauses (SCCs): Umi transferencia EEE/Reino Unido-gui tetãnguéra ndorekóiva decisión adecuación rehegua, roiporu Cláusulas Contractivas Estándar omonéîva Comisión Europea.
  • Umi Acuerdo de Procesamiento de Datos rehegua: Mayma proveedor servicio tercero-gua oprocesáva dato personal ore rérape ojejoko umi acuerdo procesamiento de datos amplio-pe oikehápe obligación protección de datos rehegua, umi requisito seguridad rehegua ha salvaguardia transferencia frontera rupive.
  • Datokuéra Ñemboja’o Tetãme g̃uarã: Our multi-tenant architecture uses country-specific database shards, which means operational data is stored and processed within or near the geographic region of the relevant Territory, minimizing cross-border transfers for day-to-day operations.
  • Decisiones Adecuación rehegua: Where available, we rely on adequacy decisions issued by relevant regulatory authorities.
  • Transfer Impact Assessments: We conduct transfer impact assessments for data transfers to countries without adequate data protection frameworks.

15. Nde Derecho Privasida rehegua

Odepende moõpa reime, reguereko opaichagua derecho umi dato personal rehegua. Foodfy oñemoĩ omomba’eguasúvo ko’ã derecho opavave puruhárape g̃uarã ko yvy ape ári:

15.1 Derecho Universal rehegua

Regardless of your location, all Foodfy users may:

  • Jeike: Request a copy of the personal data we hold about you in a structured, commonly used, machine-readable format.
  • Ñemyatyrõ rehegua: Request correction of inaccurate, incomplete, or outdated personal data. You can update most information directly through your account settings.
  • Ñembogue: Request deletion of your personal data, subject to legitimate retention requirements (legal obligations, dispute resolution, fraud prevention).
  • Restriction: Request that we restrict the processing of your personal data in certain circumstances.
  • Objection: Object to the processing of your personal data for direct marketing purposes. We will comply with all opt-out requests promptly.
  • Withdrawal of Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing.
  • Cuenta Ñembogue: Request complete deletion of your account and associated personal data. Account deletion requests are processed within 30 days.

15.2 Mba’éichapa ikatu jaipuru ñande derecho

You may exercise your rights by:

  • Eike ne cuenta ñembohekorã autoservicio datokuéra jesarekorã, ñemoambue preferencia ha cuenta ñembogue rehegua.
  • Omondo correo electrónico ore Oficial de Protección de Datos-pe [email protected] ne mba’ejerure reheve.
  • Omondo correo electrónico [email protected] umi consulta general privacidad rehegua.

We will verify your identity before processing requests and respond within the timeframe required by applicable law (typically 30 days, extendable by an additional 60 days for complex requests with prior notification to you).

16. Derecho Privacidad Regional rehegua

The following supplemental provisions apply based on your location and the applicable data protection law:

16.1 Área Económica Europea ha Reino Unido (GDPR / Reino Unido GDPR) .

Oiméramo reime EEA térã Reino Unido-pe, reguereko ko’ã derecho adicional Reglamento General de Protección de Datos rupive:

  • Datokuéra jeguerahakuaa: Receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
  • Decisión jejapópe Automatizado: Right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (GDPR Article 22). See Section 8.2.
  • Oficial de Protección de Datos rehegua: Our DPO can be reached at [email protected] for any GDPR-related inquiries.

16.2 California, Tetã peteĩ reko Amérikagua (CCPA / CPRA) .

Nde ha’éramo peteĩ tavaygua California-pe, reguereko ko’ã derecho pe Ley de Privacidad del Consumidor de California rupive (oñemoambueháicha Ley de Derechos Privacidad de California rupive):

  • Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected, the sources of collection, the business purpose for collecting, and the categories of third parties with whom we share it.
  • Right to Delete: Request deletion of your personal information, subject to statutory exceptions.
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Opt Out of Sale or Sharing: Foodfy ndohepyme’ẽi ne marandu personal. Ndorokompartii marandu personal publicidad conductual contexto-pe g̃uarã ne consentimiento’ỹre.
  • Right to Limit Use of Sensitive Personal Information: Request limitation of the use and disclosure of sensitive personal information to what is necessary for the purposes specified.
  • Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

Umi 12 jasy ohasava’ekuépe, ndorovendéi información personal odefiniháicha CCPA/CPRA.

16.3 Brasil (LGPD) rehegua .

Oiméramo reime Brasil-pe, reguereko derecho Lei Geral de Protecao de Dados (LGPD) rupive, umíva apytépe derecho: omoañete procesamiento, jeike, corrección, anonimato, portabilidad, ñembogue umi dato oñemboguatáva consentimiento reheve, marandu compartición rehegua ha derecho rejerure haguã Autoridade Nacional de Protecao de Dados (ANPD)-pe.

