Privacy Policy

Last updated: August 24, 2026
Our Privacy Policy applies to www.dualtic.com and to any user of our Service.
Data controller: Dualtic is a service operated by Claudio Alonso Olivares Flores, an individual domiciled in Chile, who acts as the controller of your personal data. For any privacy matter you may write to privacy@dualtic.com.
At Dualtic, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights regarding it.
We process your personal data in accordance with Chilean Law No. 19.628 on Personal Data Protection, as amended by Law No. 21.719, whose supervisory authority is the Personal Data Protection Agency (Agencia de Protección de Datos Personales), and on the legal bases described in section 2.6 of this policy.
1. INFORMATION WE COLLECT
Source of the data: The personal data we process comes directly from you (through the platform's forms) or from LinkedIn with your authorization, if you choose to sign in with LinkedIn (see section 1.3). We do not obtain your data from other sources.
1.1 Information You Provide Directly
Registration: To create an account, you must provide us:
  • Email address
  • Password (stored with a bcrypt hash, never in plain text)
User Profile: To complete your profile and make it visible in the directory, you must provide:
  • Required: Full name, job title, industry/sector, location (country, region, city), contact email
  • Optional: Company name (if you work at one; you may instead indicate that you work independently), profile photo, phone number, LinkedIn profile, physical address (useful if you serve customers at a location), description
Industries of Interest: When completing your profile you also indicate which industries you are interested in offering to and which ones you are interested in sourcing from:
  • Required: at least one industry you offer to and at least one you are looking to source from (up to three of each). Being required, they cannot be left empty without deleting the entire account
  • What we use them for: personalizing the results you see in the directory, prioritizing companies whose industries match the ones you selected
  • Visibility: they are NOT shown on your public profile. They are only used to order the directory you see, and they are included in the copy of your data if you download it
Offer Posts: If you post products or services you offer:
  • Product/service name
  • Description
  • Images (1-3 photos)
  • Hashtags/tags
Interest Posts: If you post products or services you need to buy:
  • Product/service name
  • Description of what you're looking for
  • Hashtags/tags
1.2 Information Collected Automatically
When you use Dualtic, we automatically collect:
Technical Information:
  • IP address (registration and last login)
  • Browser type and version
  • Operating system
  • Device type (desktop, mobile, tablet)
  • Browser language
Usage Information:
  • Pages visited and time on each page
  • Searches performed
  • Clicks and navigation on the platform
  • Date and time of access
  • Referring URL (where you came from)
Session Information:
  • Login date and time
  • Logout date and time
  • Session tokens (cookies)
  • "Remember me" tokens (if you enable this option)
1.3 Information from Third Parties (LinkedIn OAuth)
If you register using "Sign in with LinkedIn", we obtain the following information from your LinkedIn profile:
  • Full name: To create your Dualtic profile
  • Email address: As your login email
  • Profile photo: As your avatar on the platform
  • LinkedIn ID: To link your account (not publicly visible)
What we do NOT obtain from LinkedIn:
  • Your work history
  • Your LinkedIn connections
  • Private messages
  • Endorsements or recommendations
  • Information about companies you follow
This information is obtained according to the permissions you grant on LinkedIn. You can revoke access at any time from: LinkedIn Permitted Services
LinkedIn has its own Privacy Policy: LinkedIn Privacy Policy
1.4 Information We Do NOT Collect
Dualtic does NOT collect:
  • Financial information (credit cards, bank accounts)
  • Government identification numbers (passport, driver's license, SSN)
  • Biometric data
  • Health information
  • Sensitive information protected by law
2. HOW WE USE YOUR INFORMATION
We use the collected information for the following purposes:
2.1 Provide and Maintain the Service
  • Create and manage your account
  • Display your profile publicly (visible to any visitor)
  • Allow you to post offers and interests
  • Configure the search system and filters
  • Connect companies that seek with companies that offer
  • Remember your preferences (language, settings)
2.2 Communicate with You
  • Transactional emails: Registration confirmation, password reset, security notifications
  • Operational emails (you can disable): Relevant post notifications, inactivity reminders, important platform updates
  • Respond to your support inquiries
Note: We currently do NOT send marketing or promotional emails. If we do so in the future, we will ask for explicit consent (opt-in).
2.3 Improve and Personalize the Service
  • Analyze how users utilize the platform
  • Identify and fix technical errors
  • Improve user experience
  • Develop new features
  • Personalize content and searches based on your industry
2.4 Security and Fraud Prevention
  • Detect and prevent fraudulent activity
  • Protect against spam and abuse
  • Identify duplicate or fake accounts
  • Enforce our Terms and Conditions
  • Investigate user reports
2.5 Legal Compliance
  • Comply with applicable laws, regulations, and court orders
  • Respond to legal requests from authorities (subpoenas, search warrants)
  • Protect our legal rights
  • Prevent illegal activity
2.6 Legal Bases for Processing

