Privacy Policy

1. Who is responsible for the information

The controller of the information (the database owner) is קופהלי פתרונות תוכנה בע״מ ("Kupali Software Solutions Ltd."), Israeli company no. 517400875, the operator of the BiziBiz site. Every privacy request — access, correction, deletion or a complaint — is handled at the address at the bottom of this page.

This policy covers bizibiz.co.il and the services on it. It does not cover external sites linked from it, each of which has its own policy.

2. What is collected

Most browsing requires no information at all. Personal information is collected when you choose to provide it — registering, posting a listing, contacting a poster — and, to a limited technical extent, as set out below.

We run no analytics tool, no advertising pixel and no third-party tracker on this site, and we do not build behavioural profiles of visitors.

3. What the information is used for

• Running the service: posting listings, search, saved items and messaging between users.
• Identifying you and keeping your account secure.
• Automated checking of listings before publication, human review of a listing the check stopped or that was reported, handling reports, and preventing fraud, spam and impersonation.
• Answering your enquiries and recording the consent you gave to our policies.
• Meeting legal obligations and responding to lawful requests from authorities.
• Improving the site on the basis of aggregated, non-identifying information.

We send marketing email only to people who gave separate, explicit consent, and every such message carries an unsubscribe option. Marketing consent is stored separately from consent to the terms.

4. What is public

A published listing is by its nature public: the title, description, photos, category, area and the contact details you chose to reveal are visible to every visitor and may appear in search engines. Do not put anything in a listing that you do not want to be public — ID numbers, bank details, personal documents or photographs in which people are identifiable.

Before publication, listing text, images, attachments and content read from linked pages are sent to Anthropic’s AI service for review against the terms. Account details are not sent as separate fields, but personal information you include in the content, files or linked pages may be included. A failed listing is returned for editing; a review error may hold publication for our team to check.

Every listing, article, guide and grant page carries share buttons. Sharing passes on a link and nothing more; the network or messaging app you shared to then fetches the page itself and builds a preview from it — the title, the summary and the first photograph. So the public information on the page may also appear there. We send them nothing beyond that, and the share buttons load no social-network code and report to nobody who viewed the page.

Messages between users are not public. They are available to the two participants, and to our team only when investigating a complaint or a suspected breach.

Your account email is not automatically shown to other users. Email addresses or contact details you put in listing content or choose to reveal are visible as part of that publication.

5. Providers that process information for us

We use hosting, storage, email and content-review providers to run the service. Each provider’s processing and retention are subject to the agreement and policy applicable to that service. Google sign-in and OpenStreetMap maps may also involve processing under their own privacy policies. These services are integrated with the site:

Some providers operate servers outside Israel, including in the United States and the European Union. Transfers to them are made in order to run the service and subject to those providers' data-protection undertakings.

Beyond that, personal information is disclosed to a third party only with your consent, where required by law or court order, or where necessary to protect our rights or the safety of users.

6. Market-data sources

The markets pages read data from the Bank of Israel and the European Central Bank reference rate (via Frankfurter). Data requests go out from our server and ask for data series only.

No visitor information is sent to any of them — no IP address, no account id and nothing about what you viewed. They do not know you were here.

7. How long information is kept

We keep personal information for as long as it is needed for the purpose it was collected for, and afterwards for the period the law requires or permits. In practice:

• Account information — while the account is active. You can request closure by email. An account marked deleted becomes eligible for deletion from the active database after 30 days, together with its profile, contact details, consent records and correspondence. Accounts that still own listings that have not been removed are held until those listings are removed or transferred.
• Listings — while published. A removed listing is kept for 90 days so that a complaint can be investigated or an accidental removal reversed, and is then deleted along with its photographs in file storage.
• Photographs removed from a listing — the image is hidden from the listing and storage deletion is requested on removal. If file deletion fails, the retention job retries after 90 days; its record is removed after storage deletion succeeds.
• Messages between users — while both participants hold an active account; deleting an account deletes its correspondence.
• Consent records — while the account exists, as evidence of what was agreed and when.
• Sign-in tokens and active sessions — deleted automatically once they expire.

An automated deletion job is scheduled once a day. Eligible records are deleted in a subsequent run; provider errors or a backlog can delay deletion and require retries. These periods apply to our active systems. Provider backups and infrastructure logs follow their service retention periods and are not necessarily erased at the same time.

Administrative and moderation logs are currently kept indefinitely and protected against changes and deletion through ordinary application operations. They may contain personal information: IP addresses, browser details, names, email addresses and content recorded with an action. Deleting an account detaches its user reference but does not guarantee erasure of details inside a log or make it anonymous. Requests concerning this information are assessed under applicable law and the need to retain it.

Content that has been published publicly may remain in search-engine caches or web archives after it is removed from the site. That is outside our control.

8. Your rights

The Protection of Privacy Law, 5741-1981, including Amendment 13, provides rights of access and correction subject to statutory conditions and exceptions. You may send us the following requests; entitlement to deletion or cessation of processing depends on the circumstances and applicable law:

• Access — to know what information about you we hold and to receive a copy of it.
• Correction — to have information corrected where it is inaccurate, incomplete, unclear or out of date.
• Deletion — to have information deleted where there is no longer a basis for holding it, subject to statutory retention duties.
• To be told the source of the information and to whom it has been disclosed.
• To withdraw consent you gave, including marketing consent, at any time, without affecting the lawfulness of use before withdrawal.
• To lodge a complaint with the Israeli Privacy Protection Authority.

Rights are exercised by writing to the address at the bottom of this page. To protect your information we verify who is asking — usually by confirmation from the email address registered on the account. We reply within the period set by law; if we refuse a request, we explain why.

We do not sell personal information, do not trade in it, and do not pass it to advertisers.

9. Security

Traffic to the site is encrypted (HTTPS). Authorisation is enforced server-side, database access is restricted, administrative actions are written to an append-only audit log, and we store no passwords — sign-in is by one-time email link or through a Google account.

No system is completely secure. If a security incident occurs that could affect you, we will act on our statutory notification duties and inform those concerned.

10. Children

Accounts are available from age 16. Users aged 16–17 need a parent’s or guardian’s consent to use the service and for any action requiring consent under applicable law. We do not knowingly collect information from children under 16. Parents and guardians can contact us to investigate and request removal, subject to legal retention duties.

11. Cookies

The site uses a small number of operational cookies only — sign-in, form security and language preference. There are no advertising or measurement cookies.

• Full cookie policy

12. Changes to this policy

We will update this policy when needed. The version number and effective date are always shown at the top of the page. For a substantive change, registered users are asked to accept the new version.

13. Contact

To request access, correction or deletion, and for any privacy question: info@bizibiz.co.il