1. Information we receive
Depending on the features you use, this may include:
- account information such as name, email, phone, language and plan status;
- portfolio, holding, watchlist, alert, capital-plan and journal information you enter;
- an identity image and review status if you request identity verification;
- technical information such as IP address, browser, request time, security events, session cookie and error diagnostics;
- payment confirmation returned by a payment gateway; NABZ Capital does not retain full bank-card details.
2. Why we use it
- to create and protect accounts, display portfolios and provide requested features;
- to send verification codes, essential notices, support responses and account messages;
- to calculate indicators, diagnose failures, prevent abuse and improve reliability and speed;
- to perform our agreement, comply with legal duties and handle a dispute or user request.
3. Error monitoring and Sentry
We may use Sentry to identify technical failures. It may receive the error type, request route, software release, timestamp, device information and related technical context.
NABZ Capital disables default personal-information collection and request bodies in its standard configuration. Technical data may nevertheless be processed on provider infrastructure outside Iran.
5. Retention
Account information is kept while the account is active and afterward only as long as reasonably needed for backup, dispute resolution, security or legal obligations.
Technical logs and temporary data are deleted or aggregated according to operational need. Identity material should be retained only for its review purpose and any required legal period.
6. Security
Controls include encrypted transport, hashed passwords, secure sessions, rate limiting, access control and private storage for identity material.
No system is risk-free. A significant incident likely to affect user rights will be investigated and communicated through an appropriate channel when required.
7. Your choices
You may ask support to correct information, explain its use, delete unnecessary data or close an account. We may verify identity before acting to prevent unauthorized disclosure.
Some records cannot be deleted immediately because of law, security, fraud prevention or payment-record obligations. We will explain the result and any restriction.
9. Younger users
The service is designed for people with legal capacity to manage an account and accept these terms. If information about someone without that capacity was submitted without valid authorization, contact support to request removal.
10. Updates and contact
A revised Policy will appear on this page with a new update date. Material changes affecting how information is used will be announced through an appropriate channel.
For a privacy request or security concern, use the support tool on this website and put “Privacy” or “Security” in the message subject.