Privacy Policy

Mohammad Bashardoust ("we," "us," or "our") operates this website. This Privacy Policy explains how we collect, use, store, share, and protect information about you when you use our website or any related services (collectively, the "Services").

By using our Services you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Who We Are

The data controller responsible for your personal data is:

2. What Information We Collect

We collect information in three main ways:

2.1 Information you provide directly

• Account registration: name, email address, company name, job title, phone number.
• Billing information: credit card details and billing address (processed by our payment processor — we do not store full card numbers).
• Communications: messages you send via our contact form, support tickets, or email.
• Profile settings: preferences, notification settings, and branding configurations you set in the platform.

2.2 Information collected automatically

• Usage data: pages visited, features used, clicks, time spent, and actions taken within the platform.
• Device and browser data: IP address, browser type and version, operating system, device identifiers, screen resolution.
• Log data: server logs including timestamps, error reports, and API request details.
• Cookies and similar technologies: session cookies, preference cookies, and analytics cookies. See Section 7 for full details.

2.3 Data from third-party integrations

When you use contact forms or other features on this website, we process the information you provide solely to respond to your inquiry or deliver the service you requested. This data is processed on your behalf and remains your property — see Section 4 for how we handle it.

3. How We Use Your Information

We use the information we collect for the following purposes:

4. Client Data and Third-Party Integration Data

When you connect third-party platforms (e.g. Google Analytics, Google Ads, CallRail, Search Console, WordPress, Microsoft Clarity) to this website, you authorise us to retrieve and process data from those platforms on your behalf.

• This data is processed strictly to generate the dashboards and reports you have configured.
• We do not use your clients' campaign data, audience data, or analytics data for any purpose other than delivering the Services to you.
• You retain full ownership of this data. You can revoke any integration and request deletion of the associated data at any time.
• We operate as a data processor for client data, and you (the agency or user) are the data controller. By using the platform, you warrant that you have the right to share this data with us for processing.

5. How We Share Your Information

We do not sell or rent your personal data. We may share information with:

5.1 Service providers and sub-processors

We use trusted third-party providers to operate our Services. These include cloud hosting, payment processing, email delivery, error monitoring, and analytics. All sub-processors are contractually bound to protect your data and may only process it as directed by us.

5.2 Legal requirements

We may disclose your data if required to do so by law or in response to valid legal process (such as a court order or subpoena), or to protect the rights, property, or safety of this website, our users, or the public.

5.3 Business transfers

If this website is acquired by or merged with another company, your data may be transferred as part of that transaction. We will notify you before your data is transferred and becomes subject to a different Privacy Policy.

6. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements.

• Account data: Retained for the duration of your subscription plus 90 days after account closure, then deleted or anonymised.
• Integration / client data: Retained while the integration is active. If you disconnect an integration or close your account, associated raw data is deleted within 30 days.
• Billing records: Retained for 7 years to comply with tax and accounting requirements.
• Support communications: Retained for 3 years after the issue is resolved.
• Server and security logs: Retained for 90 days, then automatically purged.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies on our website and platform. You can control cookies through your browser settings, but disabling certain cookies may limit platform functionality.

8. Data Security

We implement industry-standard technical and organisational measures to protect your data against unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.3.
• Encryption at rest: All stored data is encrypted using AES-256.
• Access controls: Role-based access controls limit who within Mohammad Bashardoust can access personal data. Access is granted on a need-to-know basis.
• Infrastructure: Our platform is hosted on SOC 2 Type II certified cloud infrastructure.
• Vulnerability management: We conduct regular security assessments and penetration tests.

Despite these measures, no method of transmission or storage is 100% secure. If you have reason to believe your interaction with us is no longer secure, please contact us immediately at info@example.com.

9. Your Rights

Depending on where you are located, you may have certain rights regarding your personal data. We honour all requests regardless of jurisdiction.

To exercise any of these rights, email us at info@example.com or use our contact form. We will respond within 30 days. We may need to verify your identity before processing the request.

California residents (CCPA/CPRA): You have the right to know what personal information we collect and why, to opt out of any sale (we do not sell data), to request deletion, and to non-discrimination for exercising these rights.

EU/UK residents (GDPR/UK GDPR): You also have the right to lodge a complaint with your local supervisory authority if you believe we have not handled your data appropriately.

10. International Data Transfers

Mohammad Bashardoust is based in Canada, which the European Commission has recognised as providing an adequate level of data protection for personal data transferred from the EU.

Some of our sub-processors are located in the United States. Where we transfer personal data to the US or other countries outside your jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

11. Children's Privacy

This website is intended for professional and business use. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it promptly.

12. Links to Third-Party Sites

Our platform and marketing website may contain links to third-party websites or services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies. This Privacy Policy applies only to information collected by this website.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and update the "Last updated" date. For material changes — those that significantly affect your rights or how we use your data — we will provide at least 14 days' notice by email or via an in-platform notification before the changes take effect.

Continued use of the Services after the effective date of a change constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our privacy team: