Shahin Privacy Policy

Welcome to the Shahin web analytics platform. We at Shahin are committed to full transparency about how we collect, use, and store your data. This document is a legally binding agreement between Shahin (hereafter "we" or "the platform") and you (the user or service subscriber).

a) User account information (data about you)

When you register on Shahin, the following information is stored for authentication and to provide services: • First and last name • Email address (user identifier) • Website or organization information • Dashboard settings and configurations

b) Analytical data (data about your visitors)

When the Shahin analytics script is active on your website, the following data is collected and processed from your visitors: • IP address (Internet Protocol): we don't receive or store visitors' IP addresses raw and complete. This is done to accurately detect geographic location and prevent fraud (Fraud Detection). • Page URL visited and referrer URL • Device type, operating system, browser type and version • Screen resolution • User Agent • Custom Events defined by you (such as button clicks or form completions)

Important disclaimer

Shahin does not by default collect any direct personally identifiable information (PII) such as names, national IDs, or phone numbers of your visitors. You are committed to refraining from sending sensitive data to Shahin servers via URL parameters or event names.

This privacy policy is drafted based on Iranian E-Commerce Law (enacted 2003), computer-crime laws, and the requirements of the Cyber Police (FATA). Your registration and use of Shahin services constitute careful study and unconditional acceptance of all provisions of this document.

For legal clarity and standards compliance, we divide our role with respect to data into two categories: 1. You as Controller: regarding your user account information (website owner) that you provide directly to us for registration and subscription. 2. Shahin as Processor: regarding analytical data of your website visitors (End-Users), which we process solely on your instruction and to provide statistical reports. The responsibility for obtaining consent from end visitors per law lies with you (the website owner).

Shahin uses technical first-party cookies with browser local storage solely for the proper functioning of the service, separating Unique Visitors, and maintaining user sessions. • We do not use third-party advertising cookies. • Collected data is never sold to other companies for targeted advertising or advertising profiling.

All data is hosted on infrastructure managed by Shahin (in data centers inside Iran or secure international servers with protocol compliance). We use the following security measures to protect data: • Transit encryption: all data exchanges between user and server are encrypted with the standard TLS/SSL protocol. • Access control: access to databases is limited to authorized technical staff and is under careful management oversight. • Environment separation: production environments are completely separate from development environments.

Despite these measures, due to the nature of the global internet network, no service can guarantee 100% security. But we are committed to adhering to the highest reasonable commercial standards.

In line with Shahin's integrated approach of providing long-term access to statistics:

• Analytical data and logs: this data (including IP addresses and visit details) is retained indefinitely on our servers until you (the subscriber) explicitly request its deletion or the service subscription is fully terminated. • User account deletion: upon your formal request to delete the user account, all data related to your profile and websites will be erased from our operational servers within a reasonable time (maximum 30 business days).

We do not sell, rent, or under any advertising entity, give access to your data. Access is only possible in the following cases: 1. Infrastructure providers: hosting and data center companies whose role is solely hardware hosting and have no right to access data content or use it commercially. 2. Legal and judicial requirements: upon receiving an official judicial order from competent authorities of the Islamic Republic of Iran (such as Cyber Police or the Judiciary), we are legally required to provide the requested information.

As a Shahin user, under Iran's E-Commerce Law you have the following rights: • Right of access: you have the right to know what information has been stored about you and the ability to view and fully obtain your account data. • Right of correction: if your account information is incomplete or incorrect, the ability to edit and update it is provided in your user profile. • Right to be forgotten (deletion): you can request complete deletion of your user account and all collected analytical data related to you. • Right of withdrawal: you can stop the data collection process at any time by removing the Shahin script code from your website.

Since the Shahin service stores and processes your visitors' data, you are legally obligated to explicitly inform visitors in your website's privacy policy that you use analytics tools and that their technical data (including IP address) is collected. Shahin bears no responsibility for your failure to inform your end users and the resulting legal consequences.

Shahin reserves the right to revise and update this privacy policy at any time at its discretion or upon changes in current laws. Any major changes will be communicated to you via email or by displaying a notice on the user dashboard. Your continued use of Shahin services after changes are applied constitutes full acceptance of the new privacy policy.

For any legal questions, data deletion requests, security issue reports, or questions about this privacy policy, please contact our legal team only through the official channel below: Email: info@shahin.live We strive to respond to your requests as soon as possible (usually within 48 business hours).