Privacy policy

Who is responsible for your data

DomiMo is a platform for businesses to run their deliveries: they take orders, assign couriers and let the customer follow the delivery. This policy explains how we process personal data under Colombia’s Law 1581 of 2012 and its regulations. If this translation and the Spanish version differ, the Spanish version governs.

Data controller: Domimo, identified by 901234567-8, located at Pereira, Pereira, Colombia. Email: santigp258@gmail.com. Phone: +573184241938.

When a business enters its customers’ and recipients’ data in DomiMo, the business is the controller of that data and DomiMo acts as its processor: we use it only to provide the service, on the business’s instructions. The business must have those people’s authorization.

What data we collect

From account holders (business owners and teams, couriers and DomiMo staff): name, email, phone, profile photo, language, role, and the password, which we store irreversibly hashed. For each session we keep the type of browser or app.

From businesses: name, contact phone and email, billing email, pickup address and point, city and logo, plus the record of their team’s actions.

From couriers: vehicle type and the last characters of the plate. While they carry an order on its way, the app sends their location (about every 5 seconds or 10 meters, also in the background) to show the route; it stops when the delivery ends or they sign out.

From customers and recipients, entered by the business: name, phone, email, addresses with their location and directions, order notes and, when the business uses them, the proof-of-delivery photo and the rating they leave (1 to 5 stars and an optional comment).

From plan payments: the method, amount, VAT, reference and the result the payment gateway reports. We never receive or store card numbers: payment happens on the gateway’s page.

From devices with the mobile app: the notification identifier, the platform and the app version.

Why we use it

To provide the service: create and protect your account, manage orders and deliveries, show customers the status and location of their delivery through a tracking link, and send the emails and notices the service needs (sign-in codes, invitations, payment reminders and delivery notices).

To charge for plans, keep accounts and meet legal and tax obligations.

To keep the platform secure and running: detect errors, prevent abuse and answer support requests.

We do not sell personal data or use it for third-party advertising.

Who we share it with

With providers that help us operate, each with only what it needs: Railway (servers, database, files and backups), Resend (email delivery), Sentry (error reports, with sensitive data removed before sending), Pusher (real-time notices carrying only identifiers and statuses) and Wompi (plan payments). Maps load from OpenFreeMap directly in your browser.

These providers are in the United States, so data is transferred internationally. We do so with providers that offer adequate protection, under the conditions of article 26 of Law 1581 of 2012.

Someone who receives a tracking link sees, while the link is valid, the business’s name, logo and phone, the order’s status and items (without prices), the delivery address, the courier’s display name, vehicle and phone, their location on the way and, where used, the handover code and the proof photo.

We will also share data when a competent authority orders it under the law.

How long we keep it

A delivery’s detailed route is deleted 7 days after it ends, and its simplified path after 90 days; we keep only the distance travelled.

Tracking links stop working 2 to 24 hours after the delivery, as the business configures. The record of emails carrying tracking links is deleted after 30 days.

Sign-in codes expire within 10 to 15 minutes and are deleted once used. Sessions last 30 days when unused.

Payments are kept for as long as accounting and tax rules require.

Other data (accounts, businesses, customers, orders and files) is kept while the account or business is active and, afterwards, only as long as needed to meet legal obligations or handle claims. Database backups run every night and the 7 most recent are kept.

Your rights under Colombia's Law 1581 of 2012

You may know, update and correct your data; ask for proof of the authorization you gave us; learn how we use it; revoke the authorization or ask us to delete it where no legal or contractual duty requires us to keep it; access it free of charge; and file complaints with the Superintendence of Industry and Commerce (SIC).

To exercise them, write to santigp258@gmail.com from your account’s email, stating your name, what you are asking for and, for a claim, the facts and any documents you want to provide. We answer inquiries within 10 business days and claims within 15 business days; if we need more time, we will tell you beforehand, within the legal limits.

If a business entered your data (for example, as the recipient of an order), you may also contact that business, which is its controller; we will help it handle your request.

Security and minors

We protect data with encrypted connections, irreversibly hashed passwords, encrypted handover codes, role-based access and backups. No system is infallible: if an incident affects your data, we will report it to the authority and to those affected as the law requires.

DomiMo is not intended for people under 18. If a minor gave us data without their guardian’s authorization, write to us and we will delete it.

Changes and how to reach us

If we change this policy, we will publish the new version on this page with its effective date and, for a significant change, notify you by email.

For any question about your data: santigp258@gmail.com.