Previous version
Draft pending legal review
Privacy Policy — Kopartner closed beta
Version 2026-10-12Last updated: October 12, 2026
This policy explains what personal data Kopartner processes, what for, with whom it shares it and what rights you have. It applies to the kopartner.app site, to the application and to each business’s space (<business>.kopartner.app). We do not sell your data or use it for advertising.
1. Who is responsible
Ricardo Parare, a natural person, holder of RIF V-20303927-8, domiciled in Caracas, Venezuela, is the controller of the data of Kopartner user accounts, that is, the data you register with and use the service with.
With respect to the data of your business’s customers, suppliers and employees that you upload to the application (see “Data of your business’s customers”), the controller is your business and Kopartner acts on its behalf.
Contact: hola@kopartner.app.
2. What data we process
| Category | Examples | Where it comes from |
|---|---|---|
| Account and access | Full name, email, password (only an encrypted digest is stored, we never see it), role and permissions, language, time zone, profile photo if you upload one | You |
| Your business | Name, web address, logo, branches, currencies and rates, tax profile (business name, RIF, address, phone, email), plan and trial and payment dates, invitation code used | You |
| Business operating data | Products, inventory, sales, payments, cash register, purchases, tasks, calendar, images and files | You and your team |
| Third-party data inside the business | Customers (name, ID or RIF, phone, email, address, notes), suppliers and their contacts | Your business |
| Team and invitations | Email and role of the people you invite | You |
| Payments to Kopartner | Billing contact details and references of the payments you make to us | You |
| Use and security | Record of relevant actions (who and when), usage attempts and limits, IP address on a temporary basis, technical browser data | Generated when using the service |
| Technical errors | See “Providers that process data” (Sentry) | Generated when using the service |
| Communications | What you write to us by WhatsApp or email, including the access request (type of business, branches) and feedback (type, business name, email, screen and description) | You |
| Record of acceptance of these documents | Version, language and date on which you accepted them | Generated when you sign up |
3. What we use the data for
| Purpose | Basis |
|---|---|
| Create and manage your account and provide the service to you | Your request and performance of the contract |
| Security and abuse prevention (usage limits, anti-bot verification, checking for leaked passwords, one trial per email) | Legitimate interest in protecting the service |
| Service messages (account confirmation, password recovery, invitations and important notices, such as changes to the service or the end of the beta) | Performance of the contract |
| Support and handling of your inquiries | Your request |
| Detect and fix errors and measure performance; improve the product with your feedback | Legitimate interest and your consent when you submit it |
| Billing and collection | Performance of the contract and legal obligations |
| Comply with the law and defend ourselves against claims; prove your acceptance of these documents | Legal obligation and legitimate interest |
4. Your consent
When you sign up you tick a box, which is not pre-ticked, to accept the Terms and Conditions and this Policy. We keep a record of your acceptance with the version of the documents, the language in which you saw them and the date and time at which you accepted.
You can withdraw your consent by closing your account; withdrawing it does not affect processing carried out before. For processing necessary to give you the service (such as your account), withdrawing consent means we will not be able to keep providing it. If we update these documents substantially, we may ask you to accept them again.
5. Providers that process data
To provide the service we use providers that process data on our behalf, each under its own terms and privacy policy. This is the current list:
| Provider | What we use it for | What data it receives | Where |
|---|---|---|---|
| Supabase | Database, sign-in and file storage | All the data of your account and your business; passwords as an encrypted digest | United States |
| Vercel | Application hosting, scheduled tasks and performance measurement (Speed Insights) | The requests you make to the service (including your IP address) and technical performance data | United States |
| Resend | Sending service emails (confirmation, password recovery, invitations) | Your email, your name and the content of the message | United States |
| Zoho Mail | Service contact mailbox | The emails you write to us and your address | According to the data center configured with the provider |
| Upstash | Usage limits to curb abuse | A user identifier or your IP address as a temporary counter | United States |
| Sentry | Technical error logging | Id and email of the signed-in user, their role, business id and slug, ids of the affected entities (for example of an order or a payment), the route and technical data of the error and the browser. It does not receive passwords, cookies or request bodies, and we apply filters that remove sensitive data before sending | According to the region configured with the provider |
| Cloudflare Turnstile | Anti-bot verification on sign-in, sign-up and password recovery | Technical browser signals and your IP address to solve the challenge | Global |
| Have I Been Pwned | Check whether your password appears in known leaks | Only the first 5 characters of a hash of the password, never the password or the full hash | Global |
| BCV / ExchangeRate-API | Source of the reference exchange rates (the BCV is the source; we obtain them through ExchangeRate-API) | No personal data: the queries are made by our server | Not applicable |
| WhatsApp (Meta) | Channel that you start to request access, send feedback or write to us | What you send in the message | According to WhatsApp |
6. International transfers
Our providers operate mainly in the United States and in other countries, so your data is transferred and stored outside Venezuela. We take reasonable measures to protect it (encryption in transit, access control and the choice of providers with published security and privacy policies). By accepting this policy you expressly consent to those transfers.
