Privacy Policy

1. What this page covers

This page explains what personal data IranRFQ collects, why, who it is shared with and the choices you have. It applies to visitors, buyers and suppliers.

2. What we collect

• Account details: email address, name, preferred language and whether you registered as a buyer or a supplier.
• Supplier information: company profile, contact details, products, images, certificates and export markets.
• RFQs and quotations: what you request or offer, quantities, prices, destinations and any files you attach.
• Messages: the text you send, its detected language and, where translation is used, the translated text.
• Video calls: when live subtitles are on, what each person says is transcribed and translated, and the transcript is kept with the conversation. Call audio and video are not recorded.
• Alert numbers: a WhatsApp number (buyers, only if you turn WhatsApp alerts on) and an SMS mobile number (suppliers), used only to tell you that a new RFQ, quotation or message is waiting. We also email these alerts to your sign-in address; you can turn them off in your account settings or with the unsubscribe link in any alert email.
• Technical data: IP address, browser type and basic request logs, used to run the service, prevent abuse and fix errors.

3. How we use it

To create and secure your account, show supplier profiles and products, deliver RFQs and messages, translate messages on request, review and moderate listings, prevent spam and fraud, and keep the service working.

4. Who sees your data

Public pages show only active supplier profiles and their products, images and certifications. A supplier's email, phone, WhatsApp number and address are not shown on public pages.

When you send an RFQ or a message, the supplier you wrote to (and the members of that supplier's account) can see it, together with your name. A supplier's team can see the RFQs and quotations related to its own profile. Our administrators can see data needed to review listings and handle abuse. If suppliers report an account as spam or abuse, an administrator may read that account's RFQs and messages to review the report; every such review is recorded.

We do not sell personal data.

5. Service providers

We use these kinds of providers to run IranRFQ, and they process data on our behalf:

• database, sign-in and file storage (Supabase, with our project hosted in Frankfurt, Germany);
• hosting, delivery and security (Cloudflare);
• an error monitoring service (Sentry), which receives technical error reports with personal details such as email addresses and phone numbers removed;
• an automated translation service, which receives the text of a message when translation is used;
• an email delivery service for account emails such as sign-up confirmation and password reset.
• a web analytics service (Google Analytics), only if you accept analytics cookies;
• a speech recognition and translation service (Soniox), which receives call audio only while live subtitles are on, and our video call server;
• a payment gateway (Zarinpal) when a supplier tops up its wallet online; we receive the payment result and a masked card number, never the full card details;
• an SMS provider in Iran (Kavenegar) and a WhatsApp delivery service, which receive your alert number and a short alert with a link (never the text of your messages); and an email delivery service (Resend), which receives your email address and the same short alert.

6. Cookies and similar storage

IranRFQ stores a sign-in session in your browser so you stay signed in. We do not use advertising cookies.

To see which campaigns and sites bring people to IranRFQ, your browser keeps the campaign tags of the link you arrived from (such as utm_source) and the referring website for up to 90 days, and we save them with your account and your RFQs. This is stored by us only and contains no IP address.

With your consent only, we use Google Analytics to measure how pages are used. It sets cookies and sends usage data, including your IP address, to Google. If you decline, Google Analytics is not loaded and the site works the same. You can change your choice by clearing this site's data in your browser.

7. International use

Buyers and suppliers are in different countries, so your RFQs and messages are visible across borders to the people you choose to contact. Our own systems store data in the European Union.

8. How long we keep it

We keep your data while your account exists. When you ask us to delete your account we remove or anonymise your personal data, except records we must keep for security, abuse prevention or legal reasons, such as an audit log of administrator actions.

9. Your choices

You can ask to see, correct, export or delete your personal data, and you can object to some uses of it. You can edit your profile and your language preference in your dashboard.

10. Security

We use encrypted connections, access controls on every table that holds personal data, private storage for RFQ attachments and certificates, and limits on abusive activity. No online service is completely secure, so please use a strong, unique password.

11. Children

IranRFQ is for business use and is not meant for anyone under 18.

12. Changes

We may update this page. The date at the top shows the latest version.