Appli-Car Privacy and Cookies Policy
Last updated: September 7, 2026
This policy explains which personal data we process when you visit www.appli-car.com, fill in a form, book a demo or message us on WhatsApp, for what purpose, on which legal basis, with whom we share it and how you can exercise your rights. It is drafted in accordance with Chilean Law No. 21,719 on personal data protection (and Law No. 19,628 until the former is fully in force).
1. Data controller
Controller: AppliCar SpA (RUT 78.197.167-7), titular de la marca Appli-Car, domiciled in Pasaje Volcán Villarrica N° 82, Villa Las Palmas, comuna de Tucapel, Región del Biobío, Chile. Legal representatives: Manuel Alejandro Jara Torres y Danilo Alexis Muñoz Cabezas.
Data subjects whose data we process: site visitors, people who contact us or book a demo (usually owners, managers or staff of auto repair shops) and those who message us on WhatsApp.
Channel for privacy, data-rights requests and general contact: hola@appli-car.com · WhatsApp +56 9 5071 6125.
This policy covers only the public website (landing) and its forms. Use of the Appli-Car GMS platform (web.appli-car.com) by workshops and their customers is governed by the Terms and Conditions and the platform's own privacy policy.
2. Which personal data we process and where it comes from
We only process data you give us or data generated by your browsing, depending on the channel:
| Channel | Data | Source |
|---|---|---|
| Contact form | Name, email, phone (with country code), message, language, page you wrote from, referrer and campaign parameters (UTM) | You |
| Book a demo | Name, email, phone, workshop name, chosen date/time, time zone | You |
| Technical emergency | Workshop name, email, WhatsApp, issue description and up to 3 attachments | You |
| Your number, profile name and the content of the conversation | You, via Meta Platforms | |
| Browsing | IP address (to detect country), device, browser, pages viewed and interaction events; cookie identifiers only if you accept them | Your device |
| Emails we send you | Opens, clicks and bounces of transactional emails (demo confirmation or reminder) | Your email client |
We do not request or process sensitive data (health, ethnic origin, beliefs, biometrics or other categories under Article 2 of Law 21,719) through the landing. Please do not include such data in messages or attachments.
The site is not directed at people under 18 and we do not knowingly collect their data. If we detect a minor's data without the consent of their legal representative, we will delete it.
3. Purposes and legal bases
| Purpose | Legal basis (Law 21,719) |
|---|---|
| Answer your enquiry, coordinate and remind you of the demo, handle a technical emergency | Your consent when submitting the form and pre-contractual steps you request |
| Send you commercial information about Appli-Car by email, WhatsApp or phone after your contact | Consent (form checkbox); you may withdraw it at any time |
| Attribute the origin of your contact (campaign, referrer) to measure our marketing | Legitimate interest in measuring our commercial actions, with minimal data |
| Show prices in your currency and language (country detection by IP) | Legitimate interest; the IP is not stored with your identity |
| Site analytics and personalised advertising (Google, Meta, TikTok) | Consent via the cookie banner; without it these tools are not loaded |
| Site security, abuse prevention and technical logging | Legitimate interest and compliance with legal obligations |
| Evidence your consent and handle your data-rights requests | Compliance with legal obligations |
We do not make decisions based solely on automated processing that produce legal effects or significantly affect you. Internal lead qualification (e.g. follow-up priority) is always reviewed by a person.
4. Who we share your data with (processors and third parties)
We do not sell or transfer your personal data. We share it only with providers acting on our behalf (data processors), under contract and with the security guarantees required by law:
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services (DynamoDB, API Gateway) | Store contacts (leads) and demo bookings | United States (us-east-1) |
| Vercel | Website hosting and delivery | United States / global network |
| Google (Workspace, Calendar, Meet) | Create the demo meeting and send you the invitation | United States |
| Google (Tag Manager, Analytics 4, Ads) | Analytics and campaign measurement — only with your cookie consent (Google Ads runs in consent mode and sets no advertising cookies without your acceptance) | United States |
| Meta Platforms (WhatsApp Business, Meta Pixel) | WhatsApp messaging; the pixel only with your consent | United States |
| TikTok | Advertising measurement — only with your consent | United States / Singapore |
| Resend | Transactional emails (confirmations, reminders, internal reports) | United States |
| n8n (internal automation) and Appli-Car's internal CRM | Coordinate the commercial follow-up of your request by our team | Own servers / United States |
We may also disclose data to public authorities when required by law or court order, and to a potential acquirer in the event of a merger or sale of the company, informing you beforehand.
