D-YA PRIVACY & DATA PROTECTION POLICY

Last Updated: October 2026 | Compliance: GDPR & Global Privacy Standards

PRIVACY STATEMENT: At D-YA (d-ya.com), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and safeguard data for both registered Clients and independent Advisors using our platform.

1. DATA CONTROLLER & CONTACT INFORMATION

D-YA operates as the Data Controller responsible for your personal information. If you have any questions regarding data protection, wish to exercise your legal rights, or request account data deletion, please contact our Compliance Officer:

D-YA Privacy & Compliance Team
Official Privacy Email: contact@d-ya.com
Platform Address: https://d-ya.com

2. DATA WE COLLECT & PURPOSES OF PROCESSING

We collect personal information depending on your role on the platform:

A. For Clients:

Account Details: Email address, username, encrypted password, and registration metadata.
Transaction Data: Credit purchase records and credit card tokenization via Stripe. (Note: D-YA never stores raw credit card numbers on its servers).
Communication Logs: Live chat session timestamps, duration, and technical room logs necessary to deliver reading services and resolve billing inquiries.

B. For Advisors (Service Providers):

Identity & Legal Verification (KYC): Legal full name, country of residence, timezone, bio, social media handles, and official government-issued ID/Passport photos.
Payout Details: Stripe Express account identifier used to distribute earnings.
Public Profile Data: Stage name, profile photo, reading modalities, and set rates displayed in the public Advisor Directory.

3. SPECIAL POLICY: ADVISOR ID DOCUMENTATION & RETENTION

We apply strict data minimization and security measures to sensitive government ID documents submitted by Advisors during Stage 2 onboarding:

Purpose Limitation: ID files are strictly used for identity validation, fraud prevention, and regulatory compliance. They are never published or shared with third-party advertisers.
Encrypted Storage: All identification uploads are kept on secure, encrypted administrative cloud environments with restricted access.
30-Day Permanent Deletion: Upon formal account deletion request or application rejection, submitted ID files are permanently wiped from our primary server storage within 30 calendar days, except where statutory accounting laws mandate temporary legal archive retention.

4. COOKIES & TRACKING TECHNOLOGIES

We use essential functional cookies and local browser storage to keep you logged in, maintain active chat sessions, and preserve screen preferences:

Session Cookies: Essential for user authentication and preserving active /chat/ room presence and sound alert triggers.
Security Cookies: Used to prevent automated spam and secure form submissions.
Cookie Management: You can configure your browser to disable cookies, but doing so will prevent access to live chat rooms and logged-in account features.

5. THIRD-PARTY DATA PROCESSORS

D-YA never sells or rents your personal data. We only share information with trusted third-party service providers essential for platform operations:

Stripe & Stripe Connect: Secure processing of client credit payments and automated payouts to Advisors.
Hosting Infrastructure & Email Dispatchers: Encrypted web servers and transactional email systems used to send login alerts and onboarding notifications.

6. YOUR PRIVACY RIGHTS (GDPR & LEGAL RIGHTS)

Under applicable data protection laws, you possess the following rights regarding your personal data:

Right of Access & Portability: Request a copy of all personal data held about you.
Right to Rectification: Request correction of inaccurate profile details.
Right to Erasure (“Right to be Forgotten”): Request complete deletion of your account and associated personal data.

To exercise any of these rights, simply email our team at contact@d-ya.com. We respond to all privacy requests within 30 days.