Privacy policy

This policy explains what we collect when you use Dirso to register a .so domain or build a website, why we collect it, and who else sees it. We keep it short so you can read it.

What we collect

• Your account. Your name, email address, password (stored hashed) and, if you enable it, a two-factor authentication secret. If you sign in with Google we receive the name and email Google shares with us.
• Domain contact details. The name, organisation, address, phone number and email address attached to each domain you register. The .so registry requires these for every registration.
• Payment references. The mobile-money number you pay from, the amount, and the transaction reference your provider returns. We do not take or store card numbers.
• Your websites. The pages, text, images and settings of any website you build with us, and the prompts you send to the builder.
• Technical records. Your IP address, browser type, the pages you open and the time of each request, kept in server logs to run and secure the service.

How we use it

• To register, renew, transfer and manage your domains with the .so registry.
• To take payment and issue invoices.
• To build, host and publish the websites you create.
• To send you emails about your account and your domains, such as expiry reminders, receipts and sign-in codes. We do not send marketing email unless you ask for it.
• To detect abuse, prevent fraud and keep the service running.

Who else sees it

• The .so registry. Domain contact details are passed to the registry as part of every registration.
• WHOIS. Contact details on a domain are published in the public WHOIS record according to registry requirements.
• Payment providers. Your mobile-money provider handles the payment itself. We only receive confirmation and a reference.
• Service providers. We host on Cloudflare and use third-party services to send email and run the website builder. They process your data only to provide those services to us.
• The law. We disclose information when a court or authority with jurisdiction over us requires it.

We do not sell your data.

How long we keep it

Account and domain records are kept while your account is open and for as long as a domain is registered through us. Invoices and payment references are kept for the period our accounting obligations require. Server logs are kept for a limited time and then deleted. When you close your account we delete or anonymise what we can, and keep only what the registry or the law requires us to.

Your choices

• You can update your name, email and domain contact details from your account.
• You can enable or disable two-factor authentication at any time.
• You can ask us for a copy of the data we hold about you, or ask us to correct or delete it, by emailing us at the address below.

Cookies

We use a cookie to keep you signed in and a cookie to hold a guest checkout until it is paid. We use Cloudflare Web Analytics, which does not set cookies or track you across sites.

Changes

If we change this policy in a way that matters, we will email account holders before the change takes effect. The date at the top is the version you are reading.

Contact

Questions about privacy go to info@impetik.com. Impetik Ltd, Mogadishu, Somalia.