Compliance draft - identity-document collection and commercial launch remain blocked until the listed safeguards and approvals are complete
Darii Privacy Policy
Darii may handle sensitive information. Before collecting identity cards or passports, the production service must have strict privacy rules, encrypted storage, and limited administrative access.
Service name
Darii VIP
YourTools · hello@yourtools.cc
Request account and data deletionVoice messages
Voice recording is optional and requests microphone permission when used. Recordings are stored to deliver and play messages to conversation participants; authorized Support can review support recordings. Recording stops when you leave the app. Messages are not end-to-end encrypted and follow the account-data deletion rules.
App notifications
With your permission, Darii uses Google Firebase Cloud Messaging for message alerts. We associate an app installation identifier with your account and language for up to 30 days after registration is refreshed. Push payloads contain message and conversation identifiers, not private message text. You can disable notifications in your phone settings. Signing out stops alerts for that account on the device.
Managed database backups expire after 30 days and are removed by scheduled cleanup. If recovery storage is offline, removal happens when it is next available; expired copies cannot be used by our restore tools. Our recovery process reapplies deletion requests before restored data is used. We retain a limited record of deleted account identifiers to prevent old backups from bringing their data back.
Android app data
Firebase notifications use an app-installation identifier, app version and technical metadata such as operating system, device model and SDK versions. We do not include private message text in notification payloads. The current app does not include Firebase Analytics, Crashlytics or Performance Monitoring SDKs. Darii web pages opened inside the app may record page activity as described in the analytics section.
Android keeps an encrypted local copy of recent messages to open chats faster. This cache is excluded from Android device backups and cleared on sign-out. The app rejects a cache that has not been updated for 7 days. This protects local storage; it is not end-to-end encryption of conversations.
Permission to repost listing photos and videos
When you accept reposting permission, we may share listing photos, videos, text, public details and links with social platforms on official Darii pages. This content becomes available to their audiences and is processed under their privacy policies, potentially outside Iraq. Permission excludes private phone numbers, email, chats, identity and ownership documents, and unpublished precise locations. Do not include private information or people without necessary permission in uploaded media. Request withdrawal and removal of copies we control through Darii Support or hello@yourtools.cc; we may be unable to remove third-party copies or platform caches. We retain the accepted terms version and acceptance time linked to the listing to document permission, subject to retention and deletion policies.
Data Darii may collect
Phone number, verification status, identity card or passport review status, listing details, property photos and Shorts, messages, structured offers, optional promotion requests, hotel stay dates and guest count, booking and payment status, payment-provider references, comments, reports, likes, and transaction-status records. Darii does not need full card numbers or card security codes.
Anonymous visitor analytics
Darii records an anonymous browser-session identifier, referral source, campaign tags, language, visited page paths, page-view count, and recent activity time to measure traffic and show current visitor totals. Darii does not store a raw IP address in this analytics record, does not use it to read messages, and deletes these session records after 90 days.
Why Darii uses data
To publish listings and Shorts, verify sellers, process optional promotion requests, follow up on unanswered listing messages, detect scams, block unsafe off-platform contact, resolve disputes, and improve search results.
Message monitoring
Darii may scan direct messages and comments for phone numbers, email addresses, social media accounts, suspicious payment requests, scams, threats, harassment, and unsafe attempts to move conversations away from the platform.
Identity documents
Identity card and passport uploads should be encrypted, limited to authorized personnel, logged, retained only for as long as necessary, and reviewed under a written verification policy.
User controls
Users can edit available profile fields and report abuse. Until a secure self-service account-cancellation and deletion flow is implemented, users may send a deletion request to hello@yourtools.cc. Darii must verify the requester, delete or irreversibly anonymize data that is not legally required for fraud, payment, dispute, or compliance records, and explain any data that must be retained. Self-service cancellation and deletion remain a commercial-launch requirement.
Requirement before launch
Darii should not collect real identity card or passport documents until the company has final legal approval, secure storage, a data-breach response process, and an administrative access policy.
Sharing and service providers
Darii may share only necessary data with hosting, storage, identity-verification, payment, messaging, security, and professional advisers under written safeguards. Data is disclosed to authorities only when legally required. Data is not sold, and transfer to another third party requires a lawful basis and any explicit consent required by Iraqi law.
Security and breach response
Darii must use access controls, encryption where appropriate, audit logs, backups, staff confidentiality, and incident procedures. If a breach may harm a user’s rights or data, Darii will notify affected users and competent authorities as required by applicable law.
Retention
Darii keeps personal data only as long as needed for the stated purpose, legal compliance, fraud prevention, payment records, and disputes. A written retention schedule and secure deletion process must be approved before launch.
Children and contact
Darii is not intended for users under 18 to submit property listings. Privacy questions and requests may be sent to hello@yourtools.cc. The operating company’s legal name and address must be added before launch.