Privacy policy

1. What we collect

• Account data: name, email and password (stored only as a hash; we can't see your password).
• Payment data: plan, amount, date, the gateway reference and, for USDT, the wallet address and transaction hash. We don't store bank card details; rial payments happen entirely on Zarinpal's gateway.
• Verification data (signals subscribers only): national ID number, mobile number, the verification video and the result of the civil registry match.
• Usage data: settings, your active plan, usage of service limits, and your AI Lab conversations.
• Technical data: IP address, approximate country (worked out from the IP on our own server), browser and device type, and sign-in times, for security, abuse prevention and aggregate user statistics.

2. What stays on your device

Chart drawings, saved indicators, alerts, layouts and chart settings are kept in your own browser's storage (Local Storage) and are not sent to our servers. Clearing your browser data removes them.

3. Why we use it

• To provide the services, activate and manage subscriptions, and give support.
• To verify signals subscribers, prevent account sharing, and keep proof of informed risk acceptance.
• To keep accounts secure and prevent fraud and abuse.
• To improve the services using aggregate, anonymous usage statistics.
• To meet legal obligations and respond to orders from competent authorities.

4. Who it's shared with

Only as much as each needs to provide the service:

• The verification system: a licensed online identity provider used for the civil registry check and face match.
• The payment gateway: Zarinpal, for rial payments.
• The AI provider: messages you write in the AI Lab are sent to the language model provider (Anthropic) for processing. Please don't include personal or confidential information in them.
• Infrastructure: the hosting and email providers the service runs on.
• Legal authorities: only when ordered by a competent court or authority.

5. Cookies

We use only the essential sign-in cookie that keeps you logged in. We don't use advertising cookies or ad-network trackers.

6. How long we keep it

• Account data: while your account is active.
• Payment records: as long as financial and legal obligations require.
• Verification video and data, as proof of risk acceptance: for the subscription period and up to 2 years after, then deleted, unless a dispute or legal request requires keeping them longer.

7. Security

Connections to the site are encrypted (HTTPS), passwords are hashed, and verification data is accessible only to authorized staff when needed. No system is perfectly secure; if an incident affects your data, we'll tell you as soon as possible.

8. Your rights

• Access the data we hold about you and get a copy.
• Correct inaccurate data.
• Delete your account and data, except what the law or an open dispute requires us to keep.
• Opt out of non-essential emails.

To use these rights, email support@vlevel.ir with the subject "Privacy". We reply within 15 days.

9. Users under 18

Vlevel is not for anyone under 18, and we don't knowingly collect their data.

10. Changes to this policy

If this policy changes, the new version is published on this page with its date, and material changes are announced by email.