7. How long we keep the data
- Account and business data: while your account is active and up to 30 days after your access ends, so that you can request your copy; then we delete or anonymize it, or earlier if you ask us to (see “Export and deletion of your data at the end” in the Terms).
- Unconfirmed accounts: if you do not confirm your email within 48 hours, we automatically delete the account and its space.
- Files of expired unpaid trials: we automatically delete a business’s images and logos 60 days after its trial expired if it never paid. The remaining records are handled according to the first point.
- Usage limits: counters associated with your IP or user are kept only for the duration of the limit window (minutes or hours).
- Technical errors (Sentry): for Sentry’s retention period under the plan we use.
- Action log and acceptance record: while your business exists in Kopartner.
- Legal obligations: we may keep data for longer if a law requires it or to defend ourselves against a claim.
- Backups: the database provider keeps backup copies that are overwritten in their normal cycle.
8. Your rights
The Constitution of the Bolivarian Republic of Venezuela (article 28) recognizes every person’s right to access the information and data about themselves or their property held in official or private records, with the exceptions established by law, as well as to know how it is used and for what purpose, and to ask the competent court for the updating, rectification or destruction of any that is erroneous or unlawfully affects their rights.
Within that framework you can ask us to: access your data, rectify it (you can edit much of it yourself in your profile), delete it, object to a processing, receive a copy in a structured format and withdraw your consent. Write to us at hola@kopartner.app from your account email; we may verify your identity and will endeavor to reply within 15 days. If you are a customer of a business that uses Kopartner, direct your request first to that business, which is the controller of your data; we can help it handle it.
If you consider that your rights have not been met, you can go to the competent authorities.
9. Data of your business’s customers
When you upload data of your customers, suppliers or employees (for example name, ID or RIF, phone, email and address), your business decides what it uses it for. Kopartner processes it on behalf of your business, only to provide the service, following your instructions (the actions you take in the application) and with security and confidentiality measures. We do not use it for our own purposes, we do not sell it and we only share it with the providers in the previous section or when the law requires it.
Your business is responsible for having the basis to process it, for informing those people and for handling their requests. Receipts shared by link show only minimal data: the customer’s ID appears partially hidden and they do not include their phone, email or address. If a person contacts us about data uploaded by a business, we refer them to that business. If you need a written data processing agreement, write to us.
10. Security
We apply reasonable measures to protect the data: each business is isolated from the others, access is controlled by roles and permissions, connections are encrypted (HTTPS), passwords are stored only as an encrypted digest, we use anti-bot verification and usage limits, we check that passwords are not in known leaks, public receipt links are signed and expire, and we filter sensitive data from error reports.
No system is infallible. If a security incident affecting your data occurs, we will inform you by email when appropriate.
12. Minors
Kopartner is aimed at businesses and at people over 18 years of age. We do not knowingly collect data of minors in user accounts; if we detect a minor’s account, we will delete it. If your business uploads data of minors as customers, it is responsible for doing so lawfully.
13. Changes to this policy
We may update this policy. We will publish the new version on this page with its version number and date and, if the change is substantial, we will notify you by email or inside the application 15 days in advance.
14. Contact and complaints
To exercise your rights or to make an inquiry or a complaint about your data, write to hola@kopartner.app. Controller: Ricardo Parare, RIF V-20303927-8, Caracas, Venezuela.

