Privacy Policy

This policy applies to information collected through the Cargavia Technologies corporate website. Each platform we operate may publish a product-specific privacy notice that describes its own data handling in more detail. Where a product-specific notice differs from this corporate policy, the product-specific notice applies for activity on that platform.

The policy covers information collected when you visit this site, contact us, sign up for updates, interact with our platforms, or communicate with us through messaging channels such as WhatsApp.

We collect the following categories of information:

• Information you provide. Your name, email, phone number, company, role, country, and the contents of any message, form, or document you send us.
• Account & platform data. Where you use a Cargavia Technologies platform, we process the data necessary to provide that platform — for example, account credentials, configuration settings, contact lists you import, and operational records.
• Communications. Messages and metadata exchanged with us or routed through our communications and automation infrastructure (including email, WhatsApp, and contact forms).
• Usage & device information. IP address, device and browser type, operating system, referring URLs, pages viewed, timestamps, and similar information collected automatically when you use our sites and platforms.
• Cookies & similar technologies. Information collected via cookies and similar technologies, as described in our Cookie Policy.
• Information from third parties. Information we receive from integrations, service providers, identity verification partners, advertising or analytics providers, and public sources, where applicable.

We use information for purposes that include:

• Operating, maintaining, securing, and improving our website and platforms.
• Providing the services you or your organization request — including logistics workflows, marketplace activity, websites, communications, and automation.
• Routing, responding to, and following up on inquiries you send through our contact channels.
• Operating communications and automation systems on behalf of our users where they have chosen to use those features.
• Performance, reliability, and security monitoring — detecting and preventing fraud, abuse, and policy violations.
• Analytics and aggregated insight to understand and improve our products.
• Complying with applicable legal, regulatory, and contractual obligations.

Where we rely on a legal basis to process personal information, that basis is typically the performance of a contract, our legitimate business interests in operating and improving our services, compliance with legal obligations, or your consent — depending on the activity and applicable law.

Some Cargavia Technologies platforms — most notably Mandivo — provide business messaging capabilities including WhatsApp Business integrations. When these features are used, we process:

• Phone numbers, message contents, message metadata, and delivery status of messages sent or received through our platforms.
• Records of opt-in and opt-out events, including the source and timestamp of consent and any subsequent changes.
• Configuration data for templates, automated workflows, and routing rules established by our users.

Messaging features are governed by additional rules in our WhatsApp Messaging Policy and our Acceptable Use Policy. Users of our messaging capabilities are responsible for obtaining valid consent from message recipients and for complying with WhatsApp Business policies and applicable law.

Some of our products provide automation features and AI-assisted workflows — for example, automated lead routing, message triage, classification, drafting assistance, and workflow execution. In connection with these features, we may process inputs and outputs that flow through the workflow, including contact information, message text, metadata, and configuration data.

We do not use customer content from our platforms to train general-purpose foundation models. Where AI-assisted features rely on third-party model providers, we select providers that offer appropriate data-handling commitments and we configure those integrations to minimize unnecessary data exposure.

AI-generated content can be incorrect, incomplete, or unsuitable for a particular use case. Users remain responsible for reviewing AI-assisted outputs before relying on them for operational decisions.

We use cookies and similar technologies for essential functionality, performance, analytics, and security. We may use first-party and third-party analytics tools to understand usage patterns and improve our services.

For details on the categories of cookies we use and how to manage them, see our Cookie Policy.

We do not sell personal information. We share information only as needed to operate our business and provide our services, including with:

• Service providers and sub-processors. Cloud infrastructure providers, hosting providers, communications and messaging providers (including WhatsApp Business API providers), analytics vendors, security and fraud-prevention providers, customer support tools, and other vendors that support our operations under written contracts.
• Corporate affiliates. Other Cargavia Technologies platforms where necessary for consistent operations across our portfolio.
• Integration partners. Where you connect a third-party service (for example, a CRM, helpdesk, or messaging provider), data flows between that service and our platform as you have configured.
• Legal & safety. Authorities, regulators, courts, or other parties where required by law, legal process, or to protect the rights, property, or safety of Cargavia Technologies, our users, or others.
• Business transfers. In connection with a corporate transaction such as a merger, acquisition, financing, or sale of assets, subject to standard confidentiality obligations.

Cargavia Technologies Inc. is incorporated in Canada and operates internationally, with a primary market focus on Latin America. Information may be processed in Canada, in the country where you are located, and in other jurisdictions where our service providers operate.

Where required by applicable law, we rely on appropriate safeguards for international data transfers — such as contractual protections with service providers — to support the lawful movement of data across borders.

We retain information for as long as necessary to provide our services, fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods vary based on the type of information, the context in which it was collected, and applicable requirements.

When information is no longer needed, we take reasonable steps to delete or anonymize it. Backup and operational systems may retain data for limited additional periods.

We apply reasonable administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, and destruction. A high-level overview of these measures is available in our Data Processing & Security Overview.

No system can be guaranteed to be fully secure. You are responsible for keeping your credentials confidential and for promptly notifying us of any suspected unauthorized access to your account.

Depending on your jurisdiction, you may have rights regarding personal information we process about you. These may include the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of certain information.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a competent supervisory authority.

To exercise these rights, contact us using the details in the Contact section. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law.

Our website and platforms are intended for business users and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take appropriate steps to address it.

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of the page. Material changes will be reflected here and, where appropriate, communicated through additional means.

For privacy-related questions, contact privacy@cargavia.com or info@cargavia.com. Additional company information is available on our Contact & Legal Notice page.

Cargavia Technologies Inc. — Canadian technology company.