1. Who we are
Dirol Labs Inc. (“Dirol”, “we”, “us”), registered at Oceania Business Plaza, Torre 1000, 21st Floor, Isaac Hanono Missri Street, Punta Pacifica, Panama City, Republic of Panama, operates the website at dirol.io, the web app at social.dirol.io and the Dirol Social app for iOS (together, the “Services”). We decide how and why the personal data in this Policy is used. Questions and privacy requests go to hello@dirol.io.
2. Data we process
Account data
You sign in through Privy with Apple, Google, X or email. We receive a Privy user ID and, depending on the method, your email address (Sign in with Apple can give a private relay address) or your X account ID, handle, display name and profile image. We do not receive the passwords of these accounts. X sign-in does not let us read your direct messages or post on X.
Wallet and trading data
Your wallet address; balances, deposits, withdrawals and transfers; quotes, routes, swaps, limit and DCA orders, take-profit and stop-loss settings, fees and transaction status; the one-click trading permissions you sign; and, when you use perps, your Perpl account, orders, collateral and positions.
Profile and content
Your display name, handle, avatar, banner and bio; your posts and the photos you attach, comments, likes, follows and holder-chat messages; the reports you send and the users you block or mute.
Device and technical data
If you allow notifications, the push token that Apple issues for your device, with the platform and app version. Our servers record IP addresses, requests, timestamps and errors. The app keeps some settings on your device, for example which of our server regions answered first.
Waitlist data
If you join the waitlist on dirol.io, your X account ID and handle and the time you joined.
Camera and photos
The app uses the camera only to read the QR code of a wallet address when you send funds. The camera image stays on your device; we do not store or receive it. When you attach a photo to a post, the app uploads only that photo. When you save a share card, the app asks for permission to add it to your photo library; it does not read your library.
Data we do not collect
The iOS app does not collect your contacts, precise location or advertising identifier. It contains no third-party advertising or analytics SDK. We do not track you across apps and websites owned by other companies.
3. How we use data
- To provide the Services you ask for: sign you in, show your wallet, get quotes, submit the trades and orders you place, run the feed and holder chats, send the notifications you turned on, and answer support requests. Legal basis: performance of our agreement with you.
- To keep the Services safe: review reports, moderate content, prevent fraud and abuse, enforce our Terms of Use, fix errors and handle disputes. Legal basis: our legitimate interests, balanced against your rights.
- To meet legal obligations: sanctions and regional restrictions, records the law requires, and lawful requests from authorities.
- Push notifications: with your consent, which you give and withdraw in the iOS Settings app.
We do not sell personal data and do not use it for targeted advertising. We send marketing messages only with your consent where the law requires it. The Services cannot work without the data needed for sign-in and trading.
4. Your wallet and keys
The wallet in the app is a non-custodial embedded wallet provided by Privy. Privy splits the private key into encrypted shares. The key is assembled only for a moment, inside Privy’s isolated secure environment and after you authenticate, to sign an action that you authorized. Dirol never holds or sees your private key, key shares or recovery material. We submit transactions from your wallet only to carry out a trade, order or permission that you authorized. Privy processes your sign-in and wallet data as our service provider and under its own privacy policy.
5. Who receives data
- Privy, for sign-in and the embedded wallet.
- Apple, for Sign in with Apple and for the Apple Push Notification service, which delivers notifications.
- Google and X, when you sign in with them. They learn that you use Dirol.
- Perpl, when you use perps. The app sends your wallet address, signed orders and connection data, including your IP address, to Perpl directly or through our relay. Perpl is an independent exchange with its own terms and privacy policy.
- The Monad network and RPC node operators. Transactions are broadcast to Monad, and RPC nodes see your wallet address and IP address when the app reads chain data.
- Hosting, database and infrastructure providers that run our servers in the EU and Asia under contract.
- Other users, for your public profile and content, as described in section 6.
- Authorities, when the law requires it or to protect the rights and safety of users and others.
- A buyer or successor of our business, who must apply this Policy to your data.
6. Public content and public blockchains
Your profile, posts, comments and likes are public. Posts can show your wallet, trades, positions and profit or loss, which links your social identity to your trading activity. Members of a holder chat can read and copy its messages. Restricted access to a chat is not a promise of confidentiality, and chats are not end-to-end encrypted.
Blockchain addresses, transfers, amounts and contract activity are public, independently of Dirol. We cannot erase finalized blockchain records. This does not reduce our duties for the data and identity links we control.
7. How long we keep data
- Account, profile and content: until you delete them or your account.
- Push tokens: until you turn off notifications, sign out or delete your account.
- Reports and moderation records: as long as we need them to handle the report and to prevent repeated abuse.
- Server logs: for a limited period, for security and error analysis.
- Trade, fee and accounting records linked to a wallet address: as long as accounting, tax and anti-fraud obligations require.
8. Deleting your account
You can delete your account in the app, in your account settings, or by writing to hello@dirol.io.
Account deletion also deletes your Privy wallet. Before you delete the account, withdraw all funds to another wallet and close your open orders and positions. After deletion, neither you nor we can access funds left in the wallet. The app asks you to withdraw first.
We delete your profile, posts, comments, likes, follows, chat messages, push tokens and sessions, and your Privy user and wallet. We keep on-chain transaction history, which is public and cannot be erased, and the trade, fee and accounting records linked to your wallet address, for the periods in section 7. These records are no longer linked to a profile. Copies in backups expire on our normal backup cycle. Positions on Perpl are held by Perpl, not by us.
9. Your rights
Depending on where you live, you can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interests. You can withdraw consent at any time. Send requests to hello@dirol.io. We answer within one month and can ask you to prove that the account is yours, for example from its sign-in email. You can also complain to your data protection authority.
10. International transfers
Our servers are in the EU and in Asia, and our service providers operate in other countries, including the United States. Where the law requires it, we protect these transfers with standard contractual clauses or other approved safeguards.
11. Security
We encrypt data in transit, limit access to personal data and never hold wallet keys. No system is fully secure. Do not share your login codes, private keys or recovery material with anyone. Dirol support never asks for them.
12. Age
The Services are for people 18 and older. We do not knowingly collect data from anyone under 18. If we learn that we did, we delete it.
13. Changes
We publish changes to this Policy on this page with a new effective date. We tell you about material changes in the app or by email before they apply.
14. Contact
Dirol Labs Inc., Oceania Business Plaza, Torre 1000, 21st Floor, Isaac Hanono Missri Street, Punta Pacifica, Panama City, Republic of Panama. Email: hello@dirol.io. See also our Terms of Use and Support page.