Doreva Privacy Policy
1. Data we collect
Depending on the features used, Doreva collects registration and authentication data (name, email, phone number and technical identifiers), personal and business profile data, addresses and location, photos and media, missions and applications, messages, support requests, and device, diagnostic and notification data.
2. KYC and identity verification
To verify identity and secure payments, Doreva may process Tier 1 profile information and the documents submitted for Tier 2, including identity documents, supporting records and related images. They are available only to authorized staff and providers for verification, fraud prevention and applicable compliance requirements.
3. Financial data
Doreva processes amounts, currencies, balances, missions, fees, transaction references and statuses. Doreva does not store the complete payment credentials held by payment providers. Payments may require a Mobile Money number, PayPal account or other information necessary to complete the transaction.
4. How we use data
We use data to provide and secure the service, create and perform missions, verify accounts, process payments and refunds, provide support, moderate content, send service notifications and emails, prevent fraud, generate records, measure performance and comply with legal obligations.
5. Providers and recipients
Strictly necessary data may be shared with Google Firebase and Google Cloud (authentication, database, storage and hosting), Expo and Firebase Cloud Messaging (notifications), Google Maps Platform (maps and location), PawaPay and its Mobile Money operators, PayPal (payments), Resend (email), security, analytics and support providers, and public authorities where required by law.
6. Retention
- Account and profile: for the account lifetime, then normally deleted or anonymized within 30 days of a valid request unless retention is required.
- KYC documents: during the relationship and for up to 5 years after it ends where verification, fraud prevention or regulation justifies it.
- Transactions, invoices and accounting records: up to 10 years under applicable requirements.
- Missions, disputes, support and evidence: up to 3 years after closure, or longer where a dispute or law requires it.
- Technical and security logs: generally up to 12 months.
7. Location and transfers
Location is used to suggest and perform relevant missions and is processed according to permissions granted. Some providers may process data outside the user's country; available contractual and technical safeguards are then used.
8. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction or objection and information about your data. Optional permissions can be withdrawn in device settings. Contact contact@mta-solution.com. Identity verification may be required.
9. Account deletion
Account deletion is available from the app settings. If you cannot access your account, use the public request page.
Request account deletion10. Changes
This policy may be updated. The date, version and, when required, a renewed consent request will be displayed.