Privacy policy

1What this policy covers

This policy covers the GSMGPT website, the web panel and every service ordered through them. Where it says "we", that is GSMGPT, which decides how your data is processed.

2What we collect

We collect only what running the service needs. We buy nothing about you from data brokers.

• Account details: the name, email address and phone number you register with. Your password is stored only as a salted hash, so we never hold the password itself.
• Orders and credits: what you ordered and when, how many credits it cost, and how you topped up your wallet.
• Device identifiers: the IMEI, serial number, model and other identifiers you send with an order. The service cannot run without them.
• Support messages: the tickets, emails and chats you send us, with whatever you choose to put in them.
• Technical records: IP address, browser and device type, and the times of sign-ins and orders, kept to secure your account and catch fraud.

3Why we need it

Each purpose below is one the service needs. We do not process your data for anything else, and we never sell it.

• Delivering the service you ordered and running your account and wallet.
• Answering tickets and handling disputes and failed jobs.
• Detecting fraud, abuse and suspicious payments, and keeping your account safe.
• Improving the service from aggregated statistics, which cannot be traced back to one person.
• Meeting our legal and tax obligations and keeping accounting records.

4Payments

Payments are handled by the provider you choose: Iranian gateways for payments in Toman, the blockchain network for crypto. Your card number, CVV2, one-time password and wallet private keys never reach us and are never stored by us. What reaches us is the result of the payment — amount, time and reference number — which we keep to credit your wallet and for our accounts.

5Cookies

This site sets the cookies it needs to work, plus one third-party analytics tool: Yektanet, which measures page traffic and sets its own cookie in your browser. It gives us no access to your account. You can clear cookies from your browser settings whenever you like; the effect is that being signed in and your language and theme choices stop being remembered.

6Sharing with others

We do not sell your data and we do not hand it to anyone for their marketing. It leaves us in three cases only:

• The payment providers and the infrastructure that hosts the site and the panel — each getting only what it needs to do its job.
• The Yektanet analytics tool, which measures page traffic and sets its own cookie to do so.
• Where the law or a court order requires it.
• If you buy credit from an official reseller, that reseller knows about that purchase. Your panel account and your orders stay with us.

7How long we keep it

Account, order and credit records stay while your account is open, because they are your purchase history. Support messages and technical records are kept for about 90 days, and longer while a complaint, dispute or fraud investigation is open. Financial records are kept for as long as tax law requires. When your account is closed, the rest is deleted or anonymised.

8Your rights

Your data is yours. Write to us from the email address on your account; we answer within 30 days and may verify your identity first.

• Ask for a copy of what we hold about you.
• Correct anything that is wrong.
• Ask us to delete your account and data, except what the law or an open case requires us to keep.
• Unsubscribe from our product emails — every one of them carries the link, and your account is unaffected.

9Security

Traffic between you and us is encrypted over HTTPS, passwords are stored only as salted hashes, and access to personal data is limited to the staff who need it for support and operations. No system is flawless: if a breach affects your data, we will tell you. Keep your password to yourself — anything done with your credentials counts as done by you.

10Error reports and technical data

When something breaks, the panel and the tools may send us an error report: the version, the operating system, the state of the run and the error itself. These reports carry none of your files and are used only to fix the fault.

11Links to other sites

Our pages link to sites we do not run: driver downloads, payment gateways, social accounts, the old panel. This policy ends where those sites begin — read their own before you give them anything.

12Children

The service is for mobile repair professionals and is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us data, tell us and we will remove it.

13Changes to this policy

We update this document whenever the service or the law changes. The date at the top always shows the last substantive change, and significant changes are announced on the site or in the panel. Continuing to use the service after a change means you accept the new version.

14Contact us

For any question about this policy or about the data we hold on you, reach our support team through the contact page or by email. The address and phone number are at the foot of every page.