Privacy Policy

We are committed to protecting your privacy and handling your personal data with the highest standards of care and transparency.

Last Updated: January 2025

1. Introduction

Official platform of Rise Iran! National Campaign for freedom and democratic reconstruction of Iran led by Prince Reza Pahlavi. We are committed to protecting your privacy and handling your personal data with the highest standards of care and transparency.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our platform. We comply with applicable data protection regulations including GDPR.

Age Requirement: Our platform is designed for adults. We do not knowingly collect personal information from individuals under 16 years of age.

Our Commitment: We will never sell your personal data or share it with any third parties for their own purposes. We only share data with service providers who work under our direct supervision, as described in this policy.

By using our services, you acknowledge that you have read and understood this Privacy Policy. For users submitting information through our forms, explicit consent will be requested at the point of data collection.

2. Data Controller

We are the data controller responsible for personal information collected through iranopasmigirim.com.

Data Protection Contact: For privacy-related inquiries, requests, or concerns, please use our [Data Request Form](/en/data-request).

3. Information We Collect

We collect information that you voluntarily provide to us and certain information automatically when you use our platform.

  • Personal Information: Name, email address, phone number (optional), country of residence
  • Communications: Messages, feedback, inquiries, reports
  • Organization Details: Organization name, type, contact information, mission statements, websites (for partnership applications)
  • Technical Data: IP addresses (kept only 72 hours for security checking, then auto-removed). Country-level analytics only
  • Usage Data: Google Analytics collects anonymized usage statistics (only with your explicit consent)
  • Cookies: We use cookies to enhance your experience (see Cookie Policy below)
  • Campaign Support Data: Information about your participation and support for the campaign

4. How We Use Your Information

We process your personal data based on your explicit consent, our legitimate interests in supporting democratic reform, legal obligations, and public interest activities of a political association operating democratically.

We use your personal information for the following purposes:

  • Support Campaign Activities: Coordinate supporters, organizations, and activists participating in the Rise Iran! campaign
  • Communication: Respond to your inquiries, send newsletters (with consent), provide updates about campaign activities
  • Platform Improvement: Analyze usage patterns to enhance user experience and effectiveness
  • Security: Prevent fraud, abuse, and unauthorized access to our services
  • Documentation: Maintain historical records of campaign support (Munich Signature Wall)
  • Legal Compliance: Meet non-profit organization reporting requirements and respond to lawful requests

5. Your Data is Safe With Us - We Do NOT Share

We do NOT share your personal data with anyone. Your information remains under our direct control and supervision at all times.

All data you provide stays with us and is protected with the highest security standards. We will never give, sell, or share your information with third parties unless you explicitly know about it and consent to it.

Service Providers Who Work FOR Us

To operate our platform securely, we use carefully selected service providers who process data on our behalf - they work FOR us, under OUR control.

Key service providers include, but are not limited to:

• Google Analytics • Vercel Inc. • Cloudflare Inc. • Anedot • Resend / SendGrid

Important: All service providers are bound by strict Data Processing Agreements. They can ONLY process data according to our instructions and cannot use your data for their own purposes. Your data remains under our direct control and supervision.

All services are US-based with encrypted storage.

A complete and current list of all subprocessors is available upon request via our [Data Request Form](/en/data-request).

6. Special Security Notice for Iran-Based Users

Important: If you are located in Iran, please be aware of potential security risks. We strongly recommend:

• Using a trusted VPN service when accessing our platform

• Using encrypted email services for sensitive communications

• Understanding that internet traffic in Iran may be monitored by the regime

• Exercising caution about what information you share online

While we implement strong security measures, we cannot control network-level surveillance. Your safety is paramount.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law.

  • Contact Form Submissions: 1 year from date of submission
  • Newsletter Subscriptions: Until you unsubscribe. Unsubscribe requests are processed within 36 hours. You can unsubscribe at any time using our [Unsubscribe Form](/en/unsubscribe)
  • Munich Signature Wall: Individual data removed after display period. Only signature count retained as historical record (you may request immediate removal)
  • Organization Registrations: Retained while partnership is active
  • Feedback Submissions: 1 year from submission
  • Analytics Data: 1 year (anonymized)
  • IP Addresses: Kept only 72 hours for security checking, then automatically removed

8. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights:

  • Right of Access: Request a copy of all personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data ('right to be forgotten'), subject to legal retention requirements
  • Right to Restriction: Request limitation on how we process your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw previously given consent at any time
  • Right to Lodge a Complaint: File a complaint with your national data protection supervisory authority

How to Exercise Your Rights

To exercise any of these rights, please submit a request through our [Data Request Form](/en/data-request).

We will respond within 30 days as required by GDPR. We may need to verify your identity before processing your request.

Quick Actions:

Unsubscribe from Newsletter: Visit our [Unsubscribe Page](/en/unsubscribe) for instant automatic removal

Data Access/Deletion Requests: Use our [Data Request Form](/en/data-request)

These rights are not absolute and may be subject to limitations based on legal obligations or legitimate interests. We will explain any limitations if they apply to your request.

9. Cookie Policy

We use minimal cookies and browser storage to provide essential functionality.

What We Store

  • Essential Cookie:
  • • Language preference cookie (NEXT_LOCALE) - Stores your chosen language (Persian/English)
  • • Duration: 1 year
  • • Required for site functionality
  • Browser Local Storage:
  • • Theme preference - Remembers your light/dark mode choice
  • • Form draft data - Temporarily stored to prevent data loss
  • • Stored only in your browser, not sent to our servers
  • Third-Party Analytics:
  • • Google Analytics may set cookies for anonymized usage statistics
  • • You can block these using browser settings, extensions, or opt-out tools

Managing Cookies

You can control cookies through your browser settings:

• Most browsers allow you to refuse or delete cookies

• Blocking the language cookie will reset your language preference on each visit

• Local storage can be cleared through browser settings

Important: We do not use cookies for advertising, cross-site tracking, or selling your data.

10. Security Measures

We implement industry-standard security measures to protect your personal data:

  • Encryption: All data transmissions use industry-standard encryption encryption (HTTPS)
  • Database Security: Encrypted storage (encrypted storage), access controls, and regular security audits
  • Access Limitations: Only authorized personnel can access personal data on a need-to-know basis
  • Regular Updates: Security patches and software updates applied promptly
  • Monitoring: Continuous monitoring for suspicious activity and potential breaches
  • Incident Response: Documented procedures for responding to potential data breaches
  • However, no internet transmission is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You share information at your own risk.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features.

When we make significant changes, we will:

• Update the 'Last Updated' date at the top of this policy

• Notify users via email newsletter (for subscribers)

• Display a prominent notice on our website

Your continued use of our platform after changes become effective constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please use our online forms for faster processing:

  • Privacy & Data Requests: [Submit Request](/en/data-request)
  • • Access your data
  • • Request deletion (Right to be Forgotten)
  • • Correct inaccurate information
  • • Export your data
  • • Object to processing
  • • Withdraw consent
  • • Ask privacy questions
  • Unsubscribe from Newsletter: [Instant Unsubscribe](/en/unsubscribe)
  • • Automatic immediate removal from mailing list
  • • No waiting period - processed instantly
  • We will respond to all form submissions within 30 days as required by GDPR.
  • For EU/EEA Residents:
  • If you believe we have not handled your personal data properly, you have the right to lodge a complaint with your national data protection supervisory authority. Find your authority at: https://edpb.europa.eu/about-edpb/board/members_en