Privacy Policy

Flapp SpA — May 2026

1. Who we are

Flapp SpA (RUT 77.857.789-5) is a technology platform that helps eCommerce businesses coordinate the home delivery of their orders. We operate in Chile, Mexico, Peru, and Colombia.

Contact: privacidad@weflapp.com | Av. Vitacura 2939, Of. 701, Las Condes, Santiago.

2. What data we process and why

We process two types of personal data:

End buyers' data (delivery recipients):

Name, phone number, delivery address, email, and order number. This data is provided to us by the online store where the buyer made their purchase, so we can coordinate and carry out the delivery.

Data of Flapp's client companies' contacts:

Name, corporate email, phone number, and billing information. We use this to manage the contractual relationship, provide support, and issue invoices.

3. Who we share data with

We share data only when necessary to provide the service:

• With the courier companies that carry out the delivery: buyer's name, phone number, and address.
• With the client's physical stores that prepare the order: order details.
• With technology providers that help us operate the platform (infrastructure, notifications, support). All operate under data protection agreements.

Some of our technology providers are located outside Chile, mainly in the United States. Transfers are carried out with appropriate contractual safeguards in accordance with Art. 26 of Law 21.719.

We do not sell or transfer personal data to third parties for purposes other than the service.

4. How long we keep the data

• End buyers' data: 12 months from the delivery date.
• Client contacts' data: for the duration of the contract and 5 years thereafter.
• Billing data: 10 years, in accordance with tax regulations.

5. Your rights

If you are an end buyer, the first point of contact for your data is the online store where you made your purchase, as it is the party responsible for your data. You can contact Flapp if your request specifically concerns the data used for your delivery.

If you are a contact at one of Flapp's client companies, you can exercise the following rights:

• Access: find out what data we hold about you.
• Rectification: correct inaccurate data.
• Cancellation: request that we delete your data.
• Objection: object to certain uses of your data.
• Portability: receive your data in digital format.

To exercise your rights, write to privacidad@weflapp.com. We respond within a maximum of 30 business days.

If you believe we have not handled your data properly, you can file a complaint with Chile's Personal Data Protection Agency.

6. Updates

We may update this policy when necessary. We will notify you at least 30 days in advance of any significant changes. The current version will always be available at weflapp.com/privacidad.

May 2026 | privacidad@weflapp.com