In accordance with Law No. 19.628, as amended by Law No. 21.719, each processing of your data relies on a specific legal basis:

  • Account, profile, and posts: performance of the service contract you accept when registering (our Terms and Conditions). We do not rely on your consent to operate your account.
  • Transactional emails (welcome, password reset, confirmations): performance of the same service contract.
  • Analytics cookies (Google Analytics, Microsoft Clarity, LinkedIn Insight Tag): your consent, given through the cookie banner and revocable at any time from "Cookie Settings".
  • Security and fraud prevention (IP addresses, login attempt limits, investigation of reports): Dualtic's legitimate interest, consisting of protecting the platform and its users against fraud, spam, and abuse.
  • Directory usage metrics (how many visits a profile received, what was searched for and how many results it returned, whether a contact detail was clicked, whether the share button was used): Dualtic's legitimate interest, consisting of understanding what the directory is missing and showing you how many visits your own profile receives. See section 2.8.
  • Legal compliance: compliance with a legal obligation, when a law or competent authority requires it.
2.7 Automated Decisions and Profiling

Dualtic does NOT make automated decisions with legal effects on you, nor does it build behavioral profiles. The directory order is only filtered according to the industries of interest that you yourself configure in your profile; we do not evaluate or predict your behavior.

2.8 Directory Usage Metrics

To know whether the directory is doing its job, we record certain usage facts in aggregate form: that a profile received a visit, that a post's detail view was opened, what term was searched for and how many results it returned, whether someone clicked a contact detail, and whether the share button was used (and through which channel: copy link, WhatsApp, LinkedIn, email or QR code).

We do not record who generates those facts. We store no visitor identifier, no IP address, and no tracking cookie tied to this measurement. That is why we can show you how many visits your profile received, but we will never be able to tell you who visited you: that data does not exist in our systems, and this is a limitation of how the database is built, not of the interface.

This measurement is our own and happens on our server, without tracking cookies. It is separate from the third-party analytics tools described in section 3 (Google Analytics, Microsoft Clarity), which do require your consent and which you can decline from the cookie banner.

We discard visits from robots and do not count the same repeated action multiple times within a single session, so that the figures stay honest.

You may object to this processing by writing to privacy@dualtic.com (see section 5.3).

3. HOW WE SHARE YOUR INFORMATION
3.1 Public Information (Visible to Other Users)
Once you complete your profile, the following information will be publicly visible to anyone who visits the site, whether registered or not, and indexable by search engines such as Google:
  • Full name
  • Job title
  • Company name, or the indication that you work independently
  • Location (country, region, city)
  • Industry/sector
  • Contact email
  • Phone number (if you added it)
  • LinkedIn profile (if you added it)
  • Physical address (if you added it)
  • Profile photo
  • Profile description
  • All your offer and interest posts
Important: Anyone outside Dualtic (without a registered account) CAN see this data.
If you don't want your contact information to be public, do NOT complete those fields. However, certain fields (name, job title, industry/sector, location, email) are required for your profile to be visible in search.
3.2 Third-Party Service Providers
We share limited information with third parties who help us operate the platform:
Hosting and Storage:
  • Your data is stored on secure servers located in Chile
  • Our hosting provider has access to the database but is contractually obligated to maintain confidentiality
Google Analytics:

We use Google Analytics to understand how users interact with the platform. Google Analytics collects anonymous data such as:

  • Pages visited
  • Time on site
  • Approximate geographic location (city/country)
  • Device and browser type
  • Traffic source (how you arrived at Dualtic)

Google Analytics uses cookies. You can opt-out by installing: Google Analytics Opt-out Browser Add-on

Google's Privacy Policy: Google Privacy Policy

Microsoft Clarity:

We use Microsoft Clarity to improve user experience through:

  • Anonymized session recordings (no personal data visible)
  • Click heatmaps
  • Browsing behavior analysis

Microsoft Clarity does NOT collect personally identifiable information (PII). Data is anonymized before storage.

