Skip to content

Previous version

You are reading version 2026-10-12, which was replaced on October 20, 2026. It is no longer in force.

See the current versionSee all versions

Draft pending legal review

This document is a draft and has not yet been reviewed by a lawyer. It may change.

Privacy Policy — Kopartner closed beta

Version 2026-10-12Last updated: October 12, 2026

This policy explains what personal data Kopartner processes, what for, with whom it shares it and what rights you have. It applies to the kopartner.app site, to the application and to each business’s space (<business>.kopartner.app). We do not sell your data or use it for advertising.

1. Who is responsible

Ricardo Parare, a natural person, holder of RIF V-20303927-8, domiciled in Caracas, Venezuela, is the controller of the data of Kopartner user accounts, that is, the data you register with and use the service with.

With respect to the data of your business’s customers, suppliers and employees that you upload to the application (see “Data of your business’s customers”), the controller is your business and Kopartner acts on its behalf.

Contact: hola@kopartner.app.

2. What data we process

Categories of data
CategoryExamplesWhere it comes from
Account and accessFull name, email, password (only an encrypted digest is stored, we never see it), role and permissions, language, time zone, profile photo if you upload oneYou
Your businessName, web address, logo, branches, currencies and rates, tax profile (business name, RIF, address, phone, email), plan and trial and payment dates, invitation code usedYou
Business operating dataProducts, inventory, sales, payments, cash register, purchases, tasks, calendar, images and filesYou and your team
Third-party data inside the businessCustomers (name, ID or RIF, phone, email, address, notes), suppliers and their contactsYour business
Team and invitationsEmail and role of the people you inviteYou
Payments to KopartnerBilling contact details and references of the payments you make to usYou
Use and securityRecord of relevant actions (who and when), usage attempts and limits, IP address on a temporary basis, technical browser dataGenerated when using the service
Technical errorsSee “Providers that process data” (Sentry)Generated when using the service
CommunicationsWhat you write to us by WhatsApp or email, including the access request (type of business, branches) and feedback (type, business name, email, screen and description)You
Record of acceptance of these documentsVersion, language and date on which you accepted themGenerated when you sign up

3. What we use the data for

Purposes of processing and their basis
PurposeBasis
Create and manage your account and provide the service to youYour request and performance of the contract
Security and abuse prevention (usage limits, anti-bot verification, checking for leaked passwords, one trial per email)Legitimate interest in protecting the service
Service messages (account confirmation, password recovery, invitations and important notices, such as changes to the service or the end of the beta)Performance of the contract
Support and handling of your inquiriesYour request
Detect and fix errors and measure performance; improve the product with your feedbackLegitimate interest and your consent when you submit it
Billing and collectionPerformance of the contract and legal obligations
Comply with the law and defend ourselves against claims; prove your acceptance of these documentsLegal obligation and legitimate interest

5. Providers that process data

To provide the service we use providers that process data on our behalf, each under its own terms and privacy policy. This is the current list:

Providers that process data
ProviderWhat we use it forWhat data it receivesWhere
SupabaseDatabase, sign-in and file storageAll the data of your account and your business; passwords as an encrypted digestUnited States
VercelApplication hosting, scheduled tasks and performance measurement (Speed Insights)The requests you make to the service (including your IP address) and technical performance dataUnited States
ResendSending service emails (confirmation, password recovery, invitations)Your email, your name and the content of the messageUnited States
Zoho MailService contact mailboxThe emails you write to us and your addressAccording to the data center configured with the provider
UpstashUsage limits to curb abuseA user identifier or your IP address as a temporary counterUnited States
SentryTechnical error loggingId and email of the signed-in user, their role, business id and slug, ids of the affected entities (for example of an order or a payment), the route and technical data of the error and the browser. It does not receive passwords, cookies or request bodies, and we apply filters that remove sensitive data before sendingAccording to the region configured with the provider
Cloudflare TurnstileAnti-bot verification on sign-in, sign-up and password recoveryTechnical browser signals and your IP address to solve the challengeGlobal
Have I Been PwnedCheck whether your password appears in known leaksOnly the first 5 characters of a hash of the password, never the password or the full hashGlobal
BCV / ExchangeRate-APISource of the reference exchange rates (the BCV is the source; we obtain them through ExchangeRate-API)No personal data: the queries are made by our serverNot applicable
WhatsApp (Meta)Channel that you start to request access, send feedback or write to usWhat you send in the messageAccording to WhatsApp

6. International transfers

Our providers operate mainly in the United States and in other countries, so your data is transferred and stored outside Venezuela. We take reasonable measures to protect it (encryption in transit, access control and the choice of providers with published security and privacy policies). By accepting this policy you expressly consent to those transfers.

