Personal dataprocessing policy
TLS/HTTPS encryption
Bank-grade security in transit and at rest
Data sales
We never commercialise your financial information
Disglobal C.A.
Data controller
Distribuidora Global de Insumos XXI, C.A. ("DisGlobal", "we") is the controller of the data described in this policy. We operate the Disglobal POS mobile app and the middleware platform that connects POS devices to the Tranred payment processor. You can reach us with any privacy question at soporte@dis-global.com.
Apps and gateways
Scope
This policy applies to the applications developed by Disglobal. It does not cover third-party sites or services you may reach from our app, such as the different processors and banks, which have their own policies.
Regulated categories
What data do we collect?
Segmented handling under the strict data minimisation principle, in line with payment system regulation.
Merchant registration
Identification and contact
When registering a customer or merchant: first and last names, national ID or tax ID, date of birth, sex, marital status, address (state, municipality, parish), phone and email.
Fund settlement
Financial data
The merchant's bank account number, used to settle the payments it processes.
POS gateway flow
Transaction and card data
When processing a payment, the POS device transmits to our servers the card data needed to authorise the operation (number, expiry date, EMV chip data, PIN encrypted by the reader itself), which we forward to the payment processor.
Hardware & local
Device permissions
Bluetooth and approximate location, to connect external EMV card readers (Android requires the location permission for Bluetooth scanning; we do not use it to track you). Camera and gallery, to attach receipts. Biometric authentication, to unlock the app on your own device — it is never sent to our servers.
Purpose of processing
What we use this data for
Create and manage customer and merchant accounts.
Process payment transactions, voids and closeouts.
Prevent fraud and meet the payment processor requirements.
Provide technical support and send operational messages, such as SMS verification codes.
Generate reports and till closeouts for the merchant.
Who we share your data with
Tranred, C.A. (payment processors): receives the transaction and card data needed to authorise each operation, under their own security policies.
Receives your phone number and the message content when we send you a verification code.
Absolute commitment
We do not sell your personal data to third parties, nor do we use it for advertising.
Security architecture
How do we protect your data?
Continuous cryptographic protocols applied across every transactional life cycle.
End-to-end encryption
We apply technical and organisational measures to protect your information: part of your personal profile is stored encrypted in our database, access to our systems is restricted to authorised staff, and communications with our servers travel encrypted (HTTPS/TLS).
Cryptographic evolution
We are continuously strengthening the encryption of the most sensitive information we handle — including identity documents, bank accounts and the data of every transaction — as part of the permanent evolution of our platform.
Incident management
No system is completely infallible. If we identify an incident affecting your data, we will notify you in accordance with applicable regulation.
Tranred and regulator banking standards: Processing operations comply with strict operational safeguard policies and continuous audit authorised by the Superintendency of Banking Sector Institutions.
Data subject rights
Your rights
To the personal data we hold about you.
Of inaccurate or outdated data.
Of your account and personal data, where no legal obligation prevents us from doing so.
Write to us at soporte@dis-global.com stating your request; we will reply within a reasonable time.
How long do we keep your data?
We keep your account data while it stays active, and transaction records for as long as our legal, accounting and payment processor obligations require. You can request the deletion of your account at any time — see Section 8.
Minors
Disglobal POS is not directed at minors and we do not knowingly collect personal data from minors.
Changes to this policy
We may update this policy when our practices or the applicable regulation change. We will always publish the current version on this same page, together with its update date.
Contact
For institutional enquiries, habeas data requests or technical clarifications about our gateway: