Privacy Policy

1. Introduction

Beita is committed to protecting your privacy and the privacy of community members whose data is managed on the platform. This policy details what data we collect, how we use it, and what rights you have regarding it. We operate in accordance with the Israeli Privacy Protection Law, 5741-1981, and its Amendment 13, as well as the European General Data Protection Regulation (GDPR) to the extent it applies to customers outside Israel. Continued use of the service constitutes consent to the collection and processing of information as detailed here.

2. What information we collect

Information you provide directly: When registering for and using the service, we collect your full name, email address, phone number, synagogue name and details, your role in the organization, and payment information (transferred directly to the payment provider — we do not store credit card details).

Automatic information: While browsing, we collect your IP address (encrypted), browser type and operating system, pages visited and time spent browsing, and usage data for system features. This data is also collected through cookies and Firebase Analytics.

Information about community members: The gabbai or synagogue administrator may enter member names, memorial (yahrzeit) dates, addresses, phone numbers, and additional information into the platform for community-management purposes. This information remains the subscriber's responsibility, and Beita acts solely as a data processor.

3. How we use the information

We use the information we collect for the following purposes: operating the service and providing access to platform features; providing technical support and responding to inquiries; processing payments and managing the subscription account; improving and developing the system based on anonymized usage data; sending essential service messages and critical product updates (these cannot be opted out of); and sending newsletters and marketing updates — only if you have given explicit consent (which can be withdrawn at any time).

4. Sharing information

Beita does not sell, rent, or share personal information with third parties for commercial purposes. Your data may be processed by the following trusted infrastructure providers and partners, subject to data processing agreements (DPAs) between us:

• Google Cloud / Firebase — storage, database, authentication, analytics
• Resend — sending email messages
• OpenRouter and Anthropic (Claude) — AI services (anonymized queries only; OpenRouter acts as a router to model providers, including direct calls to Anthropic)
• A licensed SMS provider — sending text messages to community members

We may disclose information where required by law, by court order, or to protect the rights of Beita and its customers.

5. Storage and security

All data is stored on Google Cloud Platform (GCP) servers, which are certified to ISO 27001, SOC 2, and PCI DSS. All traffic between your browser and our servers is encrypted using TLS 1.3. Sensitive data is also encrypted at rest using AES-256. Automatic backups are performed daily and retained for 30 days. Access to data is restricted to Beita employees who need it for their job duties only.

6. Data retention

We retain your personal information for as long as your account is active and for relevant billing purposes. After a subscription is cancelled, data is retained for an additional 90 days to allow for a restoration request — after which it is permanently deleted from production systems. At your explicit request, the deletion process can be expedited. Anonymized and aggregated data may be retained indefinitely for statistical purposes.

7. Your rights

In accordance with the Privacy Protection Law and its Amendment 13, and under the GDPR where applicable, you have the following rights:

• Right of access — to receive a copy of the personal information held about you
• Right of rectification — to request correction of inaccurate or incorrect information
• Right to erasure ("the right to be forgotten") — to request deletion of your personal information, subject to legal limitations
• Right to data portability — to receive your information in a structured, machine-readable format
• Right to restrict processing — to request a temporary restriction on the processing of your information
• Right to object — to object to processing for direct-marketing purposes
• Right to lodge a complaint — to contact the Israeli Privacy Protection Authority (PPA) regarding any matter

To exercise any of these rights, contact us at info@beita.co.il. We will respond within 30 days.

8. Cookies

Beita uses three types of cookies: Essential — required to operate the platform and cannot be disabled; Analytics — Firebase Analytics, which help us improve the service; Functional — save your preferences (language, layout, settings). You can manage your cookie settings in your browser at any time, though blocking essential cookies may impair functionality. We do not use third-party marketing cookies.

9. Minors

The Beita service is not intended for children under the age of 13, and we do not knowingly collect personal information about children. If we become aware that we have collected information about a child under 13 without parental consent, we will act to delete it promptly. Data about community members and family members entered by the gabbai (such as children's birthdays for management purposes) remains the subscriber's responsibility and should be treated accordingly.

10. Changes to this policy

Beita may update this privacy policy from time to time to reflect changes in the service, the law, or security practices. We will notify you of material changes by email at least 30 days before they take effect. The current version of this policy is always available on this page, together with the date it was last updated. Continued use of the service after the effective date constitutes acceptance of the updated wording.

11. Contacting the Privacy Officer

For any question, request, or complaint regarding your personal data, please contact Beita's Data Protection Officer (DPO) at info@beita.co.il. You may also contact the Israeli Privacy Protection Authority directly at www.gov.il/he/departments/privacy_protection_authority.