Privacy Policy

1. Data we collect

We collect the data necessary to operate the service: email address, Chilean RUT, full name, phone number, bank account for payouts, and platform usage data (groups, payments, Vault accesses).

• Identity data: name, email, RUT, phone number.
• Financial data: bank account for payouts (group owners only).
• Usage data: group history, payments, Vault accesses, and notifications.

2. How we use your data

We use your data exclusively to operate the service: verify identity, process payments, manage memberships, send group notifications, and comply with legal obligations. We do not sell your data to third parties.

3. Service operation

To provide the service we work with the following data processors, each with their own privacy policies: Supabase (database and authentication, hosted on AWS), Flow (card payment processing in Chile), Resend (transactional email delivery), Cloudflare Turnstile (anti-bot protection on forms), Meta (WhatsApp, for notices and support over that channel) and, to assist with the resolution of Vault disputes, an artificial intelligence provider.

4. Third parties and processors

The listed processors only receive the minimum data necessary for their function. Mitad does not share your data with advertisers or third parties outside the operational scope of the service.

• Supabase: authentication and database (AWS us-east-1 / eu-central-1).
• Flow: card payment processing in Chile.
• Resend: transactional and notification email delivery.
• Cloudflare Turnstile: anti-bot protection with no behavioral tracking.
• Artificial intelligence: generates a non-binding suggestion for the Mitad team from the text the parties have already submitted in a dispute case. It makes no automated decisions — resolution is always made by a person.
• Meta (WhatsApp): delivers the messages you exchange with Mitad over WhatsApp. We use them to handle your support request. Email and the support case form remain the official written record for money matters; WhatsApp does not replace them.

5. Your rights (Law 19,628)

Under Chile's Privacy Protection Law (Law 19,628), you have the right to access, rectify, cancel, and object to the processing of your personal data. You can exercise these rights by writing to hola@mitad.cl.

• Access: obtain confirmation and a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Cancellation: request deletion of your data when no longer needed.
• Objection: object to processing in justified cases.

6. Retention and deletion

We retain your data while your account is active or while necessary to comply with legal obligations. When you request account deletion, we remove personal data within 30 business days, except where legally required to retain it.

• Evidence from a Trust case about Vault access (for example, screenshots attached to an already-resolved case): we keep it for 18 months from the resolution date, even if you request account deletion before that period ends.
• That period specifies the general rule above for that evidence: it is not a second deletion promise, but the verifiable record of how each Trust case was resolved.
• WhatsApp conversations with Mitad: we keep them for 12 months to provide support. Access to these conversations is limited to authorized administrators.

7. Security

We apply reasonable technical and organizational measures to protect your data: AES-256 encryption for credentials, HTTPS connections, OTP authentication, and limited team access. We will notify you immediately in the event of a security incident.

8. Contact

To exercise your rights or ask about this policy, write to us at hola@mitad.cl. We respond within the timeframes established by law.