Privacy Policy
What Dehaun holds about you, why, where it goes, and what you can ask us to do with it.
Draft 1 · Not yet in force. Published for review.
1.Who is responsible for your information
This policy is published by Dehaun Limited, a company registered in Nigeria with registration number RC 9831504. We are the data controller for the information described below, except where this policy says otherwise. Write to us at privacy@dehaun.com and we will answer.
Who decides what happens to information in Dehaun depends on how it got there, and the difference matters.
- When you use Dehaun for yourself or your own business, we decide how your information is handled, within what this policy says. In the language of the Act, we are the data controller.
- When a lawyer uses Dehaun to run a matter for their client, the lawyer decides. We hold and process that information on their instructions, as their data processor, and the lawyer is the controller. If you are that client, ask your lawyer first, and we will help them answer you.
2.What we collect
Three kinds of thing.
- What you give us when you sign up and set up: your name, email address, phone number, your workspace and business details, and for a lawyer, the documents you send so a person can confirm you are one, including your call to bar certificate, practising fee receipt and photo identification.
- What you put into Dehaun as you work: documents you upload or generate, the answers you give in a questionnaire, your notes on a matter, your clients' details, your calendar and reminders, messages, and recordings and transcripts of meetings you hold through the platform.
- What we record as you use it: sign-in times, the pages and features you use, device and browser information, the address you connect from, and error logs. For signatures we also record the time, the address the link was sent to, that a code was confirmed, and a fingerprint of the document that was signed.
3.What we do not hold
We do not store your card details. When you pay, you are handed to a licensed payment provider who takes the card and tells us only that a payment succeeded, for how much, and which reference it belongs to.
We do not sell your information to anybody, and we do not use it to advertise to you.
4.Why we hold it, and on what basis
We only hold information where the Act allows it. In practice there are four reasons.
- To provide what you asked for. Running your account, generating and storing your documents, sending a document for signature, connecting you to a lawyer, taking payment. This is necessary to perform our contract with you.
- To run the business properly. Keeping the service secure, preventing misuse, investigating a dispute, and understanding how the product is used so we can improve it. This is our legitimate interest, weighed against yours.
- Because you said yes. Using the text of your documents, notes or transcripts to improve our clause library and templates happens only if the account has turned that on, and you can turn it off again. Connecting your Google Calendar is the same.
- Because the law requires it. Keeping financial records, and responding when we are lawfully compelled.
5.Who else sees it
We use other companies to run Dehaun. Each one sees only what it needs for its part, and is bound to use it for that and nothing else. They fall into these groups.
- Hosting and databases, which is where the service runs and where your records are stored.
- File storage, for the documents and recordings you upload or create.
- Email delivery, for sign-in codes, signature links and notifications.
- Payment processing, for taking payment and paying lawyers.
- AI processing, which is how documents are drafted, analysed, explained and summarised, and how meeting audio is turned into text.
- Your calendar provider, only if you connect one.
6.Your information leaves Nigeria
Some of the companies above are outside Nigeria, mainly in the United States and Europe. This is the part we want you to read rather than skim.
It means the text of your documents, your questionnaire answers, your matter notes where a feature uses them, and the audio and transcripts of meetings you hold through Dehaun are processed outside the country. For a lawyer, that includes material belonging to your client.
We rely on the grounds the Act allows for sending information abroad, principally that it is necessary to provide the service you have asked for, and on the contractual protections we have with each provider.
If you would rather a particular matter never went near these features, do not use them for it. Documents you simply store are not sent for AI processing. If you want the current list of the companies we use and where they are, write to privacy@dehaun.com and we will send it.
7.How long we keep it
Two rules, because one would not be honest.
Records that are evidence of something that happened are kept. A signed document, the trail showing who signed it and when, and payment records. These exist to prove what took place, and a signed contract cannot have the names taken out of it without destroying the thing itself. Some of them we are also required to keep for tax and company law.
Everything else is kept while your account is open. If you close it, or ask us to delete you, we remove your personal details from what remains and keep the rest only in a form that no longer identifies you.
If you are a lawyer's client and your information reached us through your lawyer, they decide how long it is kept, and we act on their instruction.
8.What you can ask us to do
Under the Act you can ask us to do any of the following, free of charge.
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete what we hold, subject to the records described above that we have to keep.
- Give you your information in a form you can take elsewhere.
- Stop or limit a particular use, including objecting to anything we do on the basis of our legitimate interest.
- Withdraw a permission you gave, such as the switch that lets us learn from your documents, or your calendar connection.
9.How to ask, and what happens next
Write to privacy@dehaun.com. We will answer within thirty days, and tell you if we need longer and why.
We may ask you to confirm who you are before we act, because handing somebody's legal documents to the wrong person is the worst thing this policy could allow.
If you are not satisfied with how we have dealt with you, you can complain to the Nigeria Data Protection Commission.
10.Keeping it safe
Information is encrypted as it travels between you and us. Access inside Dehaun is limited to the people who need it and is logged. Signing and client portal access require a code sent to the address on file, so possession of a link alone is not enough to see a document.
No system is perfect, and we will not pretend otherwise. If something happens that puts your information at real risk, we will tell the Nigeria Data Protection Commission within seventy two hours as the Act requires, and we will tell you where the risk to you is significant.
12.Children
Dehaun is not for anyone under eighteen, and we do not knowingly collect information about children. If you believe a child has an account, tell us at privacy@dehaun.com and we will remove it.
13.Changes to this policy
We will update this page when what we do changes. The current version and the date it took effect are always at the top.
If a change materially affects you, we will tell you before it takes effect rather than quietly republishing the page.