Privacy Policy
Last updated: March 31, 2026
Multando ("we", "us", "our") operates the multando.com platform and related services. This Privacy Policy explains how we collect, use, share, and protect your personal information in accordance with Colombian Law 1581 of 2012 (Habeas Data) and its regulatory decrees.
Information We Collect
We collect information you provide directly and information generated through your use of the platform.
Personal Information
When you create an account, we collect your name, email address, phone number, and password. If you register through a third-party service, we may receive your name and email from that provider.
Location Data
We collect precise location data when you submit a traffic infraction report. This includes GPS coordinates, street address, and city. Location data from photo EXIF metadata may also be used to verify report accuracy.
Photos and Videos
When you submit a report, you upload photographic or video evidence of the traffic infraction. This evidence may contain vehicle license plates, public roadways, and surrounding areas. We process these images using AI to extract relevant information.
Device Information
We automatically collect device type, operating system, browser type, IP address, and app version. This helps us maintain security, debug issues, and improve the platform experience.
Wallet & Blockchain Data
If you use the platform's reward system, we store your MULTA token balance, transaction history, and custodial wallet information. If you connect an external Solana wallet, we store your public wallet address.
How We Use Your Information
Your data enables us to operate the platform, process reports, and distribute rewards.
- Process and verify traffic infraction reports you submit
- Distribute MULTA token rewards for verified reports
- Submit verified reports to city authorities and the SIMIT/RECORD system
- Analyze infraction evidence using artificial intelligence
- Communicate with you about your reports, rewards, and account
- Improve platform features, detect fraud, and prevent abuse
- Generate anonymized analytics for city authorities
Blockchain Data
Important information about the public nature of blockchain transactions.
MULTA token transactions are recorded on the Solana blockchain, which is a public and immutable ledger. Once a transaction is recorded on-chain, it cannot be modified or deleted. Your public wallet address and transaction history are visible to anyone on the blockchain.
For custodial wallets managed by Multando, private keys are encrypted using AES-256 encryption and stored securely. We never expose private keys, and access is protected by multi-layer security controls.
If you switch to Advanced Mode and connect your own Solana wallet, you are solely responsible for the security of your private keys. Multando does not have access to or store your external wallet's private keys.
Data Sharing
We share your information only when necessary to operate the platform and fulfill its purpose.
City Authorities
Verified traffic infraction reports, including evidence, location, and vehicle information, are shared with relevant municipal transit authorities for processing. Reports may be submitted to Colombia's RECORD system (Registro de Contravenciones y Multas).
WhatsApp (Meta)
If you interact with our WhatsApp chatbot to submit reports, your phone number and messages are processed through the WhatsApp Business API operated by Meta Platforms, Inc.
AI Providers
Photos and videos you upload are processed by Anthropic's AI models to detect license plates, identify infraction types, and extract location data. Images are processed in transit and not retained by the AI provider beyond processing.
Cloud Storage
Evidence files (photos and videos) are stored securely on Amazon Web Services (AWS) S3 with server-side encryption. Data may be processed in AWS regions outside Colombia, in compliance with applicable data transfer regulations.
RECORD Form Submission
When submitting reports to the Colombian government's RECORD system, we use third-party services (2Captcha) to complete the submission form on your behalf.
Data Retention
We retain your data for as long as necessary to provide our services.
Account information is retained for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law.
Traffic infraction reports and evidence are retained for a minimum of 5 years, as required by Colombian transit regulations, even if your account is deleted.
Blockchain transactions are permanent and immutable. Token transaction records on the Solana blockchain cannot be deleted.
Server logs and analytics data are retained for up to 12 months for security and operational purposes.
Your Rights
Under Colombian Law 1581 of 2012, you have the following ARCO rights regarding your personal data.
Access
You have the right to know what personal data we hold about you and how it is being used. You can request a copy of your data at any time.
Rectification
You have the right to request correction of inaccurate or incomplete personal data. Update your profile directly or contact us.
Cancellation
You have the right to request deletion of your personal data, subject to legal retention requirements. Note that blockchain records cannot be deleted.
Opposition
You have the right to object to the processing of your personal data for certain purposes, such as marketing communications.
To exercise any of these rights, email us at privacy@multando.com. We will respond within 15 business days as required by law.
Cookies
We use cookies and similar technologies to improve your experience.
Essential cookies are required for the platform to function properly, including authentication, language preferences, and security tokens.
Analytics cookies help us understand how users interact with the platform so we can improve features and performance.
You can control cookie preferences through your browser settings. Disabling essential cookies may prevent certain platform features from working correctly.
Security
We take the protection of your data seriously.
All data transmitted between your device and our servers is encrypted using TLS 1.3. Sensitive data at rest, including wallet private keys, is encrypted using AES-256.
We implement role-based access controls, audit logging, and regular security reviews. Our infrastructure is hosted on AWS with industry-standard security certifications.
While we implement robust security measures, no system is completely secure. We encourage you to use strong passwords and enable two-factor authentication on your account.
Children's Privacy
Our platform is not intended for users under 18 years of age.
Multando does not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@multando.com and we will promptly delete such information.
Changes to This Policy
We may update this policy from time to time.
If we make material changes to this Privacy Policy, we will notify you by email and/or by posting a prominent notice on the platform at least 15 days before the changes take effect. Your continued use of the platform after the effective date constitutes your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or your personal data.
For privacy-related inquiries, data access requests, or to exercise your ARCO rights, please contact us:
Email: privacy@multando.com
Multando S.A.S., Bogota, Colombia
You may also file a complaint with the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority.