Privacy Policy

Deux Technologies SARL ("Deux", "we", "us", or "our") is a company registered in the Republic of Benin. We operate the Deux platform at getdeux.com — a marketplace connecting independent Clients and Professionals for services and physical goods. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you create an account or use our platform.

This policy applies to all users worldwide. Where local laws impose additional rights or obligations (such as GDPR in Europe, or data protection laws in West African countries where we operate), those requirements also apply and we comply with them.

We collect the following categories of information:

We use your data for the following purposes:

• Operating the platform: providing matching, messaging, job management, goods marketplace, and payment features.
• Computing and displaying your Trust Score and 'Verified' badge, which reflects your behavioral track record on the platform.
• Fraud detection and prevention, including ban enforcement using device identifiers.
• Sending you important service notifications (account activity, job updates, payout confirmations) via in-app notifications or SMS. We do not send marketing messages without your consent.
• Analyzing anonymized usage patterns to improve platform features, fix bugs, and enhance the user experience.
• Complying with applicable laws, responding to lawful legal requests, and enforcing our Terms of Service.
• Resolving disputes between users, including reviewing flagged messages and transaction records.
• Operating referral and Content Creator Program incentives: attributing signups and subscriptions to referrers, calculating and paying eligible content creator earnings, enforcing program rules, and detecting abuse.

Your Trust Score and associated behavioral data (completed transactions, ratings, activity history) form a record of your reliability on the Deux platform. This data is used primarily to operate the trust and matching features of the platform.

In the future, Deux may partner with trusted third parties to offer services that could benefit you as a platform user. If we introduce any such data sharing, we will: (1) update this Privacy Policy in advance with the details of what is shared and with whom, (2) present you with a clear opt-in consent mechanism before any sharing takes place — you will never be enrolled automatically, (3) ensure any shared data is limited to the minimum necessary and that the recipient is bound by contractual data protection obligations.

If and when you opt in to any future partner program, shared data would be limited to non-identifying performance indicators such as: your Trust Score, tenure on the platform, number of completed transactions, completion rate, average rating, and Verified status. It will NEVER include your phone number, device identifiers, message content, or any government ID.

To protect both Clients and Professionals from off-platform transactions that lack escrow protection, our systems automatically scan in-app messages for contact information patterns (phone numbers, email addresses, social media handles, URLs) when a job is in a pre-escrow stage.

This scanning is entirely automated — no human reads your messages as part of this process. When contact information is detected, the message may be blocked or flagged, and you will be notified with the reason.

Flagged message events may be logged and retained for up to 90 days for enforcement review. Ordinary message metadata (sender, timestamp, job context) is retained for the life of the transaction record.

We share your data only in the following circumstances:

• Payment processors: We share transaction data necessary to process payments and payouts. These providers process data under their own privacy policies and regulatory obligations.
• Cloud and infrastructure providers: We use trusted cloud service providers for hosting, authentication, data storage, and background processing under contractual data protection obligations.
• Fraud prevention and security providers: We may share technical signals needed to detect abuse, prevent account takeovers, and enforce bans.
• Law enforcement and legal authorities: We may share data when required by a valid legal process (court order, subpoena, or equivalent), or when necessary to prevent serious harm.
• Business transfers: If Deux is acquired, merged, or sells substantially all of its assets, your data may be transferred as part of that transaction. You will be notified in advance.
• With your explicit consent: for any other purpose not listed here.

We retain your data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: retained for the life of your account plus 2 years after closure, for dispute and compliance purposes.
• Transaction records (jobs, orders, payments): retained for 7 years to comply with financial and tax record-keeping obligations.
• Trust Score and behavioral data: retained for the life of your account. After account closure, anonymized behavioral data may be retained indefinitely as part of our aggregate dataset.
• Flagged message events: retained for 90 days, then deleted.
• Device identifiers: retained for up to 3 years after the last session, to support ban enforcement.

Depending on your location, you may have the following rights regarding your personal data. To exercise any of these rights, contact us at contact@getdeux.com:

• Right to access: request a copy of the personal data we hold about you.
• Right to correction: request that we correct inaccurate or incomplete data.
• Right to deletion: request that we delete your personal data. Note: we may retain certain data as required by law or for legitimate interests (e.g., preventing fraud from a banned user).
• Right to portability: request your data in a structured, machine-readable format.
• Right to object: object to certain types of processing, including optional profiling or third-party data sharing.
• Right to restriction: request that we restrict processing of your data in certain circumstances.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

We will respond to rights requests within 30 days. For complex requests, we may extend this by a further 30 days and will notify you.

We implement technical and organizational measures to protect your data, including: encrypted data transmission (HTTPS/TLS), access controls limiting which staff can access personal data, regular security reviews, and PIN-protected balance and payout features.

No system is perfectly secure. We cannot guarantee the absolute security of your data. If we become aware of a security breach that affects your data, we will notify you as required by applicable law.

Deux operates across multiple countries. Your data may be transferred to and processed in countries other than where you reside, including countries whose data protection laws may differ from yours.

Where we transfer data internationally, we use appropriate safeguards such as contractual clauses, data processing agreements with service providers, and compliance with applicable cross-border transfer requirements.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or via SMS to your registered number, and update the 'Last Updated' date at the top of this page.

Continued use of the platform after a policy update constitutes your acceptance of the revised policy. If you object to any change, you may close your account before the effective date of the change.

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, contact Deux Technologies SARL:

• Email: contact@getdeux.com
• In-app support: available through your account settings

We aim to respond to all privacy inquiries within 10 business days.