How professional profile data, accounts, billing, cookies, advertising tools and privacy requests are managed.
Who We Are and How to Contact Us
This Privacy Policy explains how ZSany LLC (“ZSany,” “we,” or “us”) processes personal information relating to IranianAgent.com, its professional directory, accounts, advertising subscriptions, inquiries, and business communications. Independent real estate professionals and brokerages may separately process information they receive under their own privacy practices. You may submit privacy inquiries, correction requests, and other requests through our contact form. Additional contact details or notices will be provided where legally required.
Information We Collect
Depending on how you use the Site, we may process professional profile information, including names in English or Farsi, business or brokerage name if supplied, professional title, location and service areas, contact numbers, WhatsApp details, email address, website, social-media profiles, biographies, photos, offered services and self-reported languages. We may also process licensing jurisdictions or other credentials when voluntarily provided or lawfully obtained to administer profiles and review complaints; we do not routinely publish individual license numbers in standard public profiles.
For registered accounts, we may process usernames, email addresses, password-related authentication data, account activation and reset events, profile management history where recorded, support interactions and account security details. For paid subscribers, we process selected package and location, billing identifiers, invoices, payment status, Stripe-provided payment metadata and subscription or cancellation records.
For Site visitors, data may include voluntarily submitted contact-form information where those forms are enabled, IP address, device and browser information, basic usage and security logs, cookies and identifiers generated by website technologies. Public-source professional information may be obtained from agents, brokerages, regulator listings or other publicly accessible business sources. The precise categories depend on the features used and information supplied.
Sources of Public Professional Information
We may collect information directly from professionals or authorized representatives and from official regulator directories, brokerage websites, public professional profiles and other business directories. Where permitted by law, we may publish professional business information before an account is claimed or approved. Such an unclaimed profile does not imply endorsement or prior permission by the named professional.
Public availability does not automatically make information exempt from privacy or other legal requirements. We will evaluate substantiated correction, objection and removal requests and may request appropriate ownership documentation.
Public Profiles, Indexing and Visibility
Public professional profiles may include names, business contact details, brokerage or company information, photographs, biographies, languages, service categories, and sponsored advertising labels. Our standard public profiles do not currently display individual professional license or registration numbers. Any additional licensing details collected or displayed are subject to applicable law. Advertising labels identify paid visibility, not independently verified credentials or professional quality.
Accounts, Email Activation and Blue Checkmarks
Agents, their brokerage representatives or our team may create accounts using professional emails obtained from an agent, brokerage website or other professional source. Account activation or password-reset email establishes access through the associated address; it does not conclusively confirm identity, employment, brokerage authorization or licensure.
A blue checkmark may appear after access has been activated and indicates that an account has access to manage the displayed professional profile. The controller may be the professional or someone on the professional's behalf at their company. It is not a verified professional license or identity certification. We may collect supporting details if a claim or unauthorized-access report requires investigation.
Profile Updates and Review
Newly registered or activated accounts may have updates held for administrative review. Edits from already published accounts may go live without additional advance manual approval. Where technically available, we may use administrative and security records to investigate disputed changes. We do not claim continuous manual review or comprehensive logging of every update.
Professionals should notify us of license suspensions, brokerage transfers and material errors promptly, and request correction or removal when appropriate.
Purposes of Processing
We process personal information to operate and maintain the Directory, provide searchable profiles, manage and secure professional accounts, process paid placement orders, deliver authorized messages to selected professionals, respond to requests, prevent fraud, review complaints, measure website performance, perform lawful advertising and outreach, and meet contractual or legal obligations.
We do not use directory visitor inquiries to provide individualized brokerage, mortgage, tax, investment or legal advice. No material change of purpose will be implemented without applicable notice and consent where required.
Legal Bases Where EU/UK Rules Apply
If GDPR or UK GDPR applies, processing may be supported by contractual necessity for requested accounts and services; legitimate interests in operating a limited professional directory, security and customer support after balancing affected rights; legal obligations for relevant recordkeeping; or consent where required, including certain tracking and marketing practices. A different basis is used only when applicable.
Professional-profile processing from public sources may require transparency notices under Article 14 and access, objection or deletion rights. We will evaluate those duties in relevant markets; broad worldwide website access alone does not determine every law's territorial reach.
