Privacy policy

What we keep

• Your account: your phone number (it is how you sign in), the name you give us, an email address if you add one, and when you confirmed you are 18 or over.
• Profiles you link: the platform, the handle and the platform's id for it, your name and picture there, the follower count as the platform last gave it, and the access the platform gives Dariro when you sign in with it, encrypted, used only to count your followers.
• Businesses and campaigns, if you are a brand: what you tell us about each business, and each campaign's brief, caption, link, files and budget.
• Jobs, if you are a promoter: the campaigns you take or apply for, the links to your posts, that you said each post is labelled as paid, and what the platform said about each post when we checked it.
• Money: your wallet balance, every payment in and out, and the payouts you ask for (amounts, dates, references, the EcoCash number paid). Card and mobile-money details are entered with the payment provider, not with us; we never see your PIN or card number.
• Identity checks, only for large payouts: when payouts pass $500 in 30 days we check who you are before sending, and keep a record that we did.
• Messages: what you write to Dariro's assistant on the website or on WhatsApp, and our replies.
• Technical records: when you signed in, and error logs, kept for a short time to keep Dariro running and safe.

What we read from the platforms

To check a post is real, public and yours, we ask the platform it is on (YouTube, Facebook, Instagram) through its public embedding service. We get back what anyone could see: that the post exists, who posted it and its title.

You link a profile by signing in with its platform (for example "Continue with TikTok"). The platform shows you what Dariro asks for before you agree: your name, picture, handle and follower count. We use it to know the profile is yours and to count your followers once a day. We never post, send messages or read anything private. To stop it, unlink the profile under Profiles (we delete the access at once) or remove Dariro in the platform's settings.

Why we keep it

• To run your account, your campaigns and your jobs, and to hold and pay out money.
• To check profiles and posts are real, and to stop fraud, fake followers and abuse.
• To screen what is published against our rules, and to answer you in the assistant.
• To suggest campaigns for a business, from what you told us about that business only.
• To keep the financial records the law requires, and to settle disputes.

We do not sell your data or show you adverts. To see where the site is confusing, we record how pages are used (taps, scrolls, which screens) with Microsoft Clarity, with the words on the screen and everything you type hidden. Google Analytics counts visits and steps such as signing in or taking a job, without your name, number or messages, and never for advertising.

Who else sees it

• Brands see the handle, follower count and post link of each promoter on their campaigns. Promoters see a campaign's brand name, brief and files.
• Payment providers (Pesepay; Smile Pay by ZB Bank) process top-ups and payouts.
• Meta carries WhatsApp messages, and SMS Localhost (Zimbabwe) sends sign-in codes by SMS.
• Mailtrap sends our emails. Anthropic runs the AI that answers in the assistant, screens campaigns and suggests ideas; it receives the text involved, under terms that don't let it train its models on it.
• Microsoft Clarity records how the website is used (not what is written or typed on it), to improve it.
• Google Analytics counts visits and the steps people take on the website, in totals, to improve it. It sets cookies for that; advertising features are off.
• Cloudflare carries traffic to the site, and our servers are with Contabo in France.
• Public authorities, only when the law requires it: we check each request is lawful, refuse or challenge those that aren't, share the minimum it requires, tell you unless the law forbids it, and keep a record of every request.

Some of these are outside Zimbabwe; each handles your data only to provide its service to us.

How long we keep it

Your account, profiles, businesses and campaigns stay until you delete them or ask us to. Records of money (payments, wallet entries, money held for jobs, payouts) are kept for as long as the law requires financial records to be kept, even after your account is deleted, with your name removed where possible. Technical logs are kept for a short time.

Deleting your data

You can have your account and everything about you deleted at any time:

• Write delete my account to Dariro on WhatsApp, or email [email protected] from your account's email or with your phone number.
• We confirm it is you, then within 30 days delete your account, linked profiles, businesses, campaigns, files and messages.
• Money still in your wallet or held for a job is paid out or refunded first. Financial records the law makes us keep stay, without your name where possible.
• You can also remove a single profile at any time under Profiles, or by removing Dariro in the platform’s own settings (Instagram and Facebook tell us, and we unlink it at once).

Your rights

You can ask to see what we keep about you, to correct it, to delete it, or to object to how we use it, by emailing [email protected]. We answer within 30 days. If you are not happy with our answer, you can complain to the Data Protection Authority (POTRAZ).

Safety

Data travels encrypted (HTTPS), access to it is limited to the people who run Dariro, and nobody at Dariro can see your payment details. Sign-in needs a code sent to your phone: never share it.

Age and changes

Dariro is for people aged 18 and over. If this policy changes, we update the date at the top and tell you in the app or on WhatsApp before a change that matters takes effect.