More information: Microsoft Clarity Terms

LinkedIn (OAuth):

If you use "Sign in with LinkedIn," your information passes through LinkedIn's servers according to their Privacy Policy.

LinkedIn Insight Tag:

We use the LinkedIn Insight Tag, a LinkedIn analytics and measurement tag that collects data about site visits (page views, approximate device and navigation data) to understand platform usage. This tag is activated only if you accept analytics cookies in our cookie banner. You can manage your LinkedIn advertising and tracking preferences from your LinkedIn account settings.

3.3 Legal Requirements

We may disclose your information if required by law or if we believe in good faith that it is necessary to:

  • Comply with a legal obligation (subpoena, court order)
  • Protect our rights, property, or safety
  • Prevent fraud or illegal activity
  • Protect the safety of users or the public
3.4 Business Transfers

If Dualtic is acquired, merged, or sold to another company, your information may be transferred as part of that transaction. We will notify you before your information is transferred and becomes subject to a different Privacy Policy.

3.5 What We Do NOT Do with Your Information

Dualtic does NOT:

  • Sell your personal information to third parties
  • Rent your information to data brokers
  • Share your information with advertisers for direct marketing
  • Use your information to train third-party AI models
4. COOKIES AND TRACKING TECHNOLOGIES
4.1 What are Cookies?

Cookies are small text files stored on your device when you visit a website. We use them to remember your preferences, keep your session active, and improve your experience.

4.2 Types of Cookies We Use
Essential Cookies (do not require consent):
  • session_id: Keeps your session active while browsing
  • idioma: Remembers your language preference (Spanish/English)
  • remember_token: Keeps you logged in if you enable "Remember me"
Analytics Cookies (require consent):
  • Google Analytics (_ga, _gid): Measure site traffic and usage. Duration: up to 2 years
  • Microsoft Clarity (_clck, _clsk): Analyze user behavior. Duration: 1 year
Third-Party Cookies:
  • LinkedIn (OAuth): If you use LinkedIn login
4.3 How to Manage Cookies

You can control or delete cookies through:

  • Browser settings: Most browsers allow you to reject cookies or delete them
  • Cookie banner: On your first visit, you can accept or reject optional cookies
  • Analytics opt-out: Google Analytics Opt-out
Note: If you block or delete essential cookies, some platform functionalities may not work properly (such as staying logged in).
For more details, see our complete Cookie Policy.
5. YOUR PRIVACY RIGHTS
5.1 General Rights (All Users)
You have the following rights regarding your personal information:
1. Access and Portability:
  • You can access all your data from your profile at any time
  • You can download a complete copy of your data in JSON format from: Settings > Privacy and Data > Download my data
  • You can also request it by email at: privacy@dualtic.com
2. Rectification (Edit):
  • You can edit your profile, posts, and contact information at any time from: Settings > Profile
  • There's no limit to how many times you can update your information
3. Partial Deletion:
  • You can delete optional fields (company name, phone, LinkedIn, physical address, profile photo, description)
  • Required fields (name, job title, industry/sector, location, email) CANNOT be deleted without closing the entire account
  • You can delete individual offer or interest posts without affecting your profile
4. Total Deletion (Close Account):
  • You can permanently delete your account from: Settings > Delete Account
  • Once deleted, all your data is immediately removed from the active database
  • Data may remain in backups for a maximum of 90 days, after which it's automatically deleted
  • This action is irreversible - you cannot recover your account or data
5. Object and Restrict:
  • When we implement operational emails, you will be able to disable them from your account settings
  • You can reject non-essential cookies through the cookie banner
5.2 California Residents' Specific Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
Right to Know:

You have the right to request that we disclose:

  • The categories of personal information we collect about you
  • The sources from which we obtained that information
  • The business purposes for collecting or selling that information
  • The categories of third parties with whom we share that information
  • The specific personal data we have about you
Right to Delete:

You have the right to request that we delete the personal information we have about you, subject to certain legal exceptions.

