Privacy Policy

The data controller is IRON BULL SpA (Chilean tax ID 78.502.064-2), Colo Colo 379, office 706, Concepción, Chile, which operates the dinamify.com and dinamify.app sites under the Dinamify brand. For privacy questions or to exercise your rights, write to contacto@dinamify.com.

a) Business accounts. The name of the business and of whoever manages it, email and phone. To sign in we use a code sent to your email, a password (stored encrypted by our authentication provider) or your Google or Apple account, from which we receive your name and email. If you invoice as a company, your legal name, tax ID and line of business. If you use the Documents module, the digital certificate for Chile's tax service (SII) that you provide —stored encrypted— and the details of the tax documents you issue.

b) Customers of the businesses (diners and shoppers). When you make a reservation, place an order or buy from a business's online store, join a venue's club or Global Pass, or write through a page's form, we collect what you provide: typically name, email and phone; for a purchase with delivery, the shipping address and, if you request an invoice, your company's details; and, only if the business asks for it, national ID number or date of birth. As you use the service, your history with that business is recorded: reservations, orders, purchases, visits, stamps, points and redemptions. If you choose to, we store preferences such as allergens you want to avoid, used only to filter menus.

c) Apple Wallet and Google Wallet cards. If you add a club card to your Wallet, the pass contains your name, member number, stamps, the reward and a QR code. To keep it up to date we store the technical identifier Apple provides when the pass is registered; we do not receive your phone number. When the pass shows up near a venue, it is your phone that works that out: we do not receive your location.

d) Use of menus and pages. For the business's statistics we record visits and taps on dishes and links, with a random session identifier, the IP address transformed with an irreversible hash that changes daily, and the approximate city and country that our hosting provider infers from the connection. We do not store the IP, use advertising cookies or track you across sites.

e) Public data the business asks us to use. If you give us your business's Instagram username, we use the official Instagram API (Meta) to read that professional profile's public data: name, photo, bio, website, followers and recent posts. We may also look up the venue's public data on Google (name, address, opening hours, rating and reviews) and, if you connect a YouTube channel, its subscriber count. We use this only to build and display the business's own page, and you can remove it from the dashboard.

f) Browser notifications. If you enable browser notifications —for example, so that staff receive calls from tables— we store the technical subscription provided by the browser.

• To run the service: display menus and pages, manage reservations, orders, online sales and loyalty programs, issue tax documents and keep Wallet cards up to date.
• To send you transactional messages —sign-in codes, confirmations, reminders and notices from the club you joined— by email, WhatsApp or your Wallet.
• To send you a venue’s promotions only if you agreed to receive them, always with the option to unsubscribe.
• To provide statistics to the business, including a ranking of its most frequent customers, based on the days with a visit over the last 90 days, which the business may show you on your card.
• To protect the platform against fraud and abuse (for example, by limiting stamps per visit), detect errors and back up the information so it is not lost.

We process this data because it is necessary to provide the service you or the business signed up for, because you gave your consent when we asked for it (for example, for promotions or notifications), or based on our legitimate interest in keeping the service secure.

For diners' and shoppers' data, the business you use is the data controller and Dinamify acts as data processor, handling it according to the business's instructions and this policy. In online stores, the business is also the seller: Dinamify provides the software and is not a party to the sale. In Global Pass —your single account for the venues in the network— Dinamify is responsible for the account, and each venue is responsible for what it processes in its own club. We do not sell personal data or use it for third-party advertising.

We use language models from Anthropic (Claude) to translate menus and pages, read menus that a business imports from a file or a link, suggest tags and pairings, write product listings from their photos, recognize a business's category and summarize its public reviews, of which we send only the text and the rating, without the name of the author. We do not send diners' or shoppers' contact details to these models. Under its commercial terms, Anthropic does not use this data to train its models.

We use providers that process data on our behalf and only to provide the service:

• Hosting and database: Vercel and Supabase.
• Email: Resend.
• Payments: Transbank, PayPal and Mercado Pago. We never see or store card numbers.
• Messaging and social networks: Meta (WhatsApp and Instagram).
• Apple: Wallet, Sign in with Apple and Apple Maps.
• Google: Wallet, Sign in with Google, Maps and Places, YouTube and Google Fonts.
• Artificial intelligence: Anthropic.
• Backups: GitHub, which stores encrypted copies.
• Error and performance monitoring of the site, only if you accept it in the cookie notice: Sentry.
• Reading public web pages to import menus: ScraperAPI and ScrapingBee (they receive no diner data).

Several of these providers process data outside Chile, mainly in the United States. We choose providers with contractual security and confidentiality commitments, and give each one only what it needs for its function.

We keep data while the business account is active or for as long as it is needed for the purpose it was collected for. When an account is closed, we delete or anonymize the data within a reasonable period, unless the law requires otherwise: tax documents are kept for the periods required by law. Backups are encrypted and renewed every day; older copies are deleted after 7 days. Data obtained from Instagram or Google is kept only while it is part of the business's page.

Under Chile's Law 19.628 and Law 21.719 on personal data protection, you may request access to, rectification, erasure and portability of your data, and object to its processing. If you are a diner or bought from a business's store, you can exercise these rights with that business or by writing to us at contacto@dinamify.com; we will pass your request on. You can also remove the card from your Wallet at any time and unsubscribe from a venue's promotions using the link in its emails.

Data deletion. To ask us to delete your data —including data obtained from Instagram— write to contacto@dinamify.com from your account's email with the subject “Delete my data”. We delete it within 30 days at most and confirm by email.

We apply appropriate technical and organizational measures: encryption in transit (HTTPS); isolation of each business's data in the database; role-based access control; anonymization of IP addresses in statistics; encryption of SII certificates and of backups; and an error log that alerts us immediately when something fails.

We use only essential cookies: the session for the dashboard and for your Dinamify account. In your browser we also store preferences such as language, visual theme and your favorite dishes, plus an anonymous session identifier for statistics. If you accept it in the cookie notice, we also measure the site's errors and performance. We do not use advertising or third-party tracking cookies.

Dinamify accounts are intended for people over 18. Public menus can be viewed by anyone, but we do not knowingly collect personal data from minors.

If this policy changes significantly, we will announce it by email or in the dashboard before the changes take effect, showing the date of the last update at the top of the document. This policy is published in Spanish, English and Portuguese; in case of any discrepancy, the Spanish version prevails.