1. Data controller
Y FINANCE is responsible for information received through this website, project request forms, résumé submissions and user accounts.
2. Information we collect
- Account information: name, mobile number, account creation time and session records.
- Project request information: name, contact number, company, requested service, project description, preferred contact method and time, and optional budget.
- Résumé information: name, contact details, email, city, specialty, experience, skills, professional notes and the uploaded PDF or Word file.
- Limited technical data required for security, abuse prevention and session management.
3. How information is used
- To review requests and contact users about relevant services.
- To review résumés and consider relevant opportunities where available.
- To operate accounts and show each user's own tracking codes and submissions.
- To protect the service, prevent abuse and respond to user requests.
4. Basis for processing
Information is processed with the user's explicit form consent, to take steps requested before a service engagement, and where necessary to protect the system. Consent for future use may be withdrawn.
5. Storage and security
Information is kept in private systems controlled by Y FINANCE and is not available through the public website. Plain-text passwords are never stored, and sign-in uses an essential protected session cookie. To reduce automated submissions, CAPTCHA images are generated inside the Y FINANCE server without sending information to an external CAPTCHA provider; each identifier is single-use and valid for no more than five minutes. Reasonable safeguards are used, although no system can guarantee absolute protection from every threat.
6. Retention
- Accounts are retained until deletion is requested or they are no longer needed to provide the service.
- Project requests are retained through review, any resulting engagement, and the period reasonably needed for related records and responses.
- Résumés are retained while relevant opportunities may be considered. Applicants may request deletion at any time.
- Sign-in sessions last no longer than seven days and are invalidated on sign-out.
Where law or a contract requires a record to be kept, deletion of that record may be delayed for the required period.
7. Sharing
Personal information is not sold. Access is limited to authorized Y FINANCE personnel, necessary service providers under confidentiality obligations, or legally required disclosures. A résumé is reviewed for the purpose communicated by the applicant before any potential introduction.
8. Cookies
The site uses only an essential sign-in cookie to maintain a user session. No advertising or marketing-tracking cookie is active in the current version, so a non-essential cookie consent banner is not shown.
9. User rights
Users may ask to access, receive, correct or delete their information and may withdraw consent for future processing. Identity verification may be required to prevent disclosure or deletion for the wrong person.
10. Privacy contact
Privacy requests can be sent to +98 917 380 6759 on Bale or WhatsApp, or to @Y_Co_Finance on Telegram. Phone calls are reserved for urgent matters and are enabled only after urgency is confirmed in the website’s contact section.
Tehran office: Vanak Square, Haghani Blvd., before Jahan Koodak intersection, No. 42, Allameh University Growth Center, 2nd floor.
11. Changes to this policy
If data practices change, the updated version and date will appear on this page. Material changes will be communicated appropriately before taking effect.