Privacy Policy

Operator and Contact

The service operator is Yahalom Zaks. Privacy, access, correction, or deletion requests may be sent to support@maasroti.com.

Information We Process

The system may store account details, email address, name, language and currency preferences, income data, donation data, reminders, settings, feedback, basic usage data, login and activity logs, and RabAI conversations.

Your information is kept private and secure, and is not visible to other users.

Purposes

Information is used to operate the service, maintain accounts, calculate maaser, send reminders, provide support, protect security, prevent abuse, fix issues, and improve the service.

Service improvement uses aggregated or de-identified data by default unless a focused review is needed for support, security, or troubleshooting.

Limited Authorized Access

Personal information access is limited to the site operator and authorized suppliers only where needed for operation, security, support, or service improvement.

The site operator or authorized persons may access RabAI conversations where needed for limited purposes. Every admin access to RabAI conversations is logged.

Providers

Providers that may process or store information include Vercel for hosting and infrastructure, MongoDB Atlas for the database, OpenRouter and external model operators for RabAI, Google OAuth for authentication, Brevo for email, Vercel Speed Insights if active, cdnjs if active, Frankfurter for exchange rates, and an SMTP provider if configured for system email.

These providers may operate outside Israel, so information may be transferred to or processed outside Israel as needed to provide the service.

RabAI and AI Providers

When RabAI is used, the question, relevant account context, and model answer may be sent to OpenRouter and external model operators. Do not submit passwords, tokens, or confidential information not needed for the question.

User Rights

You may contact support@maasroti.com to request access, correction, deletion, or ask a privacy question. Requests will be handled within a reasonable time and according to applicable law.

Account deletion includes immediate deactivation, a 30-day waiting period during which deletion can be cancelled, and then deletion or minimization of personal data except minimized mandatory records.

Retention

RabAI conversations are retained for up to 90 days, activity and login logs for up to 12 months, backups according to provider policy for up to 30 days, and consent records for up to 7 years after account deletion.

Security

We use reasonable safeguards such as user authentication, limited admin permissions, logs for sensitive actions, established infrastructure providers, and separation between users' data.

No security is absolute. Suspected security issues can be reported to the support address.