Privacy Policy

Last updated: 13 April 2026

1. Who we are

Dirygo is operated by Dirygo Ltd, a company registered in England and Wales. We are the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, contact us at support@dirygo.com.

2. What data we collect

We collect and process the following categories of personal data:

• Account information — email address, name, and any details you provide during registration or onboarding.
• Identity and verification data — information submitted for Know Your Customer (KYC) checks, including identity documents and selfie images processed by our verification partner.
• Tax identity information — National Insurance number, tax codes, UTR, and related tax identifiers required for PAYE and self-assessment purposes.
• Banking details — bank account number, sort code, and beneficiary information for payout processing.
• Earnings and payout data — calculation records, deductions, payout history, and self-reported or platform-fetched income data.
• Platform connection data — OAuth tokens and profile identifiers from third-party platforms you choose to connect (e.g. YouTube, TikTok, Instagram).
• Device information — push notification tokens, device platform (iOS/Android), and basic device metadata when using our mobile app.
• Usage data — pages visited, feature interactions, and anonymised analytics data collected via Google Analytics.
• Error and diagnostic data — technical error reports including stack traces and browser/device context, collected to identify and fix issues.

3. How we use your data

We use your personal data to:

• Provide and operate the Dirygo platform, including earnings calculation, payout processing, and tax reporting.
• Verify your identity in compliance with anti-money laundering and KYC regulations.
• Calculate and apply PAYE deductions, National Insurance contributions, and generate tax documentation.
• Process payouts to your nominated bank account.
• Send transactional notifications (e.g. payout confirmations, quarterly summaries) via email and push notifications.
• Fetch and aggregate metrics from connected third-party platforms on your behalf.
• Monitor, diagnose, and fix technical issues.
• Comply with legal and regulatory obligations, including HMRC reporting requirements, DAC7, and UK Digital Reporting Rules.

4. Legal basis for processing

We process your personal data on the following legal grounds under UK GDPR:

• Performance of a contract — processing necessary to provide the services you signed up for, including earnings calculation, payout processing, and account management.
• Legal obligation — processing required to comply with UK tax law, anti-money laundering regulations, HMRC reporting requirements, and digital platform reporting rules (DAC7/UK DRR).
• Legitimate interests — processing necessary for error monitoring, security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Consent — where applicable, such as when you choose to connect third-party platform accounts or opt in to non-essential notifications. You may withdraw consent at any time.

5. Third-party processors

We share personal data with the following third-party service providers who process data on our behalf:

• Veriff — identity verification and KYC document checks.
• Firebase Cloud Messaging (Google) — delivery of push notifications to mobile devices.
• Sentry — error tracking and diagnostic reporting.
• Resend — transactional email delivery.
• Google Analytics — anonymised usage analytics.

Each processor is bound by data processing agreements and processes data only as instructed by us. We do not sell your personal data to any third party.

6. Data retention

We retain your personal data for as long as your account is active and as required to fulfil the purposes described in this policy. Specific retention periods include:

• Earnings and tax records — retained for a minimum of 6 years after the end of the relevant tax year, as required by HMRC.
• KYC and identity documents — retained for 5 years after the end of the business relationship, in accordance with anti-money laundering regulations.
• Account and transactional data — retained for the duration of your account plus 2 years after closure.
• Error and diagnostic data — retained for up to 90 days.

When data is no longer required, it is securely deleted or anonymised.

7. Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention requirements.
• Restriction — request that we limit how we process your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at support@dirygo.com. We will respond within one month.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies and analytics

We use Google Analytics to collect anonymised usage data, including pages visited and feature interactions. Google Analytics uses cookies to distinguish users. No personally identifiable information is sent to Google.

The Dirygo platform uses a session cookie to maintain your authenticated session. This cookie is essential for the service to function and cannot be disabled.

9. International transfers

Some of our third-party processors operate outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements or adequacy decisions, in compliance with UK GDPR.

10. Changes to this policy

We may update this privacy policy from time to time. If we make material changes, we will notify you via email or through a notice in the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

11. Contact

For any questions, concerns, or requests regarding this privacy policy or your personal data, contact us at:

Dirygo Ltd
Email: support@dirygo.com