Google Analytics, Meta Pixel and reCAPTCHA
The Site uses Google Analytics to measure engagement, Meta Pixel for advertising measurement or audience functions, and reCAPTCHA for spam and abuse protection. Depending on configuration, those services and their partners may receive browser, device, IP, event and cookie identifiers and information about page visits or interactions.
We use privacy controls and data minimization measures as required by applicable law. We do not intentionally provide contact-form message text, full payment details or other sensitive submissions to advertising pixels. Google, Meta and other providers may process certain data under their own policies and contracts.
Cookies, Tracking Consent and Preferences
Necessary cookies may support account sessions, security and fraud prevention. Optional analytics and advertising technologies may require informed consent in some jurisdictions and privacy opt-out measures in others. Where legally required, we provide consent or opt-out mechanisms for nonessential tracking; browser cookie settings alone do not necessarily fulfill all obligations.
We will honor opt-out preference signals where required by applicable law and supported through implemented controls. Do Not Track is not a universally standardized legal command; other recognized browser privacy signals may require separate handling. You can contact us if you experience difficulty exercising an applicable tracking or advertising choice.
Stripe Billing and Payment Data
Stripe handles payment processing for paid annual directory subscriptions. We may receive billing identity, transaction or subscription identifiers, card brand and last digits when provided by Stripe, payment status and invoices. Full payment card details are ordinarily provided directly to Stripe rather than held by ZSany.
We use relevant data for service administration, cancellations, renewal authorization, fraud prevention, disputes and legally required accounting. Stripe's own notice may apply to processing it performs independently.
Visitor Contact Tools and External Messaging
When available, Site inquiry tools may transmit contact details and message text to a professional the visitor chooses. The Site may process form submissions or related records in connection with delivery, security and support, depending on the deployed form configuration. Contacting an agent through WhatsApp, telephone or another linked site may involve additional independent providers. For questions or requests, use our contact form.
Do not send passports, banking records, wire instructions, detailed financial information or other sensitive documentation through general inquiries. Visitors should confirm how the professional receiving a message will handle subsequent communications.
AI-Assisted Drafting, Outreach and Internal Review
ZSany may use AI-assisted tools to draft or translate professional descriptions, organize publicly available business information, and prepare outreach messages. AI-generated output may be inaccurate or incomplete and is subject to appropriate review before reliance.
We do not represent that AI output independently verifies license or brokerage standing, language fluency, professional merit or transaction outcomes. Any disclosure of personal information to an AI provider must follow relevant contracts, lawful purposes and privacy requirements; we do not presume or promise that a vendor never retains data unless that is established.
Professional Invitations and Direct Marketing
We may use professional contact information to invite agents and brokers to claim or correct profiles or learn about advertising packages, subject to applicable email and privacy law. We maintain or use unsubscribe and suppression information as needed to respect choices and applicable marketing requirements.
A publicly displayed email does not automatically permit unrestricted commercial outreach. Canadian messages in particular require a valid consent basis or other applicable exemption. Service and security messages may be sent separately from promotional messages where permitted.
Who Receives Information
Recipients may include web hosting and security providers; Google and Meta according to the tracking services enabled; Stripe; professional email, support and technical vendors; authorized account personnel; selected agents or brokerages when contacted by visitors; the public through published profiles; and regulators, courts or lawful transaction participants where legally justified.
We may share appropriate data with service providers under suitable terms and safeguards. Independent third-party pages and messaging products remain subject to their own arrangements.
Sale, Sharing and Targeted Advertising
We do not describe all advertising-data disclosures as non-sales solely because ZSany receives no money for them. Under some U.S. state privacy laws, sharing identifiers or website activity with ad-tech providers may qualify as “sale,” “sharing,” or targeted advertising even without a conventional transfer of customer records for payment.
Where applicable to ZSany and the relevant processing, individuals may use legally required opt-out methods, including recognized preference signals. Any public “Do Not Sell or Share” or “Your Privacy Choices” representation must match the Site's implemented advertising controls and actual contracts.
Retention Schedule—General Principle
We retain information only as reasonably necessary for legitimate operations, accepted orders, lawful directory publication, account security, privacy requests, billing obligations and disputes. Different records follow different schedules. Retention can be shorter where mandatory law requires earlier deletion, or longer where necessary for legal obligations, litigation holds or substantiated security investigations.
