# Privacy Policy

Last updated: June 2026

*Notice: This document is a general template made available for transparency purposes. It does not constitute legal advice and does not guarantee full compliance with applicable regulations. We recommend that it be reviewed by a qualified legal professional licensed in the Republic of Paraguay before relying on it.*

At CobrarYa we value and respect your privacy. This Privacy Policy explains what personal data we collect through our website www.cobrarya.com.py, the purposes for which we process it, with whom we share it, and what your rights are under Law No. 7,593/2025 "On the Protection of Personal Data in the Republic of Paraguay," enacted on 27 November 2025.

## Data Controller
The controller responsible for the processing of your personal data is CobrarYa, domiciled in the city of Asunción, Republic of Paraguay.
- Email: contacto@cobrarya.com.py
- WhatsApp / phone: +595 983 552570
- Website: www.cobrarya.com.py
For any inquiry regarding this Policy or the processing of your data, you may contact us through the means indicated above.

## Data We Collect
CobrarYa is currently in a pre-launch stage. During this stage, the website collects only data related to the waitlist and demo requests. Specifically:
- Data you provide through the waitlist or demo-request form: name, shop or business name, phone or WhatsApp number, email address (optional), RUC (Paraguayan tax ID, optional), and an optional message.
- Technical data generated automatically (server logs): IP address, browser type and user agent, date and time of access, and similar operational and security data.
- Essential local storage: a visual theme preference ('cy-theme') stored in your browser's local storage. We do not use cookies or third-party advertising or analytics trackers.
When you use the CobrarYa product in the future, we may process additional data inherent to the operation of the system, such as sales records, customer running-accounts, and fiscal documents (DE / CDC / KuDE) generated through the system. Such processing will be governed by the conditions communicated at the time the service is contracted.

## Purposes and Legal Basis
We process your personal data for the following purposes:
- To manage your enrollment on the waitlist and handle your demo request. Basis: your consent and the performance of pre-contractual measures requested by you.
- To contact you by phone, WhatsApp, or email to answer inquiries, schedule demos, and inform you about the launch and availability of the service. Basis: your consent.
- To ensure the security, operation, and abuse prevention of the website (server logs). Basis: our legitimate interest and compliance with security obligations.
- To comply with applicable legal obligations. Basis: compliance with a legal obligation.
We do not use your data for purposes other than those stated here without first requesting your consent, in accordance with the principles of purpose limitation and data minimization.

## Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected. Waitlist data is retained while you remain interested in the service or until you request its deletion. Technical server logs are retained for limited periods for security purposes. Once the period or purpose of processing has ended, data will be deleted or anonymized, unless a legal obligation requires longer retention.

## With Whom We Share Your Data
We do not sell your personal data. We may share it with the following recipients, in their capacity as data processors or where legally required:
- Infrastructure and hosting providers: we use Cloudflare for hosting, delivery, and data storage (including the Cloudflare D1 database). Cloudflare acts as a processor on behalf of CobrarYa.
- Messaging: when you contact us via WhatsApp, your data is processed by Meta Platforms in accordance with that platform's policies.
- Tax authorities (product use): when you use the product, electronic fiscal documents (DE / CDC / KuDE) will be shared with the Paraguayan tax authority (SET / DNIT) through the National Electronic Invoicing System (SIFEN), as required by tax regulations.
- Legal requirements: we may disclose data when required by a competent authority or to comply with a legal obligation.

## International Transfers
Because we use Cloudflare as our infrastructure provider, your data may be processed and stored on servers located outside the Republic of Paraguay, within that provider's global infrastructure. CobrarYa adopts measures to ensure that such transfers are carried out with adequate security and confidentiality safeguards, in accordance with the requirements of Law No. 7,593/2025.

## Cookies and Local Storage
The website uses only essential and functional local storage. Specifically, a theme-preference key ('cy-theme') that allows your chosen display mode to be remembered. We do not use advertising cookies, tracking cookies, or third-party analytics tools.

## Security
We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or improper disclosure, in line with the principles of security, proactive responsibility, and privacy by design. However, no system is completely infallible, so we cannot guarantee absolute security.

## Data Subject Rights
In accordance with Law No. 7,593/2025, you, as the data subject, have the right to:
- Access your personal data and learn how it is processed.
- Request the rectification of inaccurate or incomplete data.
- Request the deletion or erasure of your data.
- Object to the processing of your data.
- Request the portability of your data.
- Withdraw your consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, you may write to us at contacto@cobrarya.com.py. We will handle your request free of charge and within the timeframes established by applicable regulations. You may also file complaints with the competent data protection supervisory authority.

## Minors
The website and service are not directed at minors. We do not knowingly collect personal data from minors. If we become aware that we have received data from a minor without proper authorization, we will proceed to delete it.

## Changes to This Policy
We may update this Privacy Policy from time to time. We will post the current version on this site along with its corresponding "last updated" date. We recommend that you review it periodically.

## Contact
If you have questions about this Privacy Policy or about the processing of your data, contact us:
- Email: contacto@cobrarya.com.py
- WhatsApp / phone: +595 983 552570
- Website: www.cobrarya.com.py

---

Source: https://www.cobrarya.com.py/en/privacidad