Pilot Privacy Notice

VIADEV SpA operates the platform during the Pilot under the trade name Backsy. Each participating merchant defines its campaign, authorizes its team and manages its commercial relationship with customers.

This notice covers the consumer, staff and merchant surfaces available at app.backsy.cl.

We use only the information needed to authenticate each participant, maintain the digital card and operate visits and rewards.

• Consumer name and the email or phone used for access.
• Associated merchant, branch, campaign and membership.
• Dates and status of requests, visits, rewards and redemptions.
• Consents and the version of documents accepted.
• Technical and security events needed to operate and audit the service.

Backsy is not designed to store national ID numbers, birth dates, home addresses, precise location, biometrics, purchased products, medications, prescriptions, diagnoses or health information.

If a merchant detects information outside this scope, it must stop the affected use and contact Backsy to coordinate a review.

Marketing communications, if enabled, require separate, optional and revocable consent. They are not enabled by default in the Pilot.

• Create and protect account access.
• Show progress, record approvals and enable redemptions.
• Maintain isolation between merchants, branches and roles.
• Prevent fraud, resolve incidents and retain operational traceability.
• Send transactional authentication messages requested by the person.

VIADEV SpA uses Supabase for authentication and application data, Vercel for web hosting and runtime, and Resend for transactional authentication email. These providers participate only in the infrastructure needed to deliver the service.

Operational access is limited by role. Merchants see their organization, staff see their assignments, and consumers see their own cards. VIADEV SpA does not sell personal data.

We retain information while the account or Pilot is active and for the operational period needed to address incidents, security and audits.

After a validated deletion, the profile is anonymized and card codes stop working. Minimum events needed for traceability remain without the person's direct identifiers. Provider-managed technical logs follow their operational cycles and are not copied to Backsy by default.

You can request access, correction or deletion by writing to privacidad@backsy.cl from the email associated with your account. VIADEV SpA will verify identity and scope before making a change.

Pilot participation, reviews and marketing are separate choices. A review or rating does not affect visits or rewards. The consumer flow requires an age-of-majority declaration and does not request a birth date.

The visible version and date identify the current notice. If the way information is used changes materially, we will publish a new version and coordinate its application with affected participants.

Privacy: privacidad@backsy.cl. Operational support: soporte@backsy.cl.