The following periods are the Site's operational retention schedule, subject to the exceptions described here; they are not universal industry-wide legal standards. Deletion can include secure erasure or anonymization, as appropriate.
Deleted Profiles, Inquiries and Backups—90 Days
Professional profiles are ordinarily retained while lawfully published and maintained. Following a valid profile/account deletion request or closure, ordinary associated operational data is generally erased or anonymized within 90 days, unless a shorter legal deadline applies or a lawful retention exception applies.
Routine Site-controlled inquiry records and routine access/security logs are generally retained for up to 90 days when no longer needed for a current matter. Routine backups follow a 90-day rolling cycle ; restored data remains subject to applicable deletion obligations. If the Site does not store a category of messages, no independent Site retention period applies to messages held solely by the receiving professional.
Verification, Subscription and Financial Records
Reasonably necessary account-activation, verification or profile-change records may be held while an account is active and ordinarily for up to one year after closure, except where a separate obligation or legitimate dispute requires more. Subscription authorization and cancellation evidence may be retained while the subscription runs and ordinarily for up to five years after it ends, subject to specific legal requirements.
Material accounting, invoicing and tax records may follow a seven-year internal retention standard, or longer where law requires. Minimal marketing suppression records may be retained for as long as reasonably needed to honor opt-outs. Relevant records may be preserved during a legal hold or investigation and reviewed when the need ends.
Security and Incident Response
We apply reasonable administrative, technical and organizational measures appropriate to available information and risks. No system is completely secure. Suspected incidents may be investigated and notifications made to affected persons, authorities or regulators when required by applicable law.
Account users should keep their credentials confidential and immediately report suspected unauthorized access, impersonation or improper profile edits.
Access, Correction, Deletion and Objection Rights
Depending on the person's jurisdiction and the law governing our activities, individuals may request access, correction, deletion, withdrawal of consent, data portability, processing restrictions or objection to certain uses. Marketing messages may include an unsubscribe method. We may verify the requester and apply lawful exceptions.
Contact the contact form. We will respond within applicable statutory deadlines; where an appeal route is legally required, we will provide it.
California and Other U.S. State Rights
When a particular U.S. privacy statute applies to our business and processing, eligible residents may have rights to know, access, correct, delete, opt out of applicable sale/sharing or targeted advertising, and avoid prohibited retaliation or discrimination for exercising protected rights. Applicable thresholds, exceptions, authorized-agent procedures, notice-at-collection and opt-out requirements differ by state.
Any required additional links, notices or browser-signal handling will be provided to qualifying users where applicable. ZSany does not assert that every state privacy law applies solely because the Site is accessible there.
Canada and Provincial Considerations
Canadian privacy rights may arise under PIPEDA or applicable provincial laws, depending on the activity, province and business operations. Business contact information may receive limited exceptions for specified business-communication purposes, but public availability is not a universal exemption for republishing personal information.
Where legally required, we will identify purposes, obtain valid consent, address access or correction requests, and apply appropriate retention, international transfer and direct-marketing requirements.
International Processing and Transfers
Information may be processed in the United States and in other jurisdictions used by our contracted service providers. Visitors in different countries may have additional rights and protections, including potential EU/UK safeguards where the relevant territorial rules apply.
When legally required, we will use an appropriate transfer mechanism or other valid basis, provide additional notices and identify a representative or regulator contact. Directory publication allows worldwide access to information selected for public display.
Children, Sensitive Data and External Services
The Site is intended for adults seeking professional real estate services and does not knowingly solicit information from children. We do not intentionally collect sensitive financial or property-transaction documents through ordinary contact tools; information nevertheless submitted may need to be processed to transmit, investigate or remove it lawfully.
External brokerage sites, social media, Google Maps, WhatsApp and other linked services may independently collect information under their own privacy notices.
Changes and Privacy Requests
We may update this Policy as our practices or legal obligations change, with a revised date and any additional notice or consent required by law. Privacy choices and requests remain subject to applicable law. Submit questions or requests to ZSany LLC through our contact form. Additional contact or representative information will be provided where required.