Right to Opt-Out of "Sale":

Dualtic does NOT sell your personal information. We do not share your data with third parties in exchange for monetary compensation.

However, the use of Google Analytics and Microsoft Clarity could be considered "sharing" under CCPA. You can opt-out of these services using the links provided in section 4.3.

Right to Non-Discrimination:

We will not discriminate against you for exercising your CCPA rights. This means we will NOT:

  • Deny you services
  • Charge you different prices
  • Provide you a different level or quality of service
  • Suggest that you will receive a different price or level of quality
How to Exercise Your CCPA Rights:

To exercise any of these rights, contact us at:

  • Email: privacy@dualtic.com
  • Subject: "CCPA Request - [Type of Request]"

We will respond to your request within 45 days (extendable to 90 days if necessary, with notification).

Identity Verification:

To protect your privacy, we will verify your identity before processing CCPA requests. We may ask you to:

  • Confirm your registered email address
  • Answer security questions about your account
  • Provide additional information to verify you are the account holder
Authorized Agents:

You may designate an authorized agent to make CCPA requests on your behalf. The agent must provide proof of written authorization.

5.3 Rights of European Union (GDPR) and Chile Residents

If you reside in the European Union (GDPR) or in Chile (Law No. 19.628 on Personal Data Protection, as amended by Law No. 21.719), in addition to the general rights described above you have the right to:

  • Access: know what personal data we process about you
  • Rectification: correct inaccurate or incomplete data
  • Erasure ("right to be forgotten"): request the deletion of your data
  • Portability: receive your data in a structured, readable format
  • Objection and restriction: object to certain processing or request its restriction
  • Temporary blocking (Chile): request the temporary suspension of the processing of your data while we resolve a rectification, erasure, or objection request you have submitted. We respond to blocking requests within 2 business days
  • Withdraw consent at any time, without retroactive effect

How to exercise these rights and timeframes: write to us at privacy@dualtic.com. We will acknowledge receipt of your request and respond within a maximum of 30 calendar days, extendable once for another 30 days when the complexity justifies it (we will notify you if that happens).

Right to complain to the authority: if you reside in Chile and we reject your request or fail to respond within the deadline, you may file a complaint with the Personal Data Protection Agency (Agencia de Protección de Datos Personales) within the following 30 business days. If you reside in the European Union, you also have the right to lodge a complaint with your data protection authority.

6. DATA RETENTION
6.1 While Your Account is Active

We retain your personal information while you maintain an active account on Dualtic. This includes:

  • Profile information
  • Offer and interest posts
  • Session history
  • Preferences and settings
6.2 After Deleting Your Account

When you delete your account:

  • Immediate deletion: All your data is deleted from the active database immediately
  • Backups: Data may remain in security backups for a maximum of 90 days
  • Automatic deletion: Backups are automatically deleted after 90 days through scheduled rotation
6.3 Data We May Retain Longer

We may retain certain information for longer periods if:

  • Required by law: Compliance with legal, tax, or accounting obligations
  • Dispute resolution: Evidence necessary to resolve ongoing legal disputes
  • Fraud prevention: Information about suspended or banned accounts to prevent recurrence
  • Anonymized data: Aggregated and anonymized data for statistics (without personal identification) may be retained indefinitely
6.4 Moderation Reports

Reports you submit, and reports others make about your account or your posts, are retained as follows:

  • While pending: they are kept until we review them. An unresolved report is never deleted for being old.
  • Once resolved: they are kept for 24 months from the resolution date and are then deleted automatically. That period lets us detect repeat offenders and respond if the case turns into a dispute.
  • What this includes: the reason, your description of the report, and any internal notes the moderation team wrote when resolving it.
  • If you delete your account: reports linked to it — both those you submitted and those you received — are deleted immediately along with the rest of your data, without waiting for the 24-month period to elapse.
7. DATA SECURITY
7.1 Security Measures We Implement

