Privacy policy
Last updated: October 2026
1. Controller
Pirooz Ltd, 13 Agiou Prokopiou, 2406 Egkomi, Nicosia, Republic of Cyprus
represented by Pejman Rajaei, Director
Email: hello@pirooz.ai
Phone: +357 99 172047
2. Principle
We process personal data only where this is necessary to operate this website and to answer your enquiries. We do not use advertising cookies and do not track you across other websites.
3. Visiting the website
When you visit the website, technically necessary data is processed: IP address, date and time, page requested, referrer, and browser and operating system. The purpose is to deliver the website and keep it secure. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation.
The website is hosted by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA (“Cloudflare”), which delivers it through its global network. Cloudflare acts on our behalf under a data processing agreement (Art. 28 GDPR). The request logs of our website (Workers Logs) are kept for at most 7 days and then deleted automatically. In addition, Cloudflare processes connection data in its network for a limited period to protect it against attacks; details are in Cloudflare’s privacy policy at cloudflare.com/privacypolicy.
4. Contact form and email
When you write to us, we process your details (name, company, email address, topic, message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where the enquiry relates to a possible contract, and Art. 6(1)(f) GDPR otherwise. We delete the data once the enquiry is complete, unless a contractual relationship results from it or statutory retention obligations apply.
Form messages are delivered via Amazon Simple Email Service (Amazon SES) of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg (“AWS”), in a data centre in the EU. AWS acts as our processor.
After you submit the form, we send an automatic confirmation of receipt to the email address you entered. It does not contain the content of your message. For emails sent via Amazon SES we record technical delivery events (sent, delivered, bounced, spam complaint) together with the recipient address and the time, in order to detect delivery problems and protect our sending reputation. These records are stored with AWS in the EU (Frankfurt) and deleted automatically after 30 days. We do not record whether or when you open an email or click on links. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is the reliable delivery of our emails.
We receive and store form messages, and emails you send us directly, in our mailbox with Google Workspace, provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google”). Google acts as our processor.
5. Abuse protection
To protect the contact form against automated requests we use Cloudflare Turnstile, provided by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, which checks technical characteristics of your browser (such as IP address, user agent and TLS fingerprint). Cloudflare processes these signals on our behalf to provide the check and, as a separate controller, to improve its bot detection (see the Turnstile privacy addendum). The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is protection against spam and abuse. Turnstile is only loaded once you start filling in the form.
6. No cookies
We do not set cookies on this website and do not store any information in your browser. You choose the language through the page address.
7. Fonts
The fonts on this website are loaded from our own server. No connection is made to the servers of font providers.
8. Recipients and transfers to third countries
Your data is only received by the service providers named above (Cloudflare, AWS, Google), who act on our behalf; for Turnstile, Cloudflare also acts partly on its own account (section 5). We do not sell data or pass it on for advertising. Where data is processed outside the EU or EEA, in particular in the USA, this takes place on the basis of the European Commission’s adequacy decision for the EU-US Data Privacy Framework, under which Cloudflare, Inc., Amazon.com, Inc. (including Amazon Web Services) and Google LLC are certified, and in addition on the basis of the EU standard contractual clauses agreed with these providers.
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). An informal message to hello@pirooz.ai is sufficient.
Right to object: Where we process data on the basis of Art. 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation (Art. 21 GDPR).
10. Right to lodge a complaint
You may lodge a complaint with any data protection supervisory authority, in particular in the EU member state where you live or work. The authority responsible for us is the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus (postal address: P.O. Box 23378, 1682 Nicosia).
11. No automated decisions
We do not make automated decisions or carry out profiling within the meaning of Art. 22 GDPR.
12. Obligation to provide data
You are not obliged to provide us with data. Without contact details, however, we cannot answer your enquiry.