Privacy Policy

We strictly practice data minimization, limiting collection to explicit institutional operational needs:

• Institutional Contact Data: Full name, official enterprise/governmental email, position, and corporate entity.
• Technical Infrastructure Telemetry: Cryptographically hashed IP addresses, browser user-agent, and timestamps strictly for perimeter security auditing.
• Operational & Customs Documents: Manifests, declarations, and files deliberately submitted for statutory processing.
• Zero third-party advertising, tracking cookies, or commercial behavioral profiling.

All collected operational data is utilized solely for authorized institutional objectives:

• Authentication of institutional operators and execution of certified platform transactions.
• Zero-Trust boundary validation and national infrastructure cybersecurity defense.
• Statutory regulatory coordination with official ministries and port authorities.
• Continuous system performance optimization without commercial resale or monetization.

We enforce definitive operational retention schedules aligned with national archival regulations:

• Transient Access Logs: Automatically pruned after 30 days unless subject to active security forensics.
• Inquiry & Communications Submissions: Maintained strictly for the lifecycle of the resolution workflow.
• Statutory Records: Retained in accordance with Iraqi national auditing and customs statutory mandates.
• Universal AES-256 encryption at rest and TLS 1.3 in transit across all endpoints.

Operating entities retain the following sovereign rights regarding their submitted data:

• Right of Access: Request a verified transcript of institutional records held on file.
• Right of Rectification: Prompt correction of inaccurate or incomplete documentation.
• Right of Erasure: Deletion of records not subject to mandatory statutory retention laws.
• Right to Formal Inquiry via IDG legal compliance governance channels.