SanazNet Privacy Policy
Effective: 9 September 2026
The service is only for users outside Iran. Location, IP, account, identity and payment data may be processed to verify this condition and conduct sanctions checks.
1. Controller and contact
WIUNIX LTD (Company No. 17338992), 82a James Carter Road, Mildenhall, Bury St. Edmunds, United Kingdom, IP28 7DE, is the controller of SanazNet data. Privacy request.
2. Data we process
- Account data: name, username, email, phone, language, country of residence and verification status.
- Device and connection data: technical identifiers, platform, app and OS versions, public and tunnel IPs, time, node, usage and security events.
- KYC: national ID, date of birth, phone, residence, document images, consent, decision and review note. The national ID is encrypted and fingerprinted; operators see only the last four digits.
- Tickets, support messages, abuse reports, notifications and administrative audit events.
- Subscription data: order reference, provider, product, amount, currency, status, dates, cancellation and refund; not full card numbers.
3. Purposes and lawful bases
We process data to perform the contract, provide connectivity, secure the service, prevent fraud, verify email and identity, provide support, administer payment, comply with sanctions and legal duties, and pursue proportionate legitimate interests. We seek consent for advertising, optional technology or KYC where required.
4. Advertising and free access
Free Android access may use Google AdMob rewarded ads. Google and partners may process advertising or device identifiers, IP, technical data, interactions and fraud signals according to your consent choices. Name, email and phone are not sent as the advertising identifier.
5. PayPal, Google and Apple
Web purchases are processed by PayPal, which may present Apple Pay as an eligible funding option. Android purchases are processed by Google Play and iOS purchases by the App Store. Google Pay or Apple Pay may be offered by the relevant provider depending on account, device and country; SanazNet does not control that choice. Each provider processes payment, tax, risk, fraud, sanctions, subscription and refund data under its own policy.
PayPal Privacy · Google Privacy · Apple Privacy
6. Sharing and transfers
Necessary data may be shared with infrastructure, email, notification, storage, advertising, identity, fraud-prevention and payment providers, advisers and competent authorities. Appropriate legal mechanisms are used for international transfers.
7. Retention schedule and security
- After account deletion, access, passwords, tokens, direct profile identifiers and KYC documents are immediately erased or made unusable in the active system.
- Necessary support, security and connection records are retained for up to 730 days and are then automatically purged.
- Minimal payment and accounting records are normally retained for 6 years after the relevant financial year; a tax enquiry, legal claim or lawful order may extend that period.
- Rotating backups expire within 90 days, are removed from operational use and are retained only for disaster recovery.
We do not retain data indefinitely merely in case it may be useful. A legal hold applies only to the data and period necessary and is protected by access controls and audit logging.
8. Your rights and account deletion
Depending on the law in your eligible residence, you may have rights of access, correction, erasure, restriction, objection, portability, consent withdrawal and complaint to a data protection authority. A password user can sign in and delete the account immediately. If you cannot access the account, submit a request through the contact form under Privacy and account data; after ownership verification, an erasure request is normally answered within one month. Erasure is not absolute, and data necessary for a legal obligation or the establishment, exercise or defence of legal claims may be retained temporarily.
Delete account or submit a request