Privacy policy

1. Who is responsible for your data

Grupo Vasquez SpA, tax ID (RUT) 77.217.436-5, with its address at El Quisco 7857, La Granja, Santiago, Chile, owner of diagpass.com and of the DiagPass brand. For anything about your data, email us at privacidad@diagpass.com or message us on WhatsApp. This policy applies to all our customers, wherever they live.

2. What data we process, why, and on what basis

We do not ask for sensitive data. Without the purchase data we cannot activate your license. We do not make automated decisions about you or build profiles. We do not send you advertising by email or WhatsApp without your consent, and if you give it you can withdraw it at any time.

3. The serial number check

The serial number check runs in your browser. The number is not sent to our systems or stored; we only receive it when you send it to us on WhatsApp or write it at checkout.

4. Who it is shared with

We do not sell your data. We share it only with those we need to handle your purchase, and only what is needed:

• PayPal (United States and the countries where it operates), to process the payment.
• WhatsApp, by Meta (United States), to talk with you and deliver your license details.
• The supplier that activates the license (China), which receives only your device’s serial number and model.
• Cloudflare (United States, global network) and HostGator (United States), which deliver the site, and our email provider.
• Authorities, only when the law requires it.

5. International transfers

We process your data in Chile and, to fulfil your purchase, transfer it to the providers in point 4, which are in the United States and China, countries whose data protection laws may not be equivalent to yours. We work with providers that offer contractual data protection commitments, and we send the supplier that activates the license only the serial number and model. You can ask us for information about these safeguards.

6. How long we keep your data

• Purchase data and tax documents: 6 years, under Chilean tax obligations.
• Contact details, serial number and conversations: for as long as your license lasts and up to 1 year after, to handle complaints.
• Technical access logs of the site: kept by our providers for a limited time, and for at least 6 months where Brazilian law requires it (Marco Civil da Internet, art. 15).
• After that we delete or anonymize them.

7. How we protect your data

The site runs over an encrypted connection (HTTPS). We never see or store your card details: PayPal processes them. Only the people who handle your purchase can access your data. If a security incident affects your data, we notify the authority and the people affected as the applicable law requires, and we record it.

8. Your rights and how to use them

You can ask us, free of charge: for access to your data and to know who we share it with; to correct it; to delete it; to object to its use or ask us to restrict it; to receive it in a format you can take elsewhere (portability); and to withdraw your consent where you gave it.

Email us at privacidad@diagpass.com or message us on WhatsApp. We may ask for something that confirms you are the data subject. We confirm receipt right away and reply within 10 calendar days, or within any shorter period your law sets. If we cannot grant your request, we explain why and where you can complain. You can always complain to the data protection authority of your country (see point 9).

9. What your country’s law requires

Chile

This policy follows the content required by Law 21.719, which replaces Law 19.628 when it comes into force. While Law 19.628 applies, you can go to the civil court if we do not answer your request; once Law 21.719 is in force, you can complain to the Personal Data Protection Agency.

Mexico

This text is our privacy notice. Controller: Grupo Vasquez SpA, at the address in point 1. Necessary purposes: those of the purchase described in point 2. Non-necessary purposes: measurement and advertising, only with your consent; refusing does not affect your purchase. The transfers in point 4 are necessary to fulfil your purchase: by giving us your data to buy, you accept those transfers; if you do not agree, message us before buying. You use your rights of access, rectification, cancellation and objection (ARCO), and revoke your consent, at privacidad@diagpass.com. Changes to this notice are published on this page. Authority: Secretaría Anticorrupción y Buen Gobierno.

Brazil (LGPD)

Controller: Grupo Vasquez SpA. Channel of the data protection officer (art. 41 of Law 13.709/2018): privacidad@diagpass.com. Legal bases (art. 7): performance of the contract, compliance with a legal obligation, legitimate interest to prevent fraud, and consent for measurement. You have the rights of art. 18, including confirmation, access, correction, anonymization, deletion, portability, information about who we share data with and revocation of consent; the full reply is given within 15 days (art. 19) or sooner. The international transfers in point 5 follow arts. 33 to 36. Authority: National Data Protection Authority (ANPD).

Argentina

Law 25.326. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days. You can use the right of access free of charge every six months, or sooner if you show a legitimate interest. The Agency for Access to Public Information, as the supervisory body of Law 25.326, handles complaints from anyone whose rights are affected by a breach of the personal data protection rules.

Colombia

This is our data processing policy under Law 1581 of 2012 and Decree 1377 of 2013. We process your data with the authorization you give us when you buy, for the purposes in point 2. Responsible area: privacidad@diagpass.com. We answer queries within 10 business days and claims within 15 business days. Authority: Superintendence of Industry and Commerce (SIC).

Peru

Law 29733 and its regulation (Supreme Decree 016-2024-JUS). You use your rights of access, rectification, cancellation and objection at privacidad@diagpass.com. Authority: National Authority for Personal Data Protection.

Ecuador, Uruguay, Costa Rica, Panama, El Salvador and other countries

We apply the rights your law gives you and you can complain to its authority: in Ecuador, the Superintendence of Personal Data Protection; in Uruguay, the Personal Data Regulatory and Control Unit; in Costa Rica, PRODHAB; in Panama, ANTAI.

United States and California

The categories of data are in point 2 and who receives them, in point 4. You can review and correct your data by emailing privacidad@diagpass.com. The site does not change how it works in response to your browser’s "Do Not Track" signal: Google measurement only turns on if you accept it. We do not sell your personal information. This policy is effective from the date shown at the end.

Canada

The person accountable for compliance is our legal representative; contact: privacidad@diagpass.com. Your data is processed outside Canada (Chile, the United States and China) and may be accessible to the courts and authorities of those countries. We reply within 30 days at most. Federal authority: the Privacy Commissioner of Canada. In Quebec, functions that can identify, locate or profile you stay off until you turn them on in the cookie notice; authority: Commission d’accès à l’information.

10. Cookies and data stored by your browser

• The site stores the language you chose in your browser.
• To show your country and an estimated amount in your currency, the site looks up the country of your connection and a public exchange-rate service (open.er-api.com). Fonts load from Google Fonts. As with any website visit, those services receive your IP address.
• Today the site does not use measurement or advertising cookies.

11. Minors

The site is intended for adults. We do not knowingly collect data from minors; if a minor sent us their data, message us and we will delete it.

12. Changes to this policy

If this policy changes, we publish the new version here with its date and, if the change is significant, we email those who have an active license.

Version dated November 14, 2026.