Privacy Policy

To run SoyGunn we collect and store:

• Account details — your name, email address, and password (stored as a hash, never in plain text).
• Identity documents — a profile photo and a photo of your government ID, required before creating or signing a loan.
• Receiving details — for lenders, the bank, OnePay receiving ID, and optional bank QR image used to build repayment QR codes.
• Loan records — loan terms, repayment schedules, signed agreement PDFs (with your drawn signature), payment confirmations from bank callbacks, and transfer receipts you upload.

This data is used only to operate the service: documenting loans between you and your counterparty, generating repayment QR codes, reconciling payments, sending due-date reminders, and computing your repayment-history score. We do not sell personal data or use it for third-party advertising.

• Loans, schedules, agreements, and payment records are visible only to the two participants of that loan (and platform administrators for support and audit).
• A lender may view the identity documents of a borrower they have a loan with, and a borrower may view their lender's bank QR — in both cases only through short-lived signed links.
• Payment confirmations are received from the banking network (for example BCEL OnePay callbacks) to mark installments paid.
• We disclose data to authorities only where the law of the Lao PDR requires it.

Data is stored with our hosting and database provider (Supabase / PostgreSQL) with row-level security, so each user's records are isolated at the database layer. Identity documents, receipts, and contracts live in private storage buckets accessible only through expiring signed URLs. Signed agreements carry a SHA-256 checksum so tampering can be detected. All traffic is encrypted in transit.

Your data is kept while your account is active. You can delete your account and personal data yourself at any time from the Profile page; we remove your identity documents and personal details. Records of loans involving another user may be retained in anonymized or minimal form where needed to preserve the other party's lawful records — if your account is linked to loan history, email us at privacy@d1autozone.com to complete removal of any retained records where permitted.

You can view and correct your profile details in the app at any time and delete your account from the Profile page. To request a copy of your data, or to exercise any other privacy right, contact us at privacy@d1autozone.com.

If this policy changes materially we will announce it in the app and update the effective date above.

For any question about this policy or your personal data, contact us at privacy@d1autozone.com.