Privacy Policy

At Zentry (operated at zentry.ir), we take your privacy and the confidentiality of your data seriously. This Privacy Policy details how we collect, store, process, and safeguard information when you use our website, client portal, Telegram bots, Telegram Mini Apps (TMAs), and agency services.

1. Information We Collect

We collect only the minimum data required to deliver high-performance tools and custom development services:

• Account & Contact Data: Name, work email, Telegram username (@handle), phone number, and organization name provided during registration or quote intake.
• Project Specifications & RFP Submissions: Business requirements, feature checklists, revenue models, and brand goals submitted via our interactive RFP questionnaires.
• Authentication Information: Encrypted authentication tokens managed securely via Supabase Auth (including Google OAuth 2.0 and Telegram Login credentials). We never store raw passwords.
• Technical Metadata: IP location country header (via Cloudflare edge) and timestamp for spam prevention and notification dispatch.

2. Telegram Bot API & Mini App Data

When you connect a Telegram bot or open a Mini App created by Zentry, user interactions are processed transiently to fulfill commands, execute database queries, or render interactive UI components.

3. How We Use Your Information

We use collected data strictly for:

• Providing access to your Client Portal Dashboard and RFP progress tracker.
• Preparing tailored architectural proposals, quotes, and delivery timelines.
• Sending real-time project notifications and status milestones to our private Telegram admin channels.
• Maintaining system security, preventing unauthorized access, and debugging serverless edge functions.

4. Data Storage & Security Measures

Your information is stored in PostgreSQL databases protected by PostgreSQL Row Level Security (RLS) policies. Only authenticated project owners and authorized Zentry administrators can access project records and completed RFP briefs.

5. Third-Party Services

To provide high-availability edge delivery, we integrate with trusted industry leaders:

• Cloudflare: Edge CDN, DDoS protection, and serverless Cloudflare Pages/Functions.
• Supabase: Encrypted user authentication and PostgreSQL database infrastructure.
• Telegram Messenger Inc.: Official Telegram Bot API and Telegram Login widget verification.
• Google LLC: Google OAuth 2.0 single sign-on authentication.

6. Data Retention & Deletion Rights

You have the right to request access to, correction of, or permanent deletion of your account, projects, and submitted RFPs at any time. To request data deletion, contact us at support@zentry.ir or via Telegram at @zentry_ir.

7. Updates to this Policy

We may update this Privacy Policy periodically to reflect new features or regulatory requirements. Any modifications will be posted directly to this page with an updated timestamp.