Privacy Policy

Data we collect

• Account data: name, email, password (stored only as an irreversible hash), phone number and account role.
• Addresses: delivery address, province, city and postal code.
• Orders: order history, cart, payment status, shipping method and tracking code. We never see or store your card details: payment happens on the bank gateway page and only the result and transaction reference come back to us.
• Custom request files: the models, images and descriptions you upload for custom requests.
• Tool data: the inputs you give the tools (images, text, maps, settings) and the outputs they make.
• Support messages: the text of your tickets and messages.
• Technical data needed for security and operation: IP address, browser type and request times in server logs.

What we use it for

• Creating and managing your account, secure sign-in and password reset by email.
• Processing, making, shipping and tracking orders, invoicing and calculating VAT.
• Running the tools and recording JP coin use and balance.
• Support, replying to messages and telling you about order status (transactional emails).
• Security, preventing fraud and abuse, and meeting legal duties.
• Improving the site from the server's own technical logs; we use no third-party analytics or advertising tools.

We do not send marketing email without your consent.

Cookies

We use only essential and preference cookies. There are no advertising or tracking cookies:

You can delete or block cookies in your browser settings; sign-in and parts of the site will then not work. We do not use third-party analytics or advertising tools such as Google Analytics.

Sharing

• We do not sell your data or give it to anyone for advertising.
• Bank payment gateway: the amount and order reference go to the gateway to take payment.
• Courier or post: your name, phone, address and postal code go to the carrier to deliver the parcel.
• Email service used to send confirmation, password reset and order status emails.
• Authorities: only when required by law or by a competent court.

Where it is kept and how we protect it

• Data is stored on servers inside Iran (ArvanCloud).
• Traffic to the site is encrypted with HTTPS. Passwords are stored only as hashes.
• Internal access is limited to what each person needs.
• No system is perfectly secure; if a breach affecting your data occurs we will tell you.

How long we keep it

• Account data is kept while the account is active.
• Order and payment records are kept for several years after the order because of financial, tax and complaint-handling requirements.
• Custom request files and tool inputs and outputs are kept as long as needed, or until you ask for deletion, except for orders in progress.
• Technical server logs are kept briefly and then deleted.

Your rights

• Access: see your account data, addresses and orders under "My account".
• Correction: edit your name, phone and addresses there, or ask us to correct them.
• Deletion: ask for your account and personal data to be deleted at the privacy email. We act within 30 days; data the law requires us to keep (such as financial records) stays until the legal period ends.
• Objection and restriction: you may object to how we use your data.
• You can change your password and sign-in at any time in settings.

Children

The site is not meant for independent purchases by anyone under 18. If we learn a child's data was recorded without a parent's permission, we delete it.

Privacy contact

We may update this policy; the new version is published here with its "last updated" date.