Privacy Policy
Last updated: March 31, 2026
Introduction
Varylo is a platform developed and operated by Altotrafico SAS, based in Colombia. This Privacy Policy describes how we collect, use, store, and protect the personal information of our users and the contacts they manage through our platform.
By using Varylo, you agree to the practices described in this policy. If you disagree, please do not use our services.
Information We Collect
We collect the following types of information:
- Account information: name, email, password (encrypted), company name.
- Conversation data: messages received and sent through WhatsApp, Instagram and Web Chat, including text, images, documents and audio.
- Contact data: name, phone number, email and other data that users capture from their customers.
- Access tokens: third-party platform credentials (Meta, Google) necessary for channel integration.
Use of Information
We use the collected information to:
- Provide and maintain the omnichannel messaging service.
- Process and deliver messages between users and their customers through WhatsApp, Instagram and Web Chat.
- Execute user-configured automations (chatbots, AI agents).
- Generate analytics and insights about conversations using artificial intelligence.
- Manage billing and subscriptions.
Sharing Information with Third Parties
We share information with the following third parties solely to provide the service:
- Meta Platforms (Facebook/Instagram/WhatsApp): to send and receive messages through their APIs.
- OpenAI: to process conversations with AI agents, when configured by the user.
- Supabase: for database and media file storage.
- Wompi: for payment processing (we do not store card data).
We do not sell or share personal information with third parties for advertising purposes.
Data Security
We implement security measures to protect your information:
- Passwords stored with bcrypt hashing.
- Communications encrypted via HTTPS/TLS.
- Signature verification on external platform webhooks.
- Data access restricted by roles (admin, agent) and by company (multi-tenant).
Data Retention
We retain data as long as the user account is active. Documents captured in conversations are automatically deleted after 73 hours. Users can request deletion of their account and associated data at any time.
User Rights
In accordance with Colombian Law 1581 of 2012 and GDPR where applicable, you have the right to:
- Access your personal data stored on the platform.
- Rectify inaccurate or incomplete data.
- Request deletion of your personal data.
- Revoke consent for data processing.
Third-Party Platform Integrations
Varylo integrates with Meta (WhatsApp and Instagram) through their official APIs. By connecting your WhatsApp or Instagram account to Varylo, you authorize our platform to:
- Receive incoming messages from your customers.
- Send messages on your behalf.
- Access basic information from your account and page.
You can revoke access at any time by disconnecting the channel from Varylo settings or from your Meta account settings.
Contact
If you have questions about this Privacy Policy or wish to exercise your rights, you can contact us:
- Company: Altotrafico SAS
- Email: soporte@varylo.app
- Country: Colombia