Privacy

1. What information do we collect?

We only store data you submit through site features. Based on the current implementation:

• Contact tickets (/contact/): name, email, optional phone, subject, message, category, priority
• Think tank (/thinktank/): name, mobile/phone, email, location, profession, online-sales experience, product count, needed services, and notes
• Complaints & feedback (/complaints/): name, email, phone, subject, message; after submit: tracking ID and case status
• Account registration (/auth/): name, email, phone (if provided), and password (stored hashed only)
• Support chat: name, email, phone (if provided), and chat message text
• Newsletter (footer): email address only
• Payments: amount, order description, gateway tracking ids, and email/phone if you send them with the order; international crypto payments may store network, asset symbol, and transaction hash
• In your browser (not used as an ad profile on our servers): cart contents, pricing market (Iran/Intl), login tokens, and a locale cookie

2. Where is data sent or stored?

Operational data is stored in our MongoDB database. To deliver the service, necessary data may go to:

• MongoDB (cloud hosting): tickets, messages, users, newsletter, chat, payment records
• Zarinpal: Iranian Rial payments — amount, description, and merchant identifiers, under Zarinpal’s terms
• Enamad trust seal: loads the seal image from Enamad (not a personal form submission)
• WhatsApp / Telegram / Instagram links: only if you choose to open them
• Public FX rate APIs (for international price display): no personal data is sent
• Published crypto wallet addresses: public receive addresses only; you initiate the transfer

3. How long do we keep data?

There is no automatic TTL deletion on every record today. Practical retention:

• Tickets, think-tank/complaint messages, and chats: while needed for support or legal reasons; after a valid deletion request we delete or anonymize where technically feasible
• User accounts: while the account is active or until you request deletion
• Newsletter: while subscribed (active flag) or until you ask to unsubscribe/delete
• Payment records: kept for accounting and dispute handling (typically multiple years as required for financial records)
• Browser data (cart, tokens, locale cookie): until you clear them or the session expires

4. Staff access to customer data

Admin access is limited to authenticated employees. Staff may see name, email, phone, and message content to answer tickets, messages, chats, and orders. User passwords are hashed and not viewable. Data is used for support and order fulfillment only — not sold for marketing lists.

5. Analytics and advertising tools

The current codebase does not load third-party ads or analytics scripts such as Google Analytics, Meta Pixel, or Tag Manager by default. If that changes, this page will be updated. Functional storage (e.g. locale cookie) is used for site operation — not advertising tracking.

6. Newsletter

The footer newsletter form stores only your email after you submit it, for updates about our services, articles, or offers. To unsubscribe, email info@iransitesazan.ir or open a ticket on /contact/ with that address so we can deactivate or remove the subscription.

7. Access, correction, or deletion

To access, correct, or delete personal data tied to tickets, accounts, newsletter, or chat:

• Email info@iransitesazan.ir with subject “Privacy request” and the email/phone you used
• Or submit a ticket via /contact/
• After reasonable identity checks, we respond within normal business time and correct or delete where technically feasible (except records we must keep by law, such as certain payment logs)

8. Policy changes

If collection practices or connected services change, we update this page. The last-updated date appears below.

9. Contact

Privacy questions: