Privacy Policy
Last updated:
This policy explains how HayChanga processes personal data on haychanga.com and in its apps (Avati, Noticias, Changas), in accordance with Uruguay's Personal Data Protection Law No. 18,331.
1. Data controller
The data controller is HayChanga (haychanga.com), Uruguay. Contact: WhatsApp +598 94 576 598.
2. What data we process
- Account: name, email, password (stored encrypted by the authentication provider; we never see it), preferred language, and the version and date on which you accepted the Terms.
- Organization and billing (Avati): plan, subscription status and Mercado Pago identifiers. Card data is processed by Mercado Pago; we do not receive it.
- Content you upload: settings, questions, ads, images, logos, video links and, on Changas, your posts.
- Screens (Avati): an identifier generated by each device, the screen's name and its last activity, to apply your plan's limits.
- Technical data: hosting providers log IP addresses and browser data for security and operation.
- Preferences in your browser: chosen language or country (cookie) and whether you have already seen the welcome promotion (local storage).
Noticias and haychanga.com do not require an account. To choose the initial country or language, the approximate country reported by the hosting provider from your IP may be used; we do not store it.
3. Camera (Avati)
In interactive mode, the camera feed is processed on the device itself to detect people and gestures. No images or video are stored or sent, and no one is identified. Screen usage statistics are anonymous and stay on the device.
4. What we use data for
- creating and maintaining your account and signing in to the apps;
- providing the service you use (showing your content on your screens, publishing your job posts);
- managing plans, charges and limits;
- sending necessary emails (account confirmation, password recovery, service notices);
- protecting the services and preventing abuse;
- complying with legal obligations.
We do not sell your data or use it for third-party advertising.
5. Legal basis
We process data with your consent (when you create the account), to perform the service agreement you accept, and to comply with legal obligations.
6. Who we share data with
Only with providers that process it on our behalf to provide the service:
- Supabase: database, authentication, account emails and image storage;
- Vercel: website hosting;
- Mercado Pago: subscription billing.
We may also disclose data when required by a competent authority.
7. International transfers
Some providers may store or process data outside Uruguay. In those cases we seek adequate safeguards, in accordance with Uruguayan law.
8. How long we keep data
While your account is active. If you close it, we delete or anonymize the data within a reasonable time, except data we must keep for legal obligations (for example, billing records).
9. Your rights
You can exercise your rights of access, rectification, update, inclusion and deletion free of charge by messaging us on WhatsApp at +598 94 576 598. You can also file a complaint with Uruguay's Personal Data Regulatory and Control Unit (URCDP).
10. Security
We use encrypted connections, encrypted passwords and database access controls so each organization sees only its own data. No system is infallible; if an incident affects you, we will let you know.
11. Minors
Account-based services are not intended for anyone under 18.
12. Changes to this policy
We may update this policy. The "last updated" date shows the current version; if a change is significant, we will tell you.
13. Contact
WhatsApp: +598 94 576 598