1. What we process
- Contact data: mobile number, email, WhatsApp number, time zone.
- Identity data: name, national ID, date of birth, document images, selfie and liveness video (biometric data).
- Request data: text, details of the parties and attachments.
- Payment data: network, transaction hash, sender address and receipt.
2. Legal basis
Performance of the service contract; separate explicit consent for processing biometric data and for transferring data to Iran.
3. Storage and transfer
Our foreign server keeps only what is needed for sign-in and tracking. Identity documents and request data are encrypted with the Executing Office's key and transferred to Iran; the temporary encrypted copy is deleted within 24 hours of delivery. Judicial records are kept by the Executing Office as required by Iranian law.
4. Retention
- Unfinished drafts: 30 days after the last change.
- Final documents on the foreign server: 30 days after delivery (configurable).
- Technical logs: 30 days, without raw personal data.
5. Your rights
Access, rectification, a copy of your data and erasure — from "My account" or via a "Privacy" ticket. We respond within 30 days.
6. Processors
Infrastructure providers (hosting, CDN, messaging and email) are used only to provide the service and under data-processing agreements.
7. Security incidents
If a security incident affects personal data, we notify the relevant authorities and affected users as required by law and within 72 hours.