Information
Privacy
What data Cordanda uses, what for, who sees it, how long we keep it and how to exercise your rights under Ecuador's Organic Law on Personal Data Protection (Ley Orgánica de Protección de Datos Personales).
Last updated: October 7, 2026
This is a translation. In case of any discrepancy, the Spanish version prevails.
Controller
Cordanda is responsible for the data processed on the platform. For any question about your data, write to us on WhatsApp at 099 549 4992 or through the channels on the Contact page.
If you're only browsing
You can search and view activities without an account. We don't use ad networks or third-party trackers. If you accept the optional preferences, some are stored only in your browser (we explain this in Cookies and preferences). When you tap a contact button, the conversation moves to WhatsApp or another app, outside Cordanda.
Your account data
- First names, last names and email, to create the account, sign in and send you notices.
- Confirmation that you are 18 or older and that you accepted the terms.
- Your private phone number, if you add it. It is never shown on your public profile and is only used to verify you and contact you for support.
What is public
Your organizer profile (name, photo, description, city and the public contacts you choose, such as WhatsApp or social media) and your published activities can be seen by anyone. You decide which public contacts you add.
Verifications
If you request a verification, we receive the data and photos its form asks for (for example, ID card (cédula), a selfie holding the ID card, guide license or RUC). Photos are reprocessed on upload to strip metadata such as location. Only the team reviewing the request sees them. They are never published: only the badge appears on your profile.
Reports and featured listings
- A report stores the reason, your explanation and, if you provide one, an email to reply to you. The person reported doesn't see who reported them.
- For a featured listing we store the request and the payment receipt you send.
- While an activity is featured we anonymously count its appearances, visits and contacts, without storing who you are, your IP or your device.
Who we share it with
We don't sell or rent personal data. We use providers that process data on our behalf: Supabase (database, accounts and files), Vercel (website hosting) and Resend (sending emails). They may store data outside Ecuador with appropriate security measures. We would also hand over data to an authority when the law requires it.
How long we keep it
- Your account and your profile, for as long as the account exists.
- Activities sent to the trash can be restored for 15 days; after that they are deleted.
- A verification's documents, up to 90 days after the request is closed.
- Dashboard notices: read ones, 30 days; unread ones, 90 days.
- A minimal log of important actions (for example, phone changes or moderation decisions), for security and to handle complaints.
Your rights
You can request access to your data, correct it, delete it, object to a processing activity, suspend it or receive a copy (portability). You can change your names and phone yourself from “Data and security” in your dashboard; for everything else, write to us. If you're not satisfied with the response, you can turn to the Superintendencia de Protección de Datos Personales (Ecuador's data protection authority).
Security
Connections are encrypted, private documents are kept in storage with no public access and each person can only read what belongs to them. No system is infallible: if we detect an incident affecting your data, we will let you know.
Minors
Accounts are only for people over 18. If you believe a minor has created an account, write to us and we'll review it.