Privacy Policy

Last Updated: September 30, 2025

1. THIS PRIVACY POLICY

1.1 Our Commitment to Privacy

Tian Tasty Homemade Inc., operating as “Iranyo”, and its representatives, subsidiaries and affiliates (collectively, “Iranyo”, “we”, “us” or “our”), are committed to protecting your privacy. This Privacy Policy (as updated from time to time, this “Privacy Policy”) has been designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable federal and provincial privacy laws relating to the protection of personal information (collectively, “Privacy Laws”). This Privacy Policy forms part of, and is hereby expressly incorporated into, our Terms of Service (the “Agreement”).

1.2 Scope

In this Privacy Policy, we explain how we collect, use, disclose and protect the personal information of our Users (as defined below).

You are a “User” if you are an individual and you access our website located at [https://www.iranyo.com] or related links (collectively, the “Site”), Third-party message provider function, feature, application, product or service made available by us, or register an account with us (collectively, the “Service”).

Your “personal information” means any information about you as defined in applicable Privacy Laws and includes information such as your full name, address, postal code, email address and geographic location. It may also include information on how you use the Service. It does not include business contact information or certain publicly available information.

1.3 Updates

We may modify this Privacy Policy at any time for any reason, effective upon posting an updated version through the Service, and indicating at the top of this page the date these terms were last revised. If the modifications are significant, we will use commercially reasonable efforts to provide you with prior notice via email or other reasonable means. You should regularly review this Privacy Policy, as your continued use of the Service after the date on which an updated version becomes effective constitutes your acceptance of the updated Privacy Policy. In the event that you do not accept the updated Privacy Policy, your sole and exclusive remedy is to cease your access and use of the Service.

1. COLLECTION

We may collect personal information when you provide it to us, including by way of your interaction with us and your access and use of our Service. We try to minimize the collection of personal information to only what is reasonable and necessary to provide our Service and to develop, assess and improve our Service. We only collect personal information if non-identifying information is not sufficient for this purpose.

We may collect the following categories of personal information about you:

• Identifiers, which may include your name, address, email address, telephone number, social media ID, user ID, username or screen name, password, IP address or MAC address.
• Commercial information, which may include payment, banking or other financial information, including commission and payout records.
• Internet or network activity, which may include your operating system type and version, web server type and version, PHP version, database type and version, cookie information, device information, browsing information, browsing activities, platform use data, referring domain, destination domain, destination path, performance, security, software configuration, website user statistics, viewing activity and communication preferences.
• Mobile device information, which may include your mobile phone number, mobile country code, unique device identifier, mobile advertising identifier, information about your mobile device screen size, date and time of mobile device use and other mobile device-related information.
• Geolocation information, which may include geographical information derived from your IP address, MAC address or device GPS.
• Audio, visual or electronic information, which may include screen sharing views or any data contained in files uploaded, emailed or otherwise provided by you.
• Information from third parties (where you have authorized it).
• Other information, which may include the contents of your communications with us, whether through email, social media, telephone or otherwise, and inferences we may make from other personal information we collect.

1. USE AND DISCLOSURE

3.1 Purposes of Use and Disclosure

We may use or disclose the personal information we collect about you for the following purposes:

1. To verify your identity.
2. To contact you or your designated representatives.
3. To manage the administration of your account.
4. To provide you with our Service.
5. To maintain and improve our Service.
6. To develop new services.
7. To advertise, market and promote our Service.
8. To identify new users or customers.
9. To measure our performance.
10. To tailor the content and advertising on our Site and other services.
11. To manage your preferences.
12. To provide a more personalized user experience.
13. To monitor your compliance with any of your agreements with us.
14. To satisfy our legal, regulatory, custodial and tax reporting requirements.
15. To establish our legal rights or defend against legal claims.
16. To protect you, us and others from fraud and error and to safeguard our business interests.
17. To collect debts owed to us.
18. To manage or transfer our assets or liabilities, which may include in the event of an acquisition, disposition, merger, amalgamation or other business transition or transaction.
19. For any other purpose which we disclose to you from time to time.

If we ever wish to use or disclose the personal information we collect about you for a purpose not previously identified, the new purpose will be disclosed to you prior to such use or disclosure and your consent to such use or disclosure will be sought (unless such use or disclosure is required or authorized by law). To clarify liability: Iranyo does not provide liability insurance to Sellers; Sellers are solely responsible for their own compliance, safety, and insurance coverage.