16.4 Asia-Pacífico (PDPA ha Léi ojoajúva) .

Oiméramo reime umi jurisdicción orekóva Ley de Protección de Datos Personales térã legislación equivalente (oikehápe Singapur, Tailandia ha ambue tetã Asia-Pacífico), reguereko derecho reike, remyatyrõ, rembogue, restricción ha portabilidad nde dato personal-pe he’iháicha léi local aplicable. Romba’apo ne marandu romoañetévo umi mba’e ojejeruréva PDPA-pe, oikehápe rohupyty consentimiento oñeikotevẽhápe ha rome’ẽ marandu hesakãva umi tembiapo procesamiento de datos rehegua.

16.5 Oriente Medio ha Áfrika Yvate gotyo

Umi puruhárape g̃uarã oĩva Emiratos Árabes Unidos, Arabia Saudita ha ambue MENA jurisdicción-pe, rokumpli umi reglamento aplicable protección de datos rehegua oikehápe Decreto-Ley Federal Emiratos Árabes Unidos-pegua Protección de Datos Personales rehegua, Léi de Protección de Datos Personales Arabia Saudita-pegua, ha umi marco regional equivalente. Kóvape oike umi mba’e ojejeruréva localización de datos rehegua oĩháme.

16.6 Ambue Jurisdicción rehegua

Foodfy oñemoĩ omoañetévo léi protección de datos rehegua opaite jurisdicción romba’apohápe. Nde jurisdicción oguerekóramo requisito específico protección de datos rehegua noñemoĩriva yvate, eñe’ẽ [email protected] ndive reikuaa hag̃ua mba’éichapa roñangareko nde derechokuérare nde léi local rupive.

17. Marandu Incumplimiento de Datos rehegua

Oiko ramo peteĩ incumplimiento dato personal rehegua omoĩva riesgo nde derecho ha libertad-pe, Foodfy:

  • Notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Article 33 and equivalent provisions in other jurisdictions.
  • Notify affected individuals without undue delay when the breach is likely to result in a high risk to their rights and freedoms, as required by GDPR Article 34 and equivalent provisions.
  • Provide details of the nature of the breach, the categories and approximate number of data subjects and records affected, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.
  • Ohai opaite incumplimiento dato personal rehegua, oikehápe umi mba’e, efecto ha acción remedial ojejapóva, ore registro incumplimiento interno rehegua he’iháicha.

Reguerovia ramo ne datokuéra oñembotapykue hague, pya’e eñe’ẽ [email protected].

18. Mitãnguéra ha Menor de edad

The Platform is not intended for use by individuals under the age of 18, or the age of digital consent in their jurisdiction (which may be lower, such as 16 in most EEA countries or 13 in the United States under COPPA). We do not knowingly collect personal information from children below the applicable age threshold.

Roikuaáramo rombyaty hague inadvertidamente umi dato personal peteĩ mitãgui oĩva pe umbral de edad aplicable guýpe, tuvakuéra térã guardián consentimiento’ỹre, pya’e rojapóta umi paso rombogue haĝua upe marandu ore sistema-gui. Reguerovia ramo rombyaty hague marandu peteĩ mitãgui, eñe’ẽmi orendive pya’e [email protected].

19. Mbohapyha Joaju ha Servicio rehegua

The Platform may contain links to third-party websites, applications, and services. This Privacy Policy does not apply to any third-party services, and Foodfy is not responsible for the privacy practices, content, or security of any third party. This includes Business Partner websites built using the Foodfy Website Builder, which may contain additional third-party integrations selected by the Business Partner.

We encourage you to review the privacy policy of every third-party service you interact with.

20. Ñemoambue Ko Polítika Privasida rehegua

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes:

  • We will update the "Last updated" date at the top of this page.
  • We will provide prominent notice on the Platform.
  • Umi ñemoambue material-pe g̃uarã tuicha o’afectáva mba’éichapa ro’examina ne datokuéra, roikuaaukáta ndéve correo electrónico rupive por lo menos 30 ára oike mboyve umi ñemoambue.
  • Where required by law, we will obtain your consent to material changes in data processing practices.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

21. Eñe’ẽ orendive

Oiméramo reguereko mba’e porandu, jepy’apy térã mba’ejerure ko Polítika Privasida rehegua, ne dato personal térã ore rembiapo protección de datos rehegua, eñe’ẽmi orendive ko’ã canal rupive:

We are committed to resolving any complaints about our collection or use of your personal data. If you have a complaint, please contact us first. If we are unable to resolve your concern, you have the right to lodge a complaint with your local data protection supervisory authority.