This Privacy Policy explains how Sarrafi (“we”, “us”, “our”), a management system for currency-exchange offices based in Erbil, Iraq, handles personal information when you visit sarrafiiq.com, create an account, or pay your subscription. By using Sarrafi you agree to the practices described here.
01 Information we collect
Information you provide
- Account details — your name, business name, email address, and phone number when you register.
- Business data — the records you enter into the system, such as branches, cashiers, currencies, customer balances, transactions, and HR/payroll information.
- Support messages — anything you send us through the contact form, email, or messaging apps.
Information collected automatically
- Usage data — pages viewed, actions taken, and the date and time of access.
- Device & technical data — IP address, browser type, operating system, and approximate location.
Payment information
When you subscribe, your card and payment details are entered directly into our payment provider, Wayl. We do not collect, see, or store your full card number, CVV, or PIN on our servers. See section 3.
02 How we use your data
- To create and operate your account and provide the system’s features.
- To process your subscription payments and send invoices and receipts.
- To provide customer support and respond to your requests.
- To keep the service secure, prevent fraud, and maintain an audit trail.
- To improve our products and, with your consent, send product news and updates.
- To comply with applicable legal and accounting obligations.
03 Payments & Wayl
Subscription payments are processed securely by Wayl, our third-party payment provider. When you pay, you are connected to Wayl’s secure environment, which handles your payment instrument directly.
We share with Wayl only the information needed to complete a payment — such as the amount, currency, your subscription reference, and your contact email. Wayl returns to us a confirmation of the result (success or failure) and a transaction reference, but not your full card data.
Wayl processes your payment information under its own privacy terms. We encourage you to review Wayl’s privacy policy for details on how it handles cardholder data.
05 Data security
We apply technical and organizational measures to protect your data, including encryption in transit (HTTPS), isolated per-business data, role-based access controls, and a full audit trail of activity. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.
06 Data retention
We keep your account and business data for as long as your account is active. After you close your account, we retain certain records as required for legal, tax, and accounting purposes, after which they are deleted or anonymized.
07 Your rights
Subject to applicable law, you may:
- Access the personal information we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data, subject to legal retention requirements.
- Export your business records from within the system.
- Withdraw consent to marketing communications at any time.
To exercise any of these rights, contact us using the details in section 11.
09 Children
Sarrafi is a business tool and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.
10 Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes will be communicated through the system or by email.
11 Contact us
If you have questions about this Privacy Policy or how we handle your data, contact us: