Scope of this policy and the parties’ roles
This policy applies to the main dorsa.cloud website, its associated websites including dorsacloud.com, the user panel and Dorsa Cloud services. It explains the categories of data, the reasons for processing, when data is shared, how it is protected and your choices regarding personal information.
Some Dorsa Cloud services are provided for organizations. If you use the services through an organizational account, your organization’s authorized administrator can manage the account, resources and related information according to their access level. Questions about your organization’s internal policies should be directed to that organization.
If a Dorsa Cloud customer uses our infrastructure to provide a product or service to its own end users, that customer determines the purposes and means of processing end-user data, and Dorsa Cloud acts as a processor within the contract’s scope. In this situation, requests to access, correct or delete data should first be sent to that customer.
1. Data that may be collected
1.1. When you create an account, purchase or use services, we may collect information such as your name, necessary identity information, email, mobile number, contact address, organization details and account settings.
1.2. Orders, selected products or resources, prices, payments, invoices, service usage records and correspondence relating to support or complaints are recorded to provide and manage services.
1.3. When you contact sales or support, the content of your request and information needed to identify your account and follow up are recorded. If a communication is recorded, its purpose will be security, quality control or improved service.
1.4. Payment instrument information may be received and processed directly by the payment gateway or payment service provider. Dorsa Cloud retains only the information needed to record transaction status, issue invoices and handle financial matters.
1.5. Some information is necessary to create an account, verify identity, perform a contract or provide a service. If required information is not provided, registration or provision of that service may not be possible.
1.6. When you connect to the website or panel, standard technical information such as IP address, browser and operating system type, request time, page address and security events may be recorded in technical logs.
1.7. To verify identity, prevent fraud, control risk and comply with legal requirements, we may request additional documents or verify certain information through authorized providers.
2. Purposes of data use
Depending on the service and your relationship with Dorsa Cloud, data is used to create and manage accounts, verify identity, provide and support services, process orders and payments, issue invoices, respond to requests and disputes, and maintain platform security.
Information may also be used to analyze technical performance, improve service experience and capacity, prevent fraud and misuse, enforce contracts, fulfill financial and legal obligations, and respond to requests from competent authorities.
Marketing messages or non-essential offers are sent only as permitted. Where receiving these messages depends on your choice, you can stop them through the unsubscribe option or relevant settings.
3. Cookies and browser technologies
The public dorsa.cloud website loads Google Tag Manager and Microsoft Clarity scripts to analyze website usage statistics. These services are operated by third parties, may create their own browser cookies (including Microsoft Clarity’s _clck and _clsk cookies), and process technical visit information and page interactions, such as clicks and scrolling, under their providers’ policies. In addition to managed tags, Google Tag Manager loads Google analytics tags that may create cookies such as _ga, _ga_* and _gcl_au; creation of these cookies has been observed during practical browser inspection of the website.
The public website sends product page view (product_view), action button click (cta_click) and documentation link click (docs_click) events to these services. Data accompanying these events is limited to the event name, page path and, where applicable, the product identifier or link address and title.
Your light or dark display preference is stored for one year in a cookie named dorsa-theme and in browser localStorage. This data stores only the selected display mode. The public website does not use sessionStorage.
Your Persian or English language choice is stored in the dorsa-locale cookie for one year to retain it across the website and client panel. This cookie stores only the selected language.
The consultation request form sends entered information only to the Dorsa Cloud API; no cookies are created or sent with this submission.
The Dorsa Cloud panel may use browser local or session storage to maintain your signed-in session, coordinate security between tabs and temporarily retain the state of certain processes. Deleting this data may sign you out or interrupt a process in progress.
Other associated websites, including dorsacloud.com, may use cookies and similar tools for essential functionality, statistics or improving the experience. If analytics tools or the categories of data sent by dorsa.cloud change, this section will be updated.
You can manage or delete cookies and stored data in your browser settings and restrict analytics scripts using browser tools. Disabling essential browser data may affect sign-in, security or some panel features.
5. Security and your rights
Dorsa Cloud applies technical and organizational controls appropriate to the data and service to limit unauthorized access, disclosure, alteration or destruction. However, no data transmission or storage method provides absolute protection, and users are also responsible for protecting their credentials and account access.
You can request access to, correction of or deletion of your personal data. Fulfillment depends on the data type, Dorsa Cloud’s processing role, the contract’s status and legal obligations. Contact info@dorsa.cloud to submit a request.
If Dorsa Cloud processes data on behalf of a customer, an end user’s request should first be sent to that customer as the data controller. Dorsa Cloud cooperates in handling the request within its contract with the customer.
Dorsa Cloud does not knowingly collect personal information from individuals under 18 to create independent accounts. A parent or legal guardian who becomes aware of such information being provided may contact us for review and appropriate action.
6. Policy changes and contact
A revised policy is published on this page and takes effect on the stated date or, if no separate date is given, upon publication. For material changes, notice may be provided through the website, panel or email, as appropriate to the available contact information and relationship.
For questions about this policy or requests relating to personal information, email info@dorsa.cloud. To help us respond accurately, state the subject and information needed to identify the account, but do not send passwords or unnecessary confidential information by email.