Privacy Policy

1. Who We Are

Congo Co — 3-102-964582 S.R.L (Costa Rica) imports and distributes premium off-road, overlanding, and 4×4 accessories in Costa Rica. Congo Co — 3-102-964582 S.R.L is the data controller for the personal information described in this policy. You can contact us at [email protected] or via WhatsApp.

2. Data We Collect

We collect personal information only when you interact with us directly:

• Contact form — name, email address, and your message.
• Newsletter — name, phone number, and email address.
• Orders — name, phone number, email address, and delivery address.
• Messaging (WhatsApp, Instagram, Messenger) — the content of messages you send us and your platform user ID. These messages may be processed automatically by an AI system to generate an initial reply (see section 5).
• Technical data — IP address (used for security and fraud prevention; not stored beyond what is needed).

We do not collect payment card data. Payments are arranged separately via WhatsApp.

3. How We Use Your Data

• To respond to your contact and sales inquiries.
• To process and fulfill your orders.
• To send you transactional email notifications about your order (confirmation, shipping updates, and status changes).
• To send you the newsletter you subscribed to. You can unsubscribe at any time via the link in any newsletter message.
• To maintain a record of conversations for customer service continuity.
• To detect and prevent abuse of our contact and newsletter forms.

We do not sell your personal data, use it for advertising, or share it with third parties except as described in section 4.

4. Third Parties

Operating our platform involves the following third-party services, each subject to their own privacy policies:

• Meta (Facebook, Instagram, WhatsApp) — messages sent through these platforms pass through Meta's infrastructure before reaching us. Meta's data policy applies to their platforms.
• Anthropic (Claude AI) — incoming messages received via WhatsApp, Instagram, or Messenger are sent to Anthropic's API to generate an automated initial reply. Message content is processed by Anthropic according to their usage policy.
• Cloudflare — our DNS, CDN, and DDoS protection provider. Cloudflare handles all traffic to our site.
• Railway — our hosting and database provider. All data is stored on Railway's infrastructure.
• Resend — our transactional email provider. Order confirmation and status update emails are delivered via Resend's infrastructure. Your name, email address, and order details are transmitted to Resend solely for email delivery.

5. Automated Processing

When you send a message through WhatsApp, Instagram DM, or Facebook Messenger, our system automatically generates an initial reply using Claude, an AI assistant by Anthropic. This is done to respond to common questions quickly outside business hours. You are always free to continue the conversation with our team directly. No automated decisions with legal or significant effects are made based on your messages.

6. Cookies & Sessions

We use a session cookie to maintain your shopping cart across page visits. No advertising or tracking cookies are used. The Cloudflare Turnstile widget on our contact form uses a cookie solely to verify you are human; this cookie does not track you across other sites.

7. Data Retention

Contact form submissions and newsletter subscriptions are retained until you request deletion. Order records are retained as required by Costa Rican commercial law (generally 5 years). Message conversation logs are retained for customer service purposes and reviewed periodically for deletion.

8. Your Rights

Under Costa Rica's Ley de Protección de la Persona frente al Tratamiento de sus Datos Personales (Ley No. 8968), you have the right to access, correct, and request deletion of your personal data. To exercise these rights, contact us at [email protected] with your name and the request you wish to make. We will respond within 10 business days.

9. Changes to This Policy

We may update this policy as our services evolve. The "last updated" date at the top of this page reflects the most recent revision. Continued use of our services after a change constitutes acceptance of the updated policy.

10. Contact

For any privacy-related questions or requests, reach us at [email protected] or via WhatsApp. We are based in Costa Rica.