3.2 Third Party Use and Disclosure

To the extent permitted by applicable law, we may disclose the personal information we collect about you to the following third parties:

• Our affiliates, agents, or business partners.
• Our service providers, including third-party payment processors, third-party delivery service providers, website hosting providers, accounting firms, legal counsel, tax advisors, consulting firms, professional advisors, survey providers, market research firms, data analytics providers, reporting service providers, and marketing agencies.
• A purchaser, investor, new affiliate, or other successor in the event that we or any affiliate, portion, group, or business unit undergoes an acquisition, disposition, merger, amalgamation, or other business transition or transaction.
• Legal, governmental, regulatory, tax, or judicial authorities (“Authorities”) to comply with any law, directive, judicial or administrative order, legal process, investigation, warrant, subpoena, government request, regulatory request, law enforcement, or as otherwise required or authorized by law or such Authorities.
• Other third parties, including (a) those to whom you have authorized us to disclose your personal information, (b) to investigate, prevent, or take action regarding suspected illegal activities, fraud, or violations of the Agreement, (c) to protect the safety or security of persons or property, and (d) where we believe it is reasonable and necessary for the purposes set out in this Privacy Policy.

Whenever we disclose personal information to third parties, we try to minimize the disclosure to only what is reasonable and necessary. We also require, by contractual means, that the third party maintain and protect the confidentiality of the disclosed personal information to the same degree as if it were in our possession.

At times, Tian Tasty Homemade Inc., operating as “Iranyo”, may transfer your personal information outside of Canada, including to trusted third-party service providers who may perform services on our behalf. Your information may be processed or stored in jurisdictions outside of Canada, and as a result, may be subject to the laws of those jurisdictions, which may differ from Canadian laws. We require, through contractual agreements, that any such third parties maintain the same level of privacy and security protections as we do in Canada, and that they use your personal information only for the purposes for which it was provided.

Cross-Border Disclosure: Your personal information may also be processed in jurisdictions outside Canada, including the United States. Such information may be subject to access by foreign courts, law enforcement, and national security authorities. We implement contractual and organizational measures requiring comparable protection to Canadian standards; however, we cannot guarantee that foreign laws will afford the same level of protection.

1. CONSENT

4.1 Obtaining Consent

We will not collect, use, or disclose your personal information without first obtaining your consent (except where required or authorized by law). Your consent can be express, implied, or given through an authorized representative, such as a lawyer, agent, or broker. Explicit consent is required for SMS text notifications. Customers may unsubscribe at any time by replying STOP. All SMS notifications are sent in compliance with Canada’s Anti-Spam Legislation (CASL) and Third-party message provider/carrier requirements.

By accessing or using our Site or Service or voluntarily providing your personal information to us, you are consenting to the collection, use, and disclosure of your personal information in accordance with this Privacy Policy.

4.2 Withdrawing Consent

You may withdraw all or part of your consent for us to collect, use, or disclose your personal information in accordance with this Privacy Policy at any time upon reasonable notice to us in writing, subject to legal, contractual, or other restrictions. We do not share, sell, rent, or disclose mobile phone numbers to third parties or affiliates for marketing or promotional purposes. You may also withdraw all or part of your consent to receive promotional emails from us by following the opt-out instructions provided in such emails. If you opt out, we may still send you non-promotional emails, such as messages about your account or our ongoing business relations.

4.3 SMS Notifications

Iranyo may send SMS notifications related to order confirmations, updates, and account information only to users who have explicitly opted in by selecting the consent checkbox during checkout or registration. SMS messages will not be sent to users who have not provided explicit consent. Users may withdraw their consent to receive SMS notifications at any time by replying “STOP” to any SMS message from Iranyo or by updating their preferences in their account settings. Upon opting out, no further SMS notifications will be sent.

1. PROTECTION

5.1 Accuracy

We try to ensure that the personal information we collect about you is accurate, complete, and up to date. In some cases, we rely on you to ensure that certain personal information, such as your address or telephone number, is accurate, complete, and up to date. Users are requested to notify us as soon as possible of any changes, deletions, or corrections to their personal information so that we may keep such information up to date.

5.2 Accessibility

With certain limited exceptions as provided under applicable Privacy Laws, you have the right to access your personal information held by us and to request that the information be corrected if it is inaccurate, incomplete, or collected in violation of law. You may update or correct information about yourself by contacting us in accordance with Section 7. Please note that we may be unable to provide you with full access to your personal information if we are prohibited by law or regulatory reasons to do so, or if the information has been securely destroyed in accordance with our practices. Subject to legal or contractual restrictions, we will provide you with an explanation if we are unable to fulfill your access request.  In accordance with applicable law, we must take steps to verify your identity before fulfilling any of the above requests. If you maintain an account with us, we may verify your identity through existing authentication practices for the account, such as your username and password. We may also verify your identity by matching two or three data points of identifying information about you.

5.3 Safeguards

We maintain physical, electronic, and procedural safeguards consistent with regulatory standards to protect the personal information in our custody or control. These measures include, but are not limited to, access security controls, safeguards to detect and prevent system failures, restricted access to authorized personnel, and ongoing employee training on privacy and security practices.

In addition, we implement enhanced protections, including:

• Periodic risk assessments to identify, evaluate, and address potential privacy and security vulnerabilities in our systems and processes.
• Encryption of personal information during transmission over networks and, where feasible, while stored (“at rest”) in our systems.
• Breach Notification: In the event of a privacy breach under Applicable Privacy Laws, we will promptly assess the risk of significant harm and, where required, notify affected individuals and the Office of the Privacy Commissioner of Canada and/or applicable provincial regulators.