We take the security of your data seriously. We implement the following measures:

Encryption:
  • HTTPS/SSL: All communications between your browser and our servers are encrypted
  • Passwords: Stored with a bcrypt hash via password_hash (we never store passwords in plain text)
  • Session tokens: Hashed with expiration time
Access Control:
  • Database access limited to authorized personnel only
  • Ownership verification: each user can only access and modify their own data
  • CSRF protection on forms and session controls
Attack Protection:
  • SQL injection protection through prepared statements
  • XSS (Cross-Site Scripting) protection
  • Rate limiting to prevent brute force attacks
  • Validation and sanitization of all user inputs
Secure Backups:
  • Regular automatic database backups
  • Encrypted backup storage
  • Automatic rotation according to retention policy
7.2 Your Security Responsibilities

You also have an important role in protecting your account:

  • Use a strong password: At least 8 characters, with letters, numbers, and symbols
  • Don't share your password: No one from Dualtic will ask for your password
  • Log out: On public or shared computers
  • Keep your email secure: Your email is how you recover your account
  • Report suspicious activity: If you notice unauthorized access, contact us immediately
7.3 Security Limitations

Important: No security system is 100% foolproof. Although we implement industry-standard security measures:

  • We cannot guarantee absolute security against all attacks
  • We are not responsible for security breaches caused by factors outside our control
  • We are not responsible if you share your password or leave your session open
7.4 Security Breach Notification

In case of a security breach affecting your personal information:

  • We will notify you by email within 72 hours of discovering the breach
  • We will inform you what information was compromised
  • We will provide steps to protect yourself (change password, etc.)
  • We will report to authorities as required by law (in Chile, to the Personal Data Protection Agency, without undue delay)
8. CHILDREN'S PRIVACY

Dualtic is NOT directed to individuals under 18 years of age.

  • We do not knowingly collect information from minors under 18
  • We do not allow minors to create accounts
  • If we discover that a minor has provided personal information, we will delete their account and data immediately

If you are a parent or guardian and believe your child has provided personal information to Dualtic, contact us immediately at: privacy@dualtic.com

Minors: Dualtic is not directed to minors under 18. Where applicable, we act in accordance with applicable child protection rules, such as the Children's Online Privacy Protection Act (COPPA) of the United States.
9. INTERNATIONAL DATA TRANSFERS

Dualtic operates from Chile and stores data on servers located in Chile. In addition, some of the providers we use to operate the platform process data outside Chile. These are the recipients of international data transfers:

  • Google LLC (United States) — Google Analytics (site usage analytics)
  • Microsoft Corporation (United States) — Microsoft Clarity (site usage analytics)
  • LinkedIn Corporation (United States) — Sign in with LinkedIn (OAuth) and LinkedIn Insight Tag (analytics)
  • Email provider [to be defined at launch] — sending transactional emails
  • Hosting provider [to be defined at launch] — hosting the platform and the database

Legal basis for each transfer (in accordance with art. 27 of Law No. 19.628, as amended by Law No. 21.719):

  • Analytics (Google, Microsoft, LinkedIn Insight Tag): your express consent, given through the cookie banner. If you do not accept analytics cookies, these transfers do not occur.
  • Sign in with LinkedIn: necessary to perform the service that you yourself request by choosing that login method.
  • Hosting and email: adequate contractual safeguards with each provider (data processing agreements that require them to protect your data).

When the Personal Data Protection Agency publishes its list of countries with an adequate level of protection, we will take it into account and report here whether the destination countries hold that qualification. In the meantime, transfers rely on the legal bases indicated above.

European Union Users: Chile does NOT have an adequacy decision under GDPR. If you are an EU resident and this concerns you, you may choose not to use our Services.
10. THIRD-PARTY LINKS

Dualtic may contain links to third-party websites, including:

  • Users' LinkedIn profiles
  • User company websites
  • External resources mentioned in posts

We are not responsible for:

  • The privacy practices of external sites
  • The content of third-party sites
  • The security of linked sites

We recommend reading the privacy policies of any site you visit.

