Privacy policy
Last updated: October 9, 2026
This policy explains how we process personal data at Carrier, in accordance with Colombia's Law 1581 of 2012 and its implementing decrees.
1. Who processes the data
Carrier is the controller of the data of the companies that subscribe to the service and of their users. For the data of each company's customers (the messages and contacts that reach its panel), Carrier acts as a processor: it handles them on behalf of that company and following its instructions. You can write to us at [email protected].
2. What data we process
About your company and its users: company name, names, emails, usernames, passwords (stored irreversibly, never in plain text), roles and activity logs. About payments: the plan, amounts, dates, gateway and the references of each charge; never your card or account details, which go straight to the gateway. Technical data: IP address, browser and error logs.
3. What we use it for
To create and maintain your account, provide the service, charge for your plan, notify you about your payments and the service, give you support, keep things secure and meet legal obligations. We don't sell your data or use it for third-party advertising.
4. Who we share it with
Only with providers we need to deliver the service, who process it on our behalf: the payment gateways you choose, server hosting, email delivery, error monitoring and the channels you connect (WhatsApp, Meta, Telegram and the rest). Some of them are outside Colombia; we require them to apply adequate security measures.
5. How long we keep it
While your account is active and afterwards for as long as needed to meet legal obligations or resolve claims. The password you choose when paying for a plan is deleted as soon as your account is created, or when the payment expires without being completed.
6. Your rights
You can access, update and correct your data; request proof of your authorization; know how we have used it; revoke the authorization or ask us to delete it when there is no legal duty to keep it, and file complaints with the Superintendence of Industry and Commerce. Write to us at [email protected]: we answer inquiries within 10 business days and claims within 15 business days.
7. Security
We use encrypted connections, irreversibly stored passwords, encrypted integration keys and role-based permissions. No system is infallible: if we detect an incident affecting your data, we'll let you know.
8. Cookies
We use cookies and browser storage to keep you signed in, remember your language and make the panel work. We don't use advertising cookies.
9. The Android app
The app uses the same account and data as the dashboard. To let you know about messages, assignments and tickets while your phone is locked, notifications go through Firebase Cloud Messaging (Google): they carry the contact name and part of the message, unless you turn off "preview" in Settings → Notifications, and never a phone number.
App errors are logged in Sentry without message text, phone numbers or contact names.
The app stores your session on the phone (in the system's encrypted storage) and, for 24 hours, a copy of what you already saw so it can show it offline; everything is erased when you sign out. It uses the camera, microphone, location and your files only when you choose to send a photo, a voice note, your location or a document.
10. Changes to this policy
If we change this policy, we'll let you know by email or in the panel. The current version is always the one on this page.
