Privacy Policy

Effective Date: 2026-02-20

At KiteToGo, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our WhatsApp Business service for kitesurfing equipment rental.

1. Information We Collect

When you interact with our WhatsApp Business service, we may collect the following information:

• Contact Information: Your phone number, name, and WhatsApp profile information
• Location Data: Location information you share to help us find nearby equipment
• Messages: Text messages, voice messages, images, and other content you send to us
• Equipment Preferences: Information about kitesurfing equipment you're looking for or offering
• Transaction Data: Payment information and rental transaction details

2. How We Use Your Information

We use your personal information to:

• Facilitate kitesurfing equipment rentals and connections between users
• Process payments and manage rental transactions
• Provide customer support and respond to your inquiries
• Send you important service updates and notifications
• Improve our services and develop new features
• Comply with legal obligations and prevent fraud

3. WhatsApp Business Integration

Our service uses WhatsApp Business API provided by Meta (Facebook). Important information about your data:

• Message Encryption: All messages are encrypted using WhatsApp's Signal protocol
• Data Retention: Messages are retained for a maximum of 30 days and then automatically deleted
• Meta's Role: Meta acts as a data processor and does not have access to your message content
• Your Consent: By messaging us, you consent to receive responses and service-related communications

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With other users when facilitating equipment rentals (limited to necessary contact information)
• With payment processors to handle secure transactions
• With service providers who assist in operating our platform (under strict confidentiality agreements)
• When required by law or to protect our legal rights
• In case of business transfer or merger (with prior notice to users)

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• End-to-end encryption for all communications
• Secure data storage and transmission protocols
• Regular security assessments and updates
• Limited access to personal data by authorized personnel only
• Compliance with industry security standards

6. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your information
• Withdrawal: Withdraw consent for data processing at any time

6.1 How to Request Data Deletion

You have the right to request deletion of your personal data at any time. To request deletion of your data:

1. Send a message to our WhatsApp Business account with the text: "Delete my data"
2. We will confirm your identity and process your deletion request
3. Your data will be permanently deleted within 30 days of your request

Alternatively, you can submit a data deletion request by emailing privacy@kitetogo.com with the subject line "Data Deletion Request" and including your phone number.

What happens when you request deletion:

• All your personal information will be permanently removed from our systems
• Your message history will be deleted
• Your contact information and preferences will be erased
• You will no longer receive communications from us
• Some information may be retained for legal compliance purposes only (e.g., financial records required by law)

6.2 Exercising Other Rights

To exercise any other privacy rights (access, correction, portability, etc.), please contact us using the information provided below.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our servers and service providers are located. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

8. Compliance with Data Protection Laws

We comply with applicable data protection regulations, including:

• General Data Protection Regulation (GDPR) for users in the European Union
• California Consumer Privacy Act (CCPA) for California residents
• Lei Geral de Proteção de Dados (LGPD) for users in Brazil
• Other applicable regional data protection laws

9. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, through our WhatsApp service. Your continued use of our service after such changes constitutes acceptance of the updated policy.