Privacy Policy

1. Who we are

Dungenez is operated by Dungenez SpA, located at Av. Apoquindo 6410, Of. 1004, Las Condes, Chile. For any question about this policy or your data, write to legal@dungenez.com.

2. What data we collect

Account data: your email and password (password is managed via Supabase Auth; we never see it in plain text).

Business data you provide yourself during onboarding: business profile, goals, milestones and competitors.

Data obtained via OAuth integration, only after your explicit authorization: Shopify orders, products and customers; Meta Ads and Instagram performance metrics; Google Analytics 4 and Search Console traffic, conversions and search performance.

Telegram channel data, if you use it: your chat ID and the messages you send to the bot.

Technical usage logs, so we can provide support and debug issues.

3. What we use this data for

To generate the agent's analysis and responses, comparing your performance against your own history and against industry benchmarks.

Industry benchmarks are computed in aggregate and anonymously across clients in the same industry: we never share one client's raw data with another.

To provide support, fix issues and improve the service.

We do not use your data for advertising, and we do not sell it to third parties.

4. Who we share it with

We use a small number of providers (subprocessors) to operate the service: Supabase (database, authentication and encrypted credential storage), Vercel (application hosting), Google's Gemini API (so the AI agent can process your questions and generate answers), and Telegram (if you choose to use that channel).

Each of these providers only accesses the data strictly necessary to provide its service.

5. How we protect your data

Each client's data is isolated at the database level (Row Level Security): one client can never read another's data, and neither can the AI agent itself outside the context of that conversation.

Shopify, Meta and Google OAuth credentials are stored encrypted (Supabase Vault), never in plain text, and are only decrypted on the server at the exact moment a tool needs them — they never reach the browser.

Access to Shopify, Meta and Google is read-only: Dungenez never writes to or modifies your store, your campaigns, or your accounts.

6. How long we keep your data

We retain your data while your account is active. You can request deletion of your account and data at any time by writing to legal@dungenez.com.

7. Your rights

Under Chile's Law 19.628 on Protection of Private Life and Law 21.719, you have the right to access, rectify, delete and object to the processing of your personal data. To exercise any of these rights, write to legal@dungenez.com.

8. Cookies

We use only the authentication session cookie (managed by Supabase), necessary to keep you logged into the application. We do not use advertising or third-party tracking cookies.

9. Children

Dungenez is not directed at anyone under 18 years of age.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know by email or within the application.

11. Contact

legal@dungenez.com