Privacy Policy
This policy explains what personal information BiziBiz collects, what is done with it, and the rights you have under the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13. This is a translation of the Hebrew text; in any discrepancy, the Hebrew version prevails.
- Version
- Effective from
1. Who is responsible for the information
The controller of the information (the database owner) is the operator of the BiziBiz site. Every privacy request — access, correction, deletion or a complaint — is handled at the address at the bottom of this page.
This policy covers bizibiz.co.il and the services on it. It does not cover external sites linked from it, each of which has its own policy.
2. What is collected
Most browsing requires no information at all. Personal information is collected when you choose to provide it — registering, posting a listing, contacting a poster — and, to a limited technical extent, as set out below.
| Information | When it is collected | Why |
|---|---|---|
| Email address | On registration and sign-in | Identifying the account, sending a sign-in link, service messages |
| Name and profile picture | On registration, or from your Google account if you sign in that way | Showing the poster's name and addressing you by name |
| Phone and other contact details | When you add them to a listing | Letting an interested buyer reach the poster, at the visibility level you chose |
| Listing content and photos | When you post | Displaying the listing on the site and in search results |
| Messages between users | When you message about a listing | Delivering the message, handling complaints and preventing harassment |
| Consent record | When you accept the terms and the privacy policy | Proof of which version you agreed to and when. It stores the user id, the document, the version and the date — no IP address and no browser type |
| Administrative audit log | On moderation and content-management actions | Audit and security. Includes the IP address and browser of the person who acted |
| Technical server logs | On every request, at our infrastructure providers | Operations, stability and security. Include IP address, browser, page address and request time |
We run no analytics tool, no advertising pixel and no third-party tracker on this site, and we do not build behavioural profiles of visitors.
3. What the information is used for
- Running the service: posting listings, search, saved items and messaging between users.
- Identifying you and keeping your account secure.
- Human review of listings before publication, handling reports, and preventing fraud, spam and impersonation.
- Answering your enquiries and recording the consent you gave to our policies.
- Meeting legal obligations and responding to lawful requests from authorities.
- Improving the site on the basis of aggregated, non-identifying information.
We send marketing email only to people who gave separate, explicit consent, and every such message carries an unsubscribe option. Marketing consent is stored separately from consent to the terms.
4. What is public
A published listing is by its nature public: the title, description, photos, category, area and the contact details you chose to reveal are visible to every visitor and may appear in search engines. Do not put anything in a listing that you do not want to be public — ID numbers, bank details, personal documents or photographs in which people are identifiable.
Messages between users are not public. They are available to the two participants, and to our team only when investigating a complaint or a suspected breach.
Your email address is not shown to other users.
5. Providers that process information for us
We rely on infrastructure providers to run the service. They process information for us and on our instructions only, and may not use it for their own purposes. These are the providers actually in use:
| Provider | Role | What reaches them |
|---|---|---|
| Vercel | Hosting the site and running the code | Every request to the site, including IP address and server logs |
| Railway | Hosting the database | Everything stored in your account, listings and messages |
| Vercel Blob | Storing listing photos | The image files you upload |
| Resend | Sending service email and sign-in links | Your email address and the content of the message |
| Sign-in with a Google account (if you choose it) | The identity details Google passes to us: email address, name and picture |
Some providers operate servers outside Israel, including in the United States and the European Union. Transfers to them are made in order to run the service and subject to those providers' data-protection undertakings.
Beyond that, personal information is disclosed to a third party only with your consent, where required by law or court order, or where necessary to protect our rights or the safety of users.
6. Market-data sources
The markets pages read data from the Bank of Israel, CoinGecko, Alpaca and the European Central Bank reference rate (via Frankfurter). Those calls go out from our own server on a fixed schedule and ask for data series only.
No visitor information is sent to any of them — no IP address, no account id and nothing about what you viewed. They do not know you were here.
7. How long information is kept
We keep personal information for as long as it is needed for the purpose it was collected for, and afterwards for the period the law requires or permits. In practice:
- Account information — while the account is active. On closure it is marked deleted and removed from our systems at the end of the statutory retention window.
- Listings — while published, and for a short period after removal so that complaints can be investigated and an accidental removal reversed.
- Messages between users — while both participants hold an active account; deleting an account deletes its correspondence.
- Consent records — while the account exists, as evidence of what was agreed and when.
- Administrative audit logs and server logs — for a limited period, for audit and security.
Content that has been published publicly may remain in search-engine caches or web archives after it is removed from the site. That is outside our control.
8. Your rights
Under the Protection of Privacy Law, 5741-1981, including the extensions introduced by Amendment 13, you have the following rights:
- Access — to know what information about you we hold and to receive a copy of it.
- Correction — to have information corrected where it is inaccurate, incomplete, unclear or out of date.
- Deletion — to have information deleted where there is no longer a basis for holding it, subject to statutory retention duties.
- To be told the source of the information and to whom it has been disclosed.
- To withdraw consent you gave, including marketing consent, at any time, without affecting the lawfulness of use before withdrawal.
- To lodge a complaint with the Israeli Privacy Protection Authority.
Rights are exercised by writing to the address at the bottom of this page. To protect your information we verify who is asking — usually by confirmation from the email address registered on the account. We reply within the period set by law; if we refuse a request, we explain why.
We do not sell personal information, do not trade in it, and do not pass it to advertisers.
9. Security
Traffic to the site is encrypted (HTTPS). Authorisation is enforced server-side, database access is restricted, administrative actions are written to an append-only audit log, and we store no passwords — sign-in is by one-time email link or through a Google account.
No system is completely secure. If a security incident occurs that could affect you, we will act on our statutory notification duties and inform those concerned.
10. Children
The service is intended for adults and for people aged 16 and over. We do not knowingly collect information about children under 16. If it turns out that such information reached us, we will delete it. A parent or guardian who believes their child gave us information is welcome to contact us.
11. Cookies
The site uses a small number of operational cookies only — sign-in, form security and language preference. There are no advertising or measurement cookies.
12. Changes to this policy
We will update this policy when needed. The version number and effective date are always shown at the top of the page. For a substantive change, registered users are asked to accept the new version.
13. Contact
To request access, correction or deletion, and for any privacy question: info@bizibiz.co.il
BiziBiz legal documents
BiziBiz is free to use — no subscription, no commission and no charge for posting.