TAKE AND GO, S.A.S. DE C.V. (operator of Tago, the P2P vehicle rental marketplace in El Salvador, registered with the Commercial Registry of the CNR under entry 152, book 4942, with registered office at Avenida Jacarandas 175, Colonia Miramonte, San Salvador) recognizes your ARCO-POL right under El Salvador's Personal Data Protection Law (Legislative Decree 144/2024) to control specific portions of your data without having to delete your entire account. This page describes how to exercise it.
Actions you can take directly in the app
The following pieces of information can be deleted or replaced instantly from your Tago account, without paperwork and without losing your account: **Profile photo (avatar)** — Profile → Edit profile → tap your photo → Delete. The photo is removed from storage within seconds. **Listed vehicles (hosts)** — Hosting → your vehicle → Delete. The vehicle photos, description, location, and calendar are deleted along with the vehicle. Past bookings tied to it are retained in the financial record (see "Data retained by legal obligation" below). **Saved payment methods** — Profile → Payment methods → tap the card → Delete. The tokenized reference is deleted from Tago. The actual card data was never stored on Tago in the first place (Wompi handled it under PCI-DSS). **Individual chat messages** — Messages → conversation → long-press your own message → Delete. The message is marked as deleted for all participants. **Block another user (cuts off future data exchange)** — Messages / vehicle / user profile → menu → Block. The other person can no longer see you, and you stop seeing their vehicles, messages, and profile.
Download a copy of all your data
Before deleting anything, you can download your full archive: profile, bookings as renter and as host, listed vehicles, conversations, messages, payment methods (with no real card numbers — only the last 4 digits), reviews given and received, identity verification documents, consent records, and notifications. How: **Profile → Download my data** → tap "Request data export". You receive a `.json` file directly on your device (web: browser download; iOS/Android: system share sheet to save to Files / Drive / Mail / WhatsApp). The file is generated instantly with every record tied to your account. This fulfills your right to data portability under Art. 31 of D.L. 144/2024.
Request partial deletion by email
For data you cannot delete directly from the app — for example, **search history**, **historical trip records**, **historical geolocation logs**, or **reviews you wrote** — email us at privacy@tago.rent from the email address associated with your account. In the email, specify: 1. The specific piece of data you want to delete (e.g. "all my search history prior to 2026"). 2. Your reason (optional but helps with processing). We aim to process the request within **7 business days** and confirm by the same channel when complete. The legal maximum is **20 business days**, extendable once by up to **20 additional business days** with notice of the extension (Art. 20 of D.L. 144/2024); if we deny the request in whole or in part we notify you by reasoned resolution within **3 business days** (Art. 22). Effective deletion within **30 days** of confirmation. Removal from encrypted backups within **90 days**.
Data we retain by legal obligation
Even when you request partial deletion, certain data cannot be removed while a legal obligation is in force: • **Financial and tax records** — invoices and electronic tax documents (DTE), receipts, transfers, accounting entries: 10 years from generation, per Art. 147 of the Salvadoran Tax Code. • **E-commerce relationship records** — proof of the commercial relationship, your personal data, the contracting steps, payment method, and delivery: 10 years from the finalisation of the transaction, per Art. 21-B lit. c) of the Consumer Protection Law (D.L. 776). • **Trip records involving disputes, insurance claims, or open investigations** — kept until resolution and through the applicable statute of limitations. • **Data required by judicial proceedings or competent authorities** — for the duration of the obligation. • **Identity verification tied to any completed rental** — required for transport regulatory audit, fraud prevention, and support for claims tied to verified policies. While the safekeeping duty is in force, the effect of your right to erasure over these records is **blocking**, not deletion: they are withdrawn from all commercial use and kept available only to authorities and courts, and for the formulation, exercise, or defence of claims (Arts. 10 para. 2 and 11 of D.L. 144/2024). They are kept in anonymized or pseudonymized form whenever technically possible, and only authorized personnel can access them.
If you want to delete your ENTIRE account
If instead of partial deletion you want to delete your entire account (including profile, all preferences, and everything that can be deleted under the law), follow the instructions on our dedicated page: Delete my Tago account
Contact
For questions about this policy or your ARCO-POL rights, email privacy@tago.rent or the Data Protection Officer at dpo@tago.rent. To file a complaint, you may approach the Agencia de Ciberseguridad del Estado (ACE) — the supervisory authority for El Salvador's Personal Data Protection Law.