7. How long we keep the data

  • Account and business data: while your account is active and up to 30 days after your access ends, so that you can request your copy; then we delete or anonymize it, or earlier if you ask us to (see “Export and deletion of your data at the end” in the Terms).
  • Unconfirmed accounts: if you do not confirm your email within 48 hours, we automatically delete the account and its space.
  • Files of expired unpaid trials: we automatically delete a business’s images and logos 60 days after its trial expired if it never paid. The remaining records are handled according to the first point.
  • Usage limits: counters associated with your IP or user are kept only for the duration of the limit window (minutes or hours).
  • Technical errors (Sentry): for Sentry’s retention period under the plan we use.
  • Action log and acceptance record: while your business exists in Kopartner.
  • Legal obligations: we may keep data for longer if a law requires it or to defend ourselves against a claim.
  • Backups: the database provider keeps backup copies that are overwritten in their normal cycle.

8. Your rights

The Constitution of the Bolivarian Republic of Venezuela (article 28) recognizes every person’s right to access the information and data about themselves or their property held in official or private records, with the exceptions established by law, as well as to know how it is used and for what purpose, and to ask the competent court for the updating, rectification or destruction of any that is erroneous or unlawfully affects their rights.

Within that framework you can ask us to: access your data, rectify it (you can edit much of it yourself in your profile), delete it, object to a processing, receive a copy in a structured format and withdraw your consent. Write to us at hola@kopartner.app from your account email; we may verify your identity and will endeavor to reply within 15 days. If you are a customer of a business that uses Kopartner, direct your request first to that business, which is the controller of your data; we can help it handle it.

If you consider that your rights have not been met, you can go to the competent authorities.

9. Data of your business’s customers

When you upload data of your customers, suppliers or employees (for example name, ID or RIF, phone, email and address), your business decides what it uses it for. Kopartner processes it on behalf of your business, only to provide the service, following your instructions (the actions you take in the application) and with security and confidentiality measures. We do not use it for our own purposes, we do not sell it and we only share it with the providers in the previous section or when the law requires it.

Your business is responsible for having the basis to process it, for informing those people and for handling their requests. Receipts shared by link show only minimal data: the customer’s ID appears partially hidden and they do not include their phone, email or address. If a person contacts us about data uploaded by a business, we refer them to that business. If you need a written data processing agreement, write to us.

10. Security

We apply reasonable measures to protect the data: each business is isolated from the others, access is controlled by roles and permissions, connections are encrypted (HTTPS), passwords are stored only as an encrypted digest, we use anti-bot verification and usage limits, we check that passwords are not in known leaks, public receipt links are signed and expire, and we filter sensitive data from error reports.

No system is infallible. If a security incident affecting your data occurs, we will inform you by email when appropriate.

11. Cookies and local storage

We only use cookies and local storage that are necessary for the application to work and to remember your preferences. We do not use advertising cookies, cross-site tracking cookies or third-party cookie-based analytics. That is why we do not show a cookie notice. You can delete them from your browser, but some features, such as keeping you signed in, will stop working.

Cookies and local storage
NameTypeWhat it is forHow long it lasts
sb-<project-ref>-auth-tokenEssential cookieKeeps you signed in (it may be split into several parts)Until you sign out (renewed while you use the app)
kp_pw_recoveryEssential cookieChecks that you change your password from a valid recovery link15 minutes
Kopartner-localePreference cookieRemembers your language1 year
sidebar_statePreference cookieRemembers whether the side menu is open or closed7 days
active_branch_idFunctional cookieRemembers the active branch30 days
themeLocal storageRemembers the light or dark themeUntil you delete it
kopartner-catalog-themeLocal storageRemembers the theme of the public catalogUntil you delete it
kopartner.receipt-formatLocal storageRemembers the last receipt format you usedUntil you delete it
tenant-tz-autodetected:<id>Session storageAvoids repeating the time zone detectionUntil you close the tab
Cache Storage (service worker)Functional storageBrowser cache: speeds up loading and lets you install the app; it stores static files and public images, not your account dataUntil it is updated or you delete it
Cloudflare TurnstileThird party, essentialAnti-bot verification; Cloudflare may use its own storageAccording to Cloudflare

12. Minors

Kopartner is aimed at businesses and at people over 18 years of age. We do not knowingly collect data of minors in user accounts; if we detect a minor’s account, we will delete it. If your business uploads data of minors as customers, it is responsible for doing so lawfully.

13. Changes to this policy

We may update this policy. We will publish the new version on this page with its version number and date and, if the change is substantial, we will notify you by email or inside the application 15 days in advance.

14. Contact and complaints

To exercise your rights or to make an inquiry or a complaint about your data, write to hola@kopartner.app. Controller: Ricardo Parare, RIF V-20303927-8, Caracas, Venezuela.

Privacy Policy — Kopartner closed beta