This Privacy Policy describes how Sotoban (formerly Recash), a platform operated by Suantechs (trade name of Juan Andrés Mendoza Ibarra), collects, uses and protects the information of people who interact with the service, including messages received through WhatsApp.

1. What Sotoban is

Sotoban lets shops (restaurants, pharmacies, hardware stores and other businesses) receive and manage orders over WhatsApp through an automated assistant. When you message the WhatsApp number of a shop that uses Sotoban, we process your conversation on that shop's behalf to help you complete your order.

2. Data we collect

Through the WhatsApp Business Platform (Meta) and our interaction with you we may receive:

Your WhatsApp phone number and profile name.
The content of the messages you send (text, location, files).
Your order details (products, quantities, notes).
Your delivery address, if you choose delivery.

3. How we use it

To take, process and follow up on your orders.
To answer your questions and provide customer support.
To operate and improve the service and the assistant's quality.

We begin processing when you voluntarily contact us on WhatsApp. We do not send unsolicited promotional messages.

With the shop you order from, so it can prepare and deliver your order, including its staff through the dashboard and the Sotoban app.
With Meta / WhatsApp, as the messaging channel, under their own policies.
With the providers that process data on our behalf, only to deliver the service and under confidentiality obligations:
- OpenAI, L.L.C. (United States): interprets the text of messages to take the order.
- Cloudflare, Inc. (United States): network and file storage, such as payment receipts.
- Google LLC (United States): maps, distance calculation and delivery location, and Firebase Cloud Messaging, which delivers order alerts to the Sotoban app.
- HostHatch LLC (Sweden): the servers the service and its database run on.

We do not sell your personal information.

5. Shop staff and the Sotoban app

People who work at a shop (owners, cashiers, whoever prepares the orders) use Sotoban from the web dashboard or from the Sotoban Android app, which alerts them to new orders and to payments awaiting validation. For that we process:

Account data: name, email address and, if you sign in with Google, the identifier Google gives us. It is used to sign you in and to know which shop and branch you belong to.
The device's notification identifier (Firebase Cloud Messaging token): used only to sound an order or payment alert on that device.
What you do in the app: marking a product or an order as ready, and validating or rejecting a payment with the reason you write. It is recorded on the order so the shop knows who did it.

The app shows the data the customer gave when ordering (name, phone, delivery address, recipient and the payment receipt image) only to the people at that shop allowed to see it, and only to prepare, deliver and collect that order. The app does not keep that data on the device: it shows it on screen and in the order alert, and no copy is left on the phone or tablet.

The session is stored encrypted in the device's secure storage. All communication is encrypted (HTTPS). The app does not access your location, contacts, camera, microphone or photos, shows no ads and uses no analytics or tracking tools.

The permissions it asks for on Android (notifications, alarms, full screen, running in the background and not being closed by battery saving) exist only so an order alert sounds on time. You may deny them: the app tells you what stops working without each one.

To close your account and delete its data, see Data deletion.

6. Retention

We keep data for as long as needed to process your orders, provide support and comply with legal or accounting obligations. After that it is deleted or anonymized.

7. Security

We apply reasonable technical and organizational measures to protect your information against unauthorized access, loss or alteration.

8. Requests from public authorities

If a public authority asks us for personal data, before answering we review the request for legality, challenge it when we consider it unlawful, disclose only the minimum information necessary and keep a record of each request, our response and its legal basis. In the last 12 months we have received no such requests related to national security.

9. Your rights

You may request access, correction or deletion of your data, or withdraw your consent, by writing to [email protected].

10. Minors

The service is not directed to minors and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy. We will publish the current version on this page with its last-updated date.

12. Contact

Sotoban — operated by Suantechs · [email protected] · Panama City, Panama.

Privacy Policy