This notice explains what personal information Deyn collects, why, and what you can do about it. It covers people who use the app and people whose details are entered into it.
Who this applies to
- Users: owners, admins and staff of a lending business who sign in to Deyn.
- Clients: people whose details a lending business enters into Deyn. The business is responsible for them; we process on the business's instructions.
- Visitors: people reading this website. We use Google Analytics to count visits and see which pages are read, with IP addresses shortened. See the cookie notice for how consent works and how to opt out. The app itself has no analytics.
What we collect about users
- Name, work email, phone number, role and the business you belong to.
- Sign-in records: time, IP address, and whether two-step sign-in was used.
- What you do in the app, in the audit log: which records you created or changed, with before and after values.
- Billing details of the business: invoices and payments recorded by the platform. We do not store card numbers.
What we hold about clients, on behalf of a business
- Name, phone, email, ID number, date of birth, address, nickname and guarantor, as entered by the business.
- Loans, payments, balances and messages sent to them.
If you are a client of a business that uses Deyn, your first contact should be that business. They decide what to record and can correct or remove it. We will help them do so.
Why we use it
- To provide the service: keeping records, sending reminders, producing statements.
- To keep accounts secure: sign-in checks, two-step codes, the audit log.
- To bill the business and to answer support questions.
- To meet legal duties, such as keeping financial records for the period the law requires.
Messages
Reminder SMS and emails are sent through carriers such as Africa's Talking, Twilio and SendGrid. They receive the phone number or email and the message text in order to deliver it, and report back whether it arrived. They do not get the rest of the record.
Who else sees it
- Hosting providers that run our servers and database.
- The message carriers above.
- Nobody else, unless the law requires it or you ask us to.
We never sell personal information and never use client details to advertise anything.
Where it is kept and for how long
Data is stored on servers in the European Union and the United States, encrypted in transit and at rest. We keep account and transaction records while the business has an account and for seven years after it closes, because financial records are usually required for that long. Sign-in logs are kept for one year. The data protection notice has the full retention table.
Your rights
Depending on where you live, you can ask to see the information we hold about you, have it corrected, have it deleted where we no longer need it, or receive a copy. Users can see most of their data in the app. Clients should ask the business first; if that does not work, write to us and we will help. We answer within 30 days.
Children
Deyn is for adults. Clients must be 18 or over and the app will not accept a younger date of birth.
Contact
Questions about privacy go to dms@koneza.com. If you are not satisfied with our answer you may complain to the data protection authority in your country.