Privacy Notice
Last updated: 2026-05-28
Who we are
Dira ("we", "us") is operated by iandadad (sole proprietor, Nairobi, Kenya). Contact: privacy@diralaw.com.
What we collect
- Waitlist signup: email address; submission timestamp; hashed IP (sha-256, never raw); browser user-agent.
- Demo request (when launched): name, firm, role, work description, preferred contact channel, optional phone.
- Site analytics: anonymous, cookieless pageviews via Cloudflare Web Analytics (no cookies, no IP storage).
- Error reports: Sentry events with PII stripped before send.
We do not collect cookies for tracking. We do not use Google Analytics or social-media pixels.
Why we collect it
- To grant access to the private beta when admitted.
- To respond to demo requests.
- To prevent abuse of public forms (rate limiting, audit trail).
- To improve the product through aggregated, anonymous analytics.
Legal bases under the Kenya Data Protection Act 2019: consent (you submit a form) and legitimate interest (abuse prevention).
How long we keep it
- Pending waitlist entries: 24 months after submission.
- Denied waitlist entries: 12 months (fraud prevention).
- Approved/converted entries: kept while you remain a user, then deleted on account closure.
- Demo requests: 36 months.
- Audit events: indefinite (anonymised after PII deletion).
Who we share it with
Processors:
- Clerk (US) — authentication and invitation delivery.
- Resend (US) — transactional email.
- Sentry (US) — error monitoring.
- Cloudflare (US) — bot screening (Turnstile) and privacy-friendly web analytics.
- Vercel (US) — hosting (no PII in logs).
- DigitalOcean (EU/US) — API hosting and database.
Cross-border transfers rely on the processors' standard contractual clauses.
Your rights
Under the Kenya DPA you may:
- request a copy of the data we hold about you,
- ask us to correct or delete it,
- withdraw consent at any time,
- lodge a complaint with the Office of the Data Protection Commissioner (ODPC).
Email privacy@diralaw.com and we will respond within 30 days.
Changes
We will update this notice as needed and post the new "Last updated" date above. Material changes to recipients or purposes will be emailed to anyone who has signed up.