PRIVACY NOTICE · DRAFT FOR REVIEW · 7 NOVEMBER 2026

How applications are handled

Iran Forward uses application information to assess eligibility, review professional experience and ideas, and suggest possible co-founder or investor matches. Applications are visible only to the platform administrator. They are not automatically shared with other applicants or investors.

Information collected

Applicant information includes contact and location details, professional background, LinkedIn profile link, business ideas, skills and matching preferences, venture stage, optional funding need, chosen heritage-verification approach, mission pledge and consent records, plus a compulsory CV for founders and collaborators. Investor applications include firm/contact details, a required website and LinkedIn profile or firm page, investment mandate and an optional pitch presentation. CVs may contain personal information; do not include passport numbers or other unnecessary sensitive details.

Sensitive information and consent

Heritage information may reveal ethnic origin, and the mission pledge may reveal political opinions. These are sensitive categories of personal data. The form therefore asks for separate, explicit consent to process this information for the purposes above. You can withdraw consent by contacting the platform. Withdrawal does not affect processing that took place before withdrawal.

Storage, access and retention

Application records are stored in a private database and uploaded documents in private object storage; they are accessible only to the platform administrator through authenticated review tools. CVs are required for founders and collaborators; investor presentations are optional. Records and files are set to expire 12 months after submission and are removed when the application service next processes a request. They may be kept longer if a legal obligation requires it. Matching scores are recommendations for human review and do not automatically decide eligibility or make introductions. Investor details are added to the matching directory only after review and approval.

Your choices

You may request access to, correction of, or deletion of your application, and withdraw consent. Use the application reference displayed after submission when contacting the platform administrator. The platform contact details and legal controller identity must be completed before this notice is treated as final.

This notice is a publication draft. The platform operator must add the responsible legal entity/name, contact email and any applicable representative details, confirm retention and deletion operations, and review the lawful basis and safeguards before relying on it as a final GDPR notice.