Privacy Policy

DUFI is a conversational commerce solution developed and operated by ATIDGO, a French simplified joint-stock company (SASU), registered under SIREN 984 600 296, with its registered office at 44 impasse de la Citerne, 13007 Marseille, France.

ATIDGO acts as the data controller for all personal data processed through the DUFI solution and website (www.dufi.fr).

Contact: contact@atidgo.ai

Data you provide directly

• Phone number (when interacting via RCS, WhatsApp, or SMS)
• Name and contact details (when submitting a demo request)
• Order information: items, quantities, pickup time preferences
• Payment details (processed via certified third-party payment providers; card data is never stored by ATIDGO)
• Messages and conversation content exchanged with DUFI

Data collected automatically

• Technical session data (timestamps, channel used, message delivery status)
• Device and platform metadata transmitted by the messaging carrier
• Browser and navigation data on www.dufi.fr (IP address, pages visited, referrer)

Data collected through DUFI is used exclusively for the following purposes:

• Delivering the DUFI conversational commerce service (order processing, catalog access, payment facilitation, QR code pickup)
• Responding to demo requests and managing the commercial relationship with merchants
• Sending transactional messages related to orders (order confirmation, pickup notification, payment receipt)
• Improving service quality, conversational flow performance and user experience
• Ensuring security, fraud prevention, abuse detection and legal compliance
• Complying with applicable legal and regulatory obligations

ATIDGO does not sell, rent or trade personal data to any third party.

Data may be shared only in the following limited circumstances:

• Merchants using DUFI — order and pickup data is shared with the merchant whose service the user is interacting with, solely to fulfill the order.
• Messaging carriers and platforms — phone numbers and message content are transmitted through the relevant carrier (e.g. Twilio for RCS/SMS, Meta for WhatsApp Business) to deliver messages.
• Payment service providers — payment data is processed by certified third-party providers (e.g. Stripe) under their own privacy policies. ATIDGO does not store card data.
• Hosting and infrastructure providers — including OVHcloud, for data storage and service operation within the European Union.
• Legal obligations — ATIDGO may disclose data when required by applicable law, court order, or regulatory authority.

All third-party providers are contractually bound to process data solely on ATIDGO's instructions and in compliance with applicable data protection law.

DUFI operates conversational services over RCS (Rich Communication Services), WhatsApp Business, and SMS channels, powered in part by Twilio as a messaging infrastructure provider.

Message types

• Transactional messages — order confirmations, payment receipts, QR code for pickup, service notifications.
• Service interaction messages — catalog browsing, order placement, customer support within the conversation.

Message frequency

Message frequency varies depending on user activity. Users typically receive messages only when they initiate an interaction or when an order status changes.

Carrier information

Standard message and data rates may apply depending on your mobile carrier plan. ATIDGO is not responsible for carrier-imposed fees.

Data transmitted to Twilio

To deliver RCS and SMS messages, ATIDGO shares phone numbers and message content with Twilio Inc. (375 Beale Street, Suite 300, San Francisco, CA 94105, USA). Twilio processes this data as a sub-processor under a Data Processing Agreement. For more information, see Twilio's Privacy Policy.

You can opt out of receiving messages from DUFI at any time using the following methods:

After opting out, you will receive one final confirmation message. No further messages will be sent. To re-subscribe, simply initiate a new conversation with DUFI.

ATIDGO retains personal data only as long as necessary for the purposes described in this policy:

• Order and transaction data — retained for 5 years to comply with French commercial and tax law.
• Conversation history — retained for up to 12 months for service quality and dispute resolution purposes.
• Demo request data — retained for up to 3 years from last contact.
• Technical logs — retained for up to 12 months.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

Under the General Data Protection Regulation (GDPR) and French data protection law (loi Informatique et Libertés), you have the following rights regarding your personal data:

• Right of access — obtain a copy of the data we hold about you.
• Right of rectification — request correction of inaccurate or incomplete data.
• Right of erasure — request deletion of your data, subject to legal retention obligations.
• Right to restriction — request that processing be limited in certain circumstances.
• Right to object — object to processing based on legitimate interest.
• Right to portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact ATIDGO at contact@atidgo.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority: CNIL — Commission Nationale de l'Informatique et des Libertés.

The website www.dufi.fr may use cookies and similar trackers for technical operation, audience measurement and user experience improvement.

Audience measurement is performed with Google Analytics 4 (Google Ireland Limited) and is activated only after you give your consent through the cookie banner (managed by the open-source tool Tarteaucitron, hosted on our own servers). You can accept, refuse or change your choice at any time via the "Cookies" link in the footer of each page. Until you consent, no analytics cookie is set.

When you register your business, the origin of your visit (referring site, campaign parameters) is kept in your browser for the duration of your session and sent with your registration so that we know which channel brought you to DUFI.

If you accepted audience measurement, the steps you complete while registering (for example visiting the registration page or sending a verification code) are also counted on our own servers, together with the origin of your visit and a random identifier that lasts only for your browsing session. This contains no name, email address or phone number, is used only to measure how many visitors reach each step, and is deleted after 13 months.

You can configure your browser to refuse all or part of the cookies. Certain features of the website may be degraded as a result.

No cookies are placed through DUFI's messaging channels (RCS, WhatsApp, SMS).

For any question regarding this Privacy Policy or to exercise your rights:

• Email: contact@atidgo.ai
• Postal address: ATIDGO — 44 impasse de la Citerne, 13007 Marseille, France
• Website: www.atidgo.ai

This policy may be updated periodically. The date at the top of this page reflects the most recent revision.