1Data we collect
| Category | Examples | Purpose |
|---|---|---|
| Account | username, email, password hash | creating and authenticating the account |
| Service usage | requested forecasts, watchlists, portfolio holdings | delivering the service itself |
| Support | ticket text, attachments, conversation history | responding and follow-up |
| Payments | gateway reference number, amount, currency, plan and duration, activation status | online payment processing through the Zibal gateway, receipts and support |
| Technical | browser type, server-side errors (no persistent stored IP) | stability and debugging |
| Notifications | browser push subscription (only if you opt in) | price alerts |
What we never collect: full bank-card details, one-time passcodes or CVV2 are never requested or stored; national-ID details are not part of normal service use.
2Purposes of processing
- Delivering and stabilizing the analysis and forecasting services;
- Managing subscriptions, payments and receipts;
- Responding to support requests;
- Improving model quality and the interface using aggregate metrics;
- Complying with valid legal obligations.
Processing is based on these purposes and on user consent (for optional notifications).
3Website analytics — no tracking cookies
We run our own first-party, privacy-friendly analytics. It measures page views, traffic sources and clicks using an anonymous random identifier that is one-way hashed on our server. It sets no cookies, does no cross-site tracking, collects no personal data, and excludes search-engine bots. Aggregated records are automatically deleted after the retention period configured in our admin dashboard.
4Sharing & transfers
- User data is never sold and is not made available to third parties for advertising.
- Processing runs on FARAZ's own infrastructure, except where a service inherently depends on an external provider (such as the email service used to send notifications and alerts to your own address).
- If a valid legal authority lawfully requires data, only what that requirement covers — and proportionately — is provided.
- Data hosting is managed on infrastructure operated by FARAZ's servers.
5Retention
| Data type | Duration |
|---|---|
| Active account | until the user deletes the account |
| Support tickets | until closure + at most 12 months |
| Payment receipts & tracking codes | at least the statutory financial-record period |
| Analytics records | until automatic expiry after the configured retention period |
Deleting your account from the settings deletes the account-linked data (forecasts, alerts, portfolio, watchlists and usage history); only the financial records that the law requires to be kept remain, in anonymized form.
6Your rights
- Access & portability: request an export of your account data via support.
- Correction: account information (email, settings) can be changed from the panel.
- Deletion: full account deletion is available in the settings with password confirmation; the outcome is described in the table above.
- Objection & complaints: via the contact channels; once e-Namad is issued, the official e-Namad complaint system will also be available.
Data-related requests are answered within at most 7 working days.
7Security
The site runs over HTTPS; passwords are stored only as one-way hashes; administrative accesses are separated and logged; and sensitive flows (password recovery, payments) include email/step-up verification. No system is perfectly secure though — if a data incident occurs, affected users will be notified in due time.
8Children
The services are not designed for anyone under 18 and their registration is not permitted (see the Terms of Service). Accounts found to belong to a child are deleted.
9Changes & contact
The up-to-date version of this policy is published on this page with its date, and material changes are announced on the site. Privacy questions go through the Contact page or support@farazcrypto.ir.