Privacy Policy

01 · Section

Scope of This Policy

This policy pertains to information received or processed during registration, service usage, content creation or purchase, note-taking and note sharing, support communication, and payment or settlement activity.

Using Daanex services implies acceptance of information processing within the framework of this policy and applicable laws. Where the law requires a separate consent, Daanex will request it explicitly.

02 · Section

Information We Collect

Depending on the specific services utilized by the user, the following information may be collected or processed:

Account Information

Mobile phone number, which is the sole account identifier; name and display name; profile photo, institution name, and institution logo where provided by a creator; information required for authentication and account management, including one-time SMS verification records and active sessions; membership tier, role, access permissions, and account status.

Financial and Transactional Information

Purchase details regarding memberships, credits, top-ups, bundles, or content; payment records, invoices, receipts, refund cases, and completed transactions; payout destination and verification status for creators, including bank account information required for settlement; necessary data for calculating and settling content creator revenues.

Content and Activity Data

User-generated, uploaded, or purchased content and associated media files; notes, note categories and tags, quiz attempts, progress, and other data saved by the user within personal features; note shares, permissions, and comments created through the sharing tools; usage logs and interaction records with content; technical data necessary for system operation and security.

Technical Information

Data such as device type, browser, IP address, login timestamps, session records, rate-limit counters, and sanitized error reports may be processed to ensure security, debug issues, prevent abuse, and enhance service performance. Application logs are designed not to contain passwords, secrets, or full payment credentials.

Support and Reports

Support tickets, reports, complaints, and the correspondence needed to resolve them; records of moderation, suspension, appeal, and audit events.

03 · Section

Purpose of Information Collection

Daanex processes information solely for defined purposes consistent with its services, including:

• Creating and managing user accounts and authenticating sign-in
• Providing services for content creation, publication, purchase, and usage
• Managing subscriptions, credits, payments, receipts, refunds, and revenue settlements
• Providing customer support and responding to requests
• Maintaining account security, preventing fraud and abuse, and enforcing rate limits
• Improving functionality, quality, and overall user experience
• Complying with legal obligations, retaining financial records, and resolving disputes
• Operating audit, moderation, and appeal processes

Daanex also sends service messages that are necessary to operate the account and the service, such as verification codes, receipts, expiry reminders, and security notices.

04 · Section

User Content and Personal Notes

User-generated content and personal notes are considered private or proprietary data unless the user explicitly chooses to publish them or grants access permissions to others.

Notes are private by default. A note becomes visible to another person only when its owner explicitly shares it and selects the recipient and permission level. Content creators can enable or disable note sharing for each lesson. When sharing is enabled, the owner may share a note with the creator or with users who already hold access to the same content, with either view-only or view-and-comment permission. A share can be revoked at any time.

Notes and shares are bound to the relevant content version. If a source version becomes unavailable, the source is marked unavailable while the personal text of the note is preserved. Comment visibility is limited to the note owner and the recipient.

Daanex may process or store this information strictly to deliver these services. Access to this data must align with the corresponding purpose, role, and authorized permissions. There is no public note directory, user search for sharing, or social notification in the current version.

Content creators must ensure they hold the necessary licenses or permissions for any third-party information, images, or works prior to publication.

Creator identity fields—display name, profile photo, institution name, and institution logo—are displayed publicly on the creator profile and lesson header as part of the service.

05 · Section

Information Sharing

Daanex does not sell user information. Information may be shared with third parties or external systems only as necessary under the following circumstances:

• Technical service providers, including hosting and content delivery, private object storage, managed database, SMS delivery, and payment processing
• Facilitation of purchase, sale, settlement, payout, and refund transactions
• Fulfillment of legal obligations or responding to valid requests from competent authorities
• Protection of rights, safety, and property belonging to Daanex and its users
• Detection and prevention of fraud, abuse, or security incidents

The current service providers include Cloudflare for hosting and private object storage, Neon for the managed PostgreSQL database, Zarinpal for payment processing, and the SMS panel used for verification messages. Service providers may change as the platform evolves; the same access-limiting principles apply.

When third-party service providers are engaged, Daanex endeavors to restrict their access strictly to what is required to perform their designated duties. Some providers may process data outside Iran. Where this occurs, Daanex takes steps consistent with applicable law to ensure that data remains protected and is used only for the contracted service.

06 · Section

Data Retention and Security

Daanex implements appropriate technical and administrative security measures suited to the nature of the data to protect user information. These measures include server-side authorization, HttpOnly and Secure session cookies, keyed verification storage for one-time codes, rate limiting, a second authentication factor for privileged accounts, signed short-lived media links, file validation, and audit logging.

• Sensitive audit events are retained for 180 days and then archived.
• Financial, ledger, order, payout, and refund records are retained for the period required by applicable financial and commercial law. These records are append-only and may remain after an account is closed.
• Backups are kept on a rotating schedule for operational recovery and are not used for marketing or profiling.
• Content and notes are retained while the account is active and are handled on a deletion request subject to the limits below.

While no method of transmission over the Internet or electronic storage is completely secure, Daanex makes every effort to minimize the risk of unauthorized access, disclosure, alteration, or destruction of data.

07 · Section

Cookies and Similar Technologies

Cookies or similar technologies may be utilized to maintain login states, manage user sessions, ensure security, and optimize performance.

The current version uses an essential session cookie to keep a signed-in user authenticated. It is HttpOnly, Secure, and SameSite-restricted. Daanex does not use advertising cookies or third-party analytics cookies in the current version. If analytical or advertising cookies are introduced, this policy will be updated and the required choices will be presented before use.

Users can modify their browser settings to manage cookies; however, disabling the essential session cookie will prevent sign-in and other core features from working.

08 · Section

User Rights

Within the bounds of applicable law, users have the right to:

• Request details regarding the processing of their personal data
• Request corrections to inaccurate or incomplete information
• Submit requests for account or data deletion
• Object to data processing where legal grounds exist
• Submit inquiries or complaints regarding data usage

Requests are handled through Daanex's official contact channels. Daanex may need to verify the requester's identity before acting.

09 · Section

Protection of Minors

The use of Daanex by minors must comply with relevant regulations and occur under appropriate parental or legal guardian supervision and consent.

Parents or legal guardians may contact Daanex through official channels to request a review if they observe inappropriate content or data associated with their child.

10 · Section

Privacy Policy Amendments

This policy may be updated to reflect changes in our services, legal requirements, data processing procedures, or service providers.

Revised versions become effective as of the specified date, and appropriate notifications will be issued for substantial modifications. Where required by law, explicit consent will be requested.

This policy supplements the Daanex Terms of Service and Financial Policies & Credit Rules. Together they form the platform's published terms.