We also take reasonable steps, through contractual or other means, to ensure that any third parties assisting us in providing products or services maintain a comparable level of personal information protection.

While we take all reasonable measures to safeguard personal information, complete and permanent confidentiality and security cannot be guaranteed when information is transmitted electronically.

You can also play an important role in protecting your personal information. For example, you should:

• Create a strong and unique password for your user accounts.
• Never share your user accounts or passwords with anyone (note that we will never ask you for your password, including in any unsolicited communication).
• Log out of your user account each time you are finished using it, especially if you share your device with others.
• Use a strong and unique password on your device.
• Never post information on our Site that you do not want to be viewed or used by others.

5.4 Retention and Disposal

We retain personal information in accordance with our documented records retention program. This means we keep the information only as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by law or is needed to resolve disputes or protect our legal rights.
By way of example:
(a) Transactional and tax records: retained for seven (7) years from the end of the relevant fiscal year to comply with Canadian tax laws.
(b) Support communications (e.g., customer service tickets): retained for two (2) years from the date the ticket is closed.
(c) Security logs: retained for twelve (12) months to assist with security monitoring and investigations.
After the applicable retention period expires, personal information is securely destroyed or anonymized in a manner appropriate to its sensitivity.
Upon account closure, we apply the same retention schedule above and securely delete or anonymize personal information once all legal, regulatory, and operational obligations are satisfied.

1. OTHER DATA PRACTICES

6.1 Cookies and Similar Technologies

We may use cookies and similar technologies to measure web activity and provide you with a better user experience on our Site and during the course of providing our Services. A “cookie” is a unique numeric code that we transfer to your device so that we can keep track of your interests and preferences and recognize you as a returning visitor to the Site and Service. If you choose not to accept cookies from us, you will still be able to access many of the features on our Site and Service, but with certain limitations to access and functionality.

6.2 Aggregated and Anonymized Personal Information

To the extent permitted by applicable law, we may use, process, transfer, and store data about Users or partners in an anonymous or pseudonymous manner. We may also aggregate statistics that we gather about our Users, sales, usage data, and products and services. We may combine such anonymized and/or aggregated personal information with other information collected, including from third parties. With your consent or as permitted by applicable law, we may use such anonymized and/or aggregated personal information in ways and for purposes not previously identified in this Privacy Policy, including for benchmarking, analytics, research, reporting, machine learning, and other business purposes.

6.3 Children

Our Service is not targeted or directed at children under the age of 13 (or under the age of 16 in jurisdictions where a higher age threshold applies under Applicable Privacy Laws), and we do not intend to, or knowingly, collect or solicit personal information from children under the applicable minimum age. If you have reason to believe that a child under the applicable minimum age has provided personal information to us, we encourage the child’s parent or guardian to contact us in accordance with Section 7 to request that we remove the information from our systems. If we learn that any personal information we collected has been provided by a child under the applicable minimum age, we will promptly delete that personal information.

6.4 External Websites

Our Service may provide URL links to other websites, mobile applications, resources, or Internet locations which we do not have control over (“External Websites”). Such links do not constitute an endorsement by us of those External Websites. We have no control over and are not responsible for External Websites, their content, or any goods or services offered or made available on them. Your access to or use of any External Website is subject to the terms of use and privacy policy of that External Website.

6.5 Disclaimer to Complete Security

By accepting this Privacy Policy, you acknowledge and agree that no data transmission over the Internet is completely secure. We cannot guarantee or warrant the security of any information you provide to us, and you transmit such information to us at your own risk.

6.6 Disclaimer on Insurance

Iranyo is a technology platform only and does not provide liability insurance for Cooks or Customers. All food-related liability, including compliance with licensing, health, and safety requirements, rests solely with the independent Cooks.

1. CONTACT US

7.1 Contact Us

If you have any questions about this Agreement, the Service, or if you wish to report a violation, you may contact us using the information below:

Iranyo (operated by Tian Tasty Homemade Inc.)
Ontario, Canada
Customer Support: contact@iranyo.com
Legal Inquiries: contact@iranyo.com

Inquiries or complaints will be dealt with promptly. We will acknowledge your query, investigate it, and provide you with a response within 30 days.

7.2 File a Complaint

If you believe the Privacy Laws relating to the protection of your personal information or this Privacy Policy have not been respected, you may file a complaint with us. We will acknowledge your complaint, investigate it, and provide you with a response within 30 days. If, after an investigation, your complaint is deemed justified, we will take appropriate steps to correct the situation, including, if necessary, amending our policies and practices. If you are not satisfied with the results of the investigation or the corrective measures taken by us, you may exercise the remedies available to you under law by contacting the Office of the Privacy Commissioner of Canada at the address below:

Address:
Office of the Privacy Commissioner of Canada
30 Victoria Street
Gatineau, Québec K1A 1H3
Canada