11. EMAIL COMMUNICATIONS
11.1 Transactional Emails (You Cannot Disable)

We send emails necessary to operate your account:

  • Registration confirmation and welcome
  • Password reset
  • Security notifications (email change, login from new device)
  • Important changes to Terms or Privacy Policy

These emails are essential and you cannot opt-out of them while maintaining an active account.

11.2 Operational Emails (You Can Disable)

Reminders to finish setting up your account. If you leave your account half configured, we send you at most three helper emails, one per situation and only once:

  • You created your account and did not confirm your email address
  • You confirmed your email, but your profile is incomplete
  • Your profile is complete, but you have not posted anything

We send them under our legitimate interest (see section 2.6): they are service communications addressed to someone who already created an account, so they can use what they signed up for. They are not marketing or promotion.

You can unsubscribe in one click, without signing in, from the link included at the bottom of each of these emails. It takes effect immediately and does not affect the essential emails in section 11.1.

In the future we may also send relevant post notifications, inactivity reminders, feature updates or personalized suggestions. If we do, you will be able to disable them the same way.

11.3 Promotional Emails (Require Opt-In)

We currently do NOT send marketing or promotional emails.

If we decide to do so in the future:

  • We will ask for explicit consent (opt-in)
  • You can always opt-out easily
  • We will comply with CAN-SPAM Act and other applicable laws
11.4 CAN-SPAM Act Compliance

When we send emails, we follow practices aligned with applicable anti-spam laws (such as the United States CAN-SPAM Act):

  • We don't use misleading subject lines
  • We clearly identify messages as advertising (if applicable)
  • We include a valid means of contact
  • We provide a clear opt-out mechanism
  • We process opt-out requests within 10 business days
12. CHANGES TO THIS PRIVACY POLICY

Dualtic may modify this Privacy Policy periodically to reflect:

  • Changes in our data practices
  • New platform features
  • Changes in privacy laws
  • Security improvements

If we introduce material changes (that significantly affect your rights):

  • We will notify you by email (to your registered address)
  • We will post a prominent notice on the platform
  • We will update the "Last updated" date above
  • We will give you at least 30 days to review the changes before they become effective

Minor changes (typo corrections, clarifications) may be made without prior notice.

Your continued use of our Services after changes become effective means you accept the updated Privacy Policy.

If you do NOT agree with the changes, you can delete your account before the effective date.

Version history: We maintain a record of previous versions of this policy. You can request them by contacting: privacy@dualtic.com
13. CONTACT INFORMATION

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, contact us:

Privacy Email:
  • privacy@dualtic.com
  • For: CCPA requests, data deletion, data export
  • Typical response time: 3-5 business days (45 days for CCPA requests)
General Email:
  • support@dualtic.com
  • For: General inquiries, technical issues
Business Hours:
  • Monday to Friday: 9:00 AM - 6:00 PM (Chile Time)
  • CCPA requests: Processed within 45 days as required by law
14. SUMMARY OF YOUR RIGHTS

In summary, regarding your personal information on Dualtic, you have the right to:

  • ✅ Access all your data at any time
  • ✅ Edit your information unlimited times
  • ✅ Export your data in readable format
  • ✅ Delete optional fields without closing your account
  • ✅ Close your account permanently at any time
  • ✅ Disable operational emails and non-essential cookies
  • ✅ Request information about what data we have (CCPA)
  • ✅ Not be discriminated against for exercising your rights

What we do NOT do with your data:

  • ❌ We do NOT sell your personal information to third parties
  • ❌ We do NOT rent your information to data brokers
  • ❌ We do NOT share your information with advertisers for direct marketing
  • ❌ We do NOT use your information to train third-party AI
15. ACCEPTANCE OF THIS POLICY

By using Dualtic, you acknowledge that:

  • ✅ You have read this Privacy Policy in its entirety
  • ✅ You understand how we collect, use, and share your information
  • ✅ You understand that we process your data on the legal bases described in section 2.6 (service contract, consent, legitimate interest, or legal obligation, as the case may be)

If you do NOT agree with this Privacy Policy, do NOT use our Services.

Last updated: August 24, 2026
Version: 1.0
Effective from: August 24, 2026

© 2026 Dualtic. All rights reserved.

Terms and Conditions | Cookie Policy