Osabana

Privacy Policy

Last updated: August 18, 2026

This Privacy Policy describes how Greenars LLC(hereinafter "Osabana", "we", or "our"), operating from the United States, collects, uses, stores, and protects the personal information of users of the Osabana platform, including the mobile application and website.

1. Information We Collect

We collect the following types of personal information when you use our services:

  • Account information: first name, last name, email, phone number, and password (stored encrypted).
  • Shipping information: address, city, state/province, postal code, country, and delivery instructions.
  • Order information: purchase history, products purchased, amounts, and order statuses.
  • Payment information: processed directly by our payment providers (Wompi). We do not store credit/debit card numbers on our servers.
  • Usage and analytics data: device information, IP address, pages visited, browsing time, and usage patterns via Google Analytics.

2. How We Collect Information

  • Directly from you: when you create an account, place an order, update your profile, or contact us.
  • Automatically: through cookies and tracking technologies (Google Analytics) when you browse the store.
  • From third parties: payment providers confirming transactions.

3. Use of Information

We use your personal information to:

  • Process and deliver your orders.
  • Manage your account and authentication.
  • Send you order confirmations and shipping updates.
  • Improve our services and user experience.
  • Analyze platform performance (analytics).
  • Comply with legal and tax obligations.
  • Prevent fraud and unauthorized activities.

4. Sharing with Third Parties

We share personal information only with the following types of providers that offer equivalent data protection:

  • Payment processors: Wompi (to process transactions securely).
  • Shipping services: logistics providers for order delivery.
  • Analytics: Google Analytics (anonymized usage data and browsing behavior).
  • Infrastructure: cloud hosting and storage providers (AWS).

We do not sell, rent, or share your personal information with third parties for marketing purposes.

5. Data Retention

We retain your personal information as long as your account is active or as needed to provide services. Order data is retained for the period required by applicable tax legislation (minimum 5 years). You may request deletion of your account and personal data at any time (see section 7).

6. Data Security

We implement technical and organizational security measures to protect your information, including:

  • Encrypted communications via HTTPS/TLS.
  • Passwords stored with bcrypt hashing.
  • Restricted access to personal data limited to authorized personnel only.
  • Secure server infrastructure with regular updates.

7. Your Rights

You have the right to:

  • Access your stored personal information.
  • Rectify inaccurate or incomplete data.
  • Delete your account and associated personal data.
  • Revoke consent for data processing.
  • Portability: request a copy of your data in a readable format.

You can exercise these rights from your account settings in the application, or by contacting us at hello@osabana.com.

8. Account and Data Deletion

You can request complete deletion of your account and personal data at any time from the "My Account" section within the application, or by visiting our account deletion page.

When you delete your account, we permanently anonymize your personal information (name, email, phone, addresses). Order records are retained in anonymous form for legal and tax obligations, but cannot be linked to your identity.

9. Google Analytics

We use Google Analytics to analyze the use of our services. Google Analytics collects information such as your IP address (anonymized), device type, operating system, pages visited, and session duration. This information is used solely to improve our services. You can opt out by installing the Google Analytics opt-out browser add-on.

10. Children

Our services are not directed to children under 13 years of age. We do not knowingly collect information from minors. If we discover that we have collected data from a child, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice in our services. Continued use of the platform after changes constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or about the processing of your personal data, you can contact us at:

13. Governing Law

This policy is governed by applicable data protection laws in the jurisdictions where we operate, including but not limited to applicable U.S. state privacy laws and Colombian Law 1581 of 2012 (Personal Data Protection).