Privacy Policy — XISTI
How XISTI Tecnología S.A.S. collects, uses, and protects personal data under Colombian Habeas Data law (Law 1581 of 2012).
1. Data controller
XISTI Tecnología S.A.S. (NIT —), Colombia, Colombia, is the controller of personal data collected through XISTI. Privacy contact: privacidad@xistiapp.com.
2. Personal data we process
Identification and contact data; independent driver and vehicle documentation; location (including background location for drivers); trip, payment, and usage records; support and PQR communications; and device information.
3. Purposes
Account management, connecting users and independent drivers, payments and wallet, fraud prevention, platform improvement, legal compliance, customer support, and—with prior consent—marketing communications.
4. Legal bases
Consent under Colombian Law 1581 of 2012, contractual necessity, legitimate interests in security and service improvement, and legal obligations in Colombia.
5. Data-subject rights
You may access, rectify, update, delete, and withdraw consent, and file complaints with the Superintendence of Industry and Commerce (SIC). Requests: privacidad@xistiapp.com.
6. Retention
We retain data while the relationship exists, as needed for stated purposes, or as required by law, then delete or anonymize according to internal policies.
7. Processors and transfers
We share data with service providers (maps, push notifications, payments, cloud, analytics) under confidentiality and security agreements. International transfers use applicable safeguards.
8. Security
We implement reasonable technical and organizational measures. Report suspected incidents to privacidad@xistiapp.com.
9. Minors
XISTI is not directed to persons under 18. We will delete unauthorized minor data when detected.
10. Changes
Updates are published with version 2026-08-legal-v2 and date 2026-08-11.
11. Contact
privacidad@xistiapp.com · soporte@xistiapp.com · Data Processing Policy