This policy explains what personal data the Diroo service (the "Service") processes, why, and on what legal basis.
Operator: Руцький Євгеній Денисович, Україна. Contact: alexbayra5@gmail.com
Roles. The company or sole trader using the Service (the "Business") is the controller of its customers' personal data. Diroo acts as a processor, handling data on the Business's instructions and only as needed to operate the Service. The Business is responsible for informing its customers that an automated assistant is in use.
Data of the Business's customers who message it on Instagram Direct:
Business data: name, city, working hours, list of services and prices, and contact details for notifications.
The Service does not collect customers' payment details, identity documents, health data, or location, and does not use tracking cookies on public pages.
Processing is based on the contract between the Business and its customer, the Business's legitimate interest in communicating with its customers, and the service agreement with the Business.
We do not sell data and do not share it with third parties for advertising. The following providers are involved:
| Provider | Data received | Purpose |
|---|---|---|
| Google (Gemini API) | Message text and Business service data | Generating assistant replies |
| Cloudflare | All Service data | Hosting and database storage |
| Meta (Instagram) | Reply text and recipient ID | Delivering the message in Direct |
| Telegram | New-lead notifications | Alerting the Business |
Please note: conversation text is sent to Google's Gemini AI service to generate replies. Google processes this data under its own terms and, under its paid API policy, does not use it to train its models.
Replies are generated by an artificial intelligence system. The assistant makes no decisions producing legal effects for individuals. If a customer directly asks whether they are talking to a program, the assistant answers honestly, and on request the conversation is handed over to a human member of staff.
You have the right to know what data is processed, obtain a copy of it, request correction or deletion, and withdraw consent. To exercise any of these rights, email alexbayra5@gmail.com. We respond within 30 days. Where a request concerns data collected by a particular Business, we forward it to that Business as the controller. Users in Ukraine may also complain to the Ukrainian Parliament Commissioner for Human Rights.
Data is stored on Cloudflare infrastructure, encrypted in transit (HTTPS) and at rest. The administrative panel is password-protected. Incoming requests from Meta are verified by cryptographic signature. Operator staff access to conversations is limited to technical support and is logged.
The Service is not intended for individuals under 16 and does not knowingly collect their data. If you believe we hold a child's data, contact us and we will delete it.
We may update this policy. The date at the top reflects the latest revision. Businesses using the Service are notified of material changes by email.
alexbayra5@gmail.com