Privacy Policy
Last updated: 30 June 2026
This Privacy Policy explains how NOVA4 LLC ("Daroore", "we", "us" or "our"), a company registered in Lebanon with its registered office at Presidential Palace road, Baabda, Lebanon, collects, uses, shares and protects personal data when you use the Daroore mobile application and related websites and services (collectively, the "Service"). It also describes the rights and choices available to you.
By creating an account or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Service.
1. Who we are and how to contact us
The data controller responsible for your personal data is NOVA4 LLC. For any privacy question or to exercise your rights, contact our privacy team at [email protected] or by post at NOVA4 LLC, Presidential Palace road, Baabda, Lebanon. For general support, contact [email protected].
2. Definitions
- "Personal data" means any information relating to an identified or identifiable natural person.
- "Processing" means any operation performed on personal data (collection, storage, use, disclosure, deletion, etc.).
- "Service provider" / "listing" means a business or professional profile discoverable through the Service.
- "User", "you" means any person who accesses or uses the Service.
3. The data we collect
3.1 Information you provide
- Account & identity data: your phone number, name, first and last name, email address, gender and profile picture.
- Business-claim data: if you claim or submit a business listing, we collect the claimant's first and last name, mobile number, email address, role/position (owner, manager or other), and preferred contact methods.
- Listing & content data: business details (name, description, address, website, social handles, opening hours, keywords) and any media you upload, including profile images, portfolio images and videos, and documents.
- Communications: information you provide when you contact support or correspond with us.
3.2 Information collected automatically
- Device & technical data: device platform (iOS/Android), device name and model, operating-system version, app version and build number, installation identifier, and push-notification tokens.
- Connection & session data: IP address, user-agent, session timestamps and approximate location derived from these.
3.3 Location data
The Service uses geographic coordinates (latitude and longitude) to show nearby service providers and to sort results by proximity. Location associated with a listing is stored as part of that listing. Where the app requests access to your device location, you may grant or deny it through your device settings.
3.4 Usage & analytics data
We record activity within the Service to operate and improve it, including your favorites, your saved searches (search terms and location), and behavioral analytics such as profile views ("visits") and contact actions ("clicks") (for example tapping WhatsApp, phone or directions), together with the context of the action (search query or category). Some analytics events may be collected whether or not you are signed in.
3.5 Cookies and similar technologies
Our websites and certain features use cookies and similar identifiers for authentication, security and analytics. You can control cookies through your browser settings; disabling some may affect functionality.
4. Phone verification via WhatsApp
We verify accounts using a one-time password (OTP). To deliver the OTP we transmit your phone number and the OTP code to Meta Platforms, Inc. through the WhatsApp Business API. Meta processes this data as described in its own privacy policy. We use the OTP solely to verify your number and secure your account.
5. How and why we use your data (purposes)
- To create and manage your account and verify your identity.
- To provide core features: search, discovery, favorites, saved searches, listings and business claims.
- To show relevant, proximity-based results using location data.
- To send push notifications and service communications (you can opt out — see Section 12).
- To measure usage, analyze trends and improve the Service.
- To maintain security, prevent fraud and abuse, and enforce our terms.
- To comply with legal obligations and respond to lawful requests.
6. Legal bases for processing (GDPR)
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:
- Performance of a contract — to provide the Service you request (account, listings, core features).
- Consent — for optional features such as device-location access and push notifications; you may withdraw consent at any time.
- Legitimate interests — to secure, maintain, analyze and improve the Service, balanced against your rights.
- Legal obligation — to comply with applicable law.
7. How we share your data
We do not sell your personal data. We share it only as described here:
- Other users: information you choose to publish (such as a business listing and its contact details and media) is visible to other users of the Service.
- Service providers / processors: vendors who process data on our behalf under contract (see the table below).
- Legal & safety: authorities or third parties where required by law or to protect rights, safety and the integrity of the Service.
- Business transfers: in connection with a merger, acquisition or sale of assets, subject to this Policy.
7.1 Sub-processors
| Processor | Purpose | Data involved |
|---|---|---|
| Meta Platforms (WhatsApp Business API) | OTP delivery / phone verification | Phone number, OTP code |
| Amazon Web Services (S3) | File and media storage/hosting | Uploaded images, videos, documents |
| Resend | Transactional email (e.g., password reset) | Email address, message content |
| Google (Maps / Places) | Geocoding and map display | Addresses and coordinates |
| Apple Push Notification service / Firebase Cloud Messaging | Push notification delivery | Device push tokens |
8. International data transfers
We operate globally and our infrastructure and processors (including AWS, with storage in the United States) may process your data outside your country of residence, including outside Lebanon and the EEA. Where required, we implement appropriate safeguards such as the European Commission's Standard Contractual Clauses or reliance on adequacy decisions. Contact [email protected] for more information.
9. Data retention
We keep personal data for as long as needed for the purposes described above:
- Account data — for the life of your account; upon deletion your account is deactivated, your sessions and registered devices are removed, and your deletion reason is recorded.
- Listings, favorites, saved searches and uploaded media — retained until you or we remove them; some records may persist after account deletion unless you request their removal.
- Analytics data (visits/clicks) — retained on an aggregated or identifier-linked basis for analysis; this may be retained for extended periods.
- Legal/compliance records — as required by applicable law.
You may request deletion of residual data at any time (see Sections 10 and 11).
10. Your privacy rights
10.1 Rights under the GDPR (EEA/UK users)
Subject to conditions, you have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent at any time. You also have the right to lodge a complaint with your local supervisory authority.
10.2 Rights under the CCPA/CPRA (California users)
You have the right to know what personal information we collect and how we use and disclose it; to request deletion; to request correction; and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA. We will not discriminate against you for exercising your rights.
10.3 How to exercise your rights
Submit requests to [email protected], or delete your account directly in the app (Settings → Delete Account). We may need to verify your identity before acting and will respond within the timeframes required by applicable law.
11. Account deletion
You can delete your account from within the app. Deletion deactivates your account, ends your sessions and removes your registered devices (disabling push notifications). Certain content (such as favorites, saved searches, analytics events, uploaded media and business-claim records) may remain unless you specifically request its removal; email [email protected] to request full erasure.
12. Push notifications
If you enable notifications, we store a push token for your device to deliver them via Apple's or Google's push services. You can disable notifications at any time in your device or app settings.
13. Security
We implement technical and organizational measures designed to protect personal data, including encrypted connections, access controls and time-limited authentication tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
14. Children's privacy
The Service is intended for users aged 16 and older. We do not knowingly collect personal data from anyone under 16. If you believe a child under 16 has provided us personal data, contact [email protected] and we will take steps to delete it.
15. Third-party links and services
The Service may link to or interoperate with third-party sites and services (for example WhatsApp, phone dialers, and map applications). Their privacy practices are governed by their own policies, and we are not responsible for them.
16. Automated decision-making
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
17. Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by other reasonable means, and the "Last updated" date above will be revised. Your continued use after changes take effect constitutes acceptance.
18. Contact and representatives
Questions or complaints: [email protected] · NOVA4 LLC, Presidential Palace road, Baabda, Lebanon. EU/UK users: an EU/UK representative under Article 27 GDPR will be designated where required — [EU/UK REPRESENTATIVE TO BE APPOINTED].
