DHAQSO DIR
Privacy
Preview: The service is still under development. Live money transfers and production partners must not be enabled until agreements, legally required procedures and the final retention policy are in place.
What information is processed?
- Account and contact data: name, phone, email and password hash.
- Profile and KYC data: date of birth, address, ID front and back, selfie and verification status.
- Recipient and transfer data: recipient, payout method, amount, status and event log.
- Customer chat and security log linked to the account.
Why is the data used?
Information is used only for accounts, customer support, identity verification, abuse prevention and processing or tracking a transfer. DHAQSO DIR does not use it for advertising tracking.
How is the data protected?
- Passwords are stored as adaptive bcrypt hashes, never as plain text.
- ID images and selfies are encrypted by the application before storage.
- Login uses HttpOnly/Secure cookies, short access sessions and rotating refresh tokens.
- Changes are protected by origin checks, role-based access and rate limits.
- KYC cannot be approved until the ID and selfie are confirmed to show the same person.
Who can access the data?
Customers can view their own data. Authorised ADMIN/OFFICE staff receive only the access needed for support, KYC and transfer review. Payout partners are not connected in this preview. Only necessary information should be shared when an approved partner is connected.
Storage and deletion
ADMIN must review permanent account deletion after the customer contacts support. Personal data that does not need to be retained is deleted after review. ID, selfie and transfer records are retained only when accounting, anti-money laundering or other legal obligations require it. The final retention policy must be approved before production launch.
Your choices and rights
You can correct profile information and download a copy of your account data from your profile. Start account deletion under Delete account and confirm with your password. Other requests for access or corrections can be sent in customer chat.
Cookies
The service uses only necessary security cookies for login, session renewal and any BankID flow. They cannot be used by JavaScript for advertising tracking.
Contact
Personvernansvarlig er DHAQSO DIR. Innloggede kunder bruker kundechatten. Offentlig kontaktadresse og organisasjonsopplysninger må publiseres før produksjonssetting.