02175424
Contact us
02175424
Contact us
logotype

CERP smart cloud software

Privacy Policy
HomePrivacy Policy

Privacy Policy

Last updated: 16 October 2026

This Privacy Policy explains how Yasna System Pasargad (“we”, “us”), the company that provides CERP, collects, uses and protects information when you use the cerp.ir website, the CERP cloud service and apps, and the CERP connector for AI assistants such as ChatGPT (together, the “Services”).

1. Who we are

CERP is provided by Yasna System Pasargad, 3rd floor, No. 16, corner of Kazemian St., East Roudbar, Mirdamad, Tehran, Iran. Email: info@cerp.ir. Phone: +98 21 75424.

2. Information we collect

  • Website forms. When you book a demo, subscribe or contact us, we collect the details you enter: name, mobile number, email address, business name, business type and any notes.
  • Account information. When your organisation uses CERP, we hold the details of its users, such as names, usernames, contact details and roles.
  • Business data. The data your organisation records in CERP, such as products, prices, stock, sales, invoices, purchasing and accounting documents, customer club records, reports and employee information. We process this data on behalf of your organisation, which decides what is recorded and who can access it.
  • Technical information. IP address, browser or client type, device information, request times, pages or endpoints requested and response status, which our servers record to operate and secure the Services.
  • Cookies. The website uses cookies needed for it to work, for example to remember your language and to protect forms against abuse.

3. The CERP connector for ChatGPT and other AI assistants

The CERP connector lets an AI assistant read and, where permitted, update your organisation’s CERP data through the Model Context Protocol (MCP). It works as follows:

  • An administrator of your organisation creates a connector in CERP and chooses its scopes (for example reading products or reports, or changing prices). The connector can never do more than these scopes allow, and the administrator can change or revoke it at any time.
  • When you connect CERP in ChatGPT, you sign in on a CERP authorisation page with your organisation name and the connector’s Client ID and Client Secret. We then issue ChatGPT an access token valid for one hour and a refresh token valid for up to 60 days. Tokens stop working as soon as the connector is deactivated.
  • When you ask the assistant something that needs CERP, it sends a request for a specific tool (such as searching items or running a report). We return only the data that tool needs, within the connector’s scopes, and record the request’s technical details listed in section 2 so we can operate and secure the service. We do not record your connector secret or tokens in these logs.
  • Information returned to the assistant becomes part of your conversation with that assistant and is handled by its provider under its own privacy policy. For ChatGPT, see OpenAI’s privacy policy.
  • We do not sell data obtained through the connector, use it for advertising, or use it to train AI models.

4. How we use information

  • To provide, maintain and support the Services, including the connector.
  • To respond to demo requests, enquiries and support requests, and to send updates you subscribed to.
  • To secure the Services, prevent abuse and investigate incidents.
  • To meet legal, tax and accounting obligations.

5. Sharing

We do not sell personal information. We share it only:

  • With service providers that host or help run the Services (such as hosting, email and SMS providers), under obligations to protect it.
  • With services your organisation chooses to connect, such as messaging services, online stores, the national e-invoicing system or an AI assistant, and only as needed for that connection.
  • When required by law or to protect the rights, safety and security of our users and the Services.

6. Retention

We keep business data for as long as your organisation’s subscription is active and then return or delete it as agreed in its contract, unless the law requires us to keep it longer. We keep website enquiries and technical logs only as long as needed for the purposes above.

7. Security

We use access controls, encrypted connections (HTTPS), hashed connector secrets, short-lived signed tokens and separation of each organisation’s data. No system is completely secure, so please keep your passwords and connector secrets confidential and revoke any connector you no longer use.

8. Your choices and rights

You can ask us to access, correct or delete your personal information, or to stop sending you updates, by writing to info@cerp.ir. If your information is held in CERP by an organisation that uses our service, please contact that organisation first; we will help it respond. You can disconnect CERP from ChatGPT at any time in ChatGPT’s settings, and your administrator can revoke the connector in CERP.

9. Children

The Services are designed for businesses and are not directed to children under 18.

10. Changes

We may update this policy. We will post the new version on this page with a new date and, for significant changes, notify customers.

11. Contact

Questions about privacy: info@cerp.ir, or Yasna System Pasargad, 3rd floor, No. 16, corner of Kazemian St., East Roudbar, Mirdamad, Tehran, Iran.