5. International transfers
Several of our providers process data outside Chile, mainly in the United States. Until the Personal Data Protection Agency publishes its list of countries with an adequate level of protection, these transfers rely, under Law 21,719, on: (a) with providers offering equivalent contractual safeguards (contractual clauses and data processing agreements, including their security and confidentiality obligations), or (b) when necessary to perform what you request (e.g. creating your demo video call), or (c) with your consent, in the case of analytics and advertising cookies.
You can request a copy of the applicable safeguards by writing to hola@appli-car.com.
6. Retention periods
| Data | Period |
|---|---|
| Contacts and demo requests that do not become customers | Up to 24 months from the last interaction; then deleted or anonymised |
| Contacts who subscribe to Appli-Car | For the duration of the contract and subsequent legal periods (tax and limitation) |
| Technical emergency reports and attachments | Up to 12 months after resolution |
| WhatsApp conversations | While the commercial follow-up lasts and up to 24 months |
| Record of your consent (date, version of this policy) | While we process your data and up to 5 years afterwards, as compliance evidence |
| Cookies | As per the table in section 9; your cookie decision is stored in your browser until you change it |
7. Your rights and how to exercise them
As a data subject you have the right to:
- Access: know whether we process your data and obtain a copy, with the information in this policy.
- Rectification: correct inaccurate, incomplete or outdated data.
- Erasure: ask us to delete your data when no longer necessary, when you withdraw consent or when processing is unlawful.
- Objection: object to processing based on legitimate interest and, always, to the use of your data for direct marketing.
- Portability: receive the data you gave us in a structured, commonly used format, or ask us to transmit it to another controller.
- Blocking: request temporary suspension of processing while a rectification, erasure or objection request is resolved.
- Withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise them, write to hola@appli-car.com stating your name, the email or phone you used with us and the right you wish to exercise. We will acknowledge receipt and reply in writing within 30 calendar days at most, extendable once by another 30 days for complex requests, stating the reason. Blocking requests are handled within 2 business days. We may ask you to prove your identity in a proportionate way. Rectification, erasure and objection are always free; access is free at least once per quarter. If we refuse a request, we will state the grounds and that you have 30 business days to complain to the Agency.
To stop receiving commercial communications, simply reply “STOP” on WhatsApp or by email, or use the unsubscribe link included in our emails.
If you believe we have not handled your request or that the processing breaches the law, you may lodge a complaint with Chile's Personal Data Protection Agency (Agencia de Protección de Datos Personales, created by Law 21,719) or, until it becomes operational, before the competent courts under Law 19,628. If you live in the EU, UK or Brazil you may also contact your local authority.
8. Security
- TLS encryption (HTTPS) on all communications and security headers (HSTS, CSP, X-Frame-Options).
- Access restricted to the commercial and technical staff who need it, with individual credentials and secrets managed outside the code.
- Providers with recognised security certifications (e.g. ISO 27001 and SOC 2 at AWS, Google and Vercel).
- Email addresses are masked in technical logs and we store no card numbers: the landing does not process payments.
- Should a security breach affect your data, we will notify the Personal Data Protection Agency and, where the risk requires it, you, within the legal deadlines.
10. Changes to this policy
We will publish any change here, updating the “Last updated” date and the version number. If a change materially affects how we use your data, we will inform you by email or through a prominent notice on the site before it takes effect.
Version 2026-09-07.
This is a courtesy translation. For legal purposes the Spanish version prevails in case of discrepancies.