Privacy Policy

Last updated: August 31, 2026

Leadaster (“we”, “us”) takes your privacy seriously. This policy explains what information we collect, why, how it is stored and protected, and what rights you have — in accordance with the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13), the Privacy Protection (Data Security) Regulations 2017, and the privacy requirements of Apple, Google, Amazon Web Services and Google Cloud.

1. Scope

• Our website — leadaster.co.il, including its contact forms.
• Applications we own — mobile apps (iOS/Android), web applications and desktop software that we publish and operate ourselves, unless a dedicated policy is provided for a specific app.
• Development services — where we build or maintain a system for a business client, that client is the data controller and its own privacy policy governs its end users; we act solely as a processor on the client’s documented instructions under a data processing agreement.

2. Information we collect

On the website

• Inquiries you send — name, phone, email, company, project type, estimated budget and your message. Providing this information is voluntary, but without it we cannot respond.
• Server data — IP address, browser type, pages viewed and access times, recorded automatically in server logs for security and operations.
• The website does not run third-party advertising or analytics trackers.

In applications we operate

• Account details — name, email and/or phone, password (stored as a one-way salted hash), or federated sign-in (e.g. Sign in with Apple / Google).
• User content — data you create or upload in the app for its functionality.
• Usage and device data — device identifiers, OS version, crash reports and performance data, used to fix issues and improve the service.
• Device permissions — camera, microphone, location, contacts and similar permissions are requested only when required for a specific declared feature, are explained up front, and can be revoked at any time in your device settings.

3. How we use information

• Responding to inquiries and providing the services you requested;
• Creating, operating and securing user accounts;
• Processing payments and managing subscriptions;
• Complying with legal obligations, preventing fraud and enforcing our terms;
• Improving our services — using aggregated or de-identified data wherever possible.

We do not use personal information for purposes not listed here without a legal basis or your consent, and we do not send marketing communications without prior explicit consent, which you may withdraw at any time.

4. Apps — Apple and Google compliance

Applications we publish on the App Store and Google Play comply with the stores’ privacy programs, including:

• Transparency — Apple Privacy Nutrition Labels and Google Play Data safety declarations reflect each app’s actual data collection.
• Minimization — only data required for an app’s declared functionality is collected.
• Tracking — we do not track users across apps and websites owned by other companies without explicit consent via Apple’s App Tracking Transparency framework or an equivalent mechanism.
• Account creation and deletion — every app that supports account creation also supports full in-app account deletion, as described below.

5. Account & data deletion

You can also request deletion without signing in: email contact@leadaster.co.il from the address linked to your account (or with identifying details), and we will process the request within 30 days at most.

• After deletion, personal data is removed from production systems; backup copies expire within the regular backup cycle (up to 90 additional days).
• We may retain limited data after deletion where required by law (e.g. invoicing records), to resolve disputes or to enforce agreements — for the minimum period required.
• For apps we operate on behalf of a business client, deletion requests are forwarded to, or handled per the instructions of, the system owner, in accordance with applicable law.

6. Payments

• In-app purchases are processed by Apple (App Store) or Google (Google Play Billing). Your payment details go directly to the store and never reach us; we receive transaction confirmations and operational data only.
• Direct payments (e.g. for development services or website subscriptions) are processed by licensed, PCI-DSS-compliant payment providers. Card details are never stored on our servers.
• Transaction records (amount, date, identifier) are retained as required by tax and accounting law.

7. Sharing & subprocessors

We do not sell or rent personal information. Data is shared only with:

• Infrastructure and cloud providers listed below, to host and operate the services;
• Competent authorities — where legally required or under a court order;
• Professional advisors (accountants, lawyers) — bound by confidentiality.

Each subprocessor is bound by a data processing agreement with security and confidentiality obligations, consistent with the Israeli Data Security Regulations and the providers’ own terms.

8. International transfers

Some data is stored with the cloud providers above in data centers in the EU or the US. Such transfers comply with the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 — including transfers to jurisdictions with adequate protection or under appropriate contractual safeguards (such as Standard Contractual Clauses).

9. Cookies & local storage

• The website uses basic local storage only: accessibility preferences and your acknowledgment of the privacy notice. This data stays in your browser and is not sent to us.
• The website sets no third-party advertising, marketing or tracking cookies.
• Specific applications may use strictly necessary session cookies for sign-in — never advertising cookies.
• You can clear local storage at any time in your browser settings without affecting your ability to browse the site.

10. Security

• Encrypted transport (TLS/HTTPS) across all services;
• Passwords stored as salted one-way hashes;
• Least-privilege access control and multi-factor authentication for administrative accounts;
• Ongoing security updates, encrypted backups and event logging;
• Development following accepted security practice (OWASP) with pre-release checks.

A severe security incident will be reported to the Israeli Privacy Protection Authority and to affected users where required by law, including the notification duties introduced by Amendment 13.

11. Data retention

• Website inquiries — up to 24 months from submission, unless a business relationship follows;
• User accounts — while the account is active, until deleted per section 5;
• Transaction records — 7 years, per tax law;
• Server logs — up to 12 months, for security purposes.

12. Your rights

• Access — receive a copy of the information we hold about you;
• Correction — ask us to correct inaccurate, incomplete or outdated information;
• Deletion — request deletion in accordance with the law and section 5 above;
• Withdraw consent — opt out of marketing at any time;
• Complain — lodge a complaint with the Israeli Privacy Protection Authority.

Users in the European Union additionally have the rights provided by the GDPR (data portability, restriction of processing, objection), and California residents have the rights provided by the CCPA/CPRA. We do not “sell” personal information as defined there. For any request: contact@leadaster.co.il — we respond within 30 days.

13. Children

Our website and services address businesses and adult users and are not directed to children under 13 (or another age set by applicable law). We do not knowingly collect information from children; if we learn that such information was collected, we delete it immediately. Any app directed at minors will be labeled and operated per store rules and applicable law, including COPPA and Google Play’s Families Policy.

14. Changes to this policy

We update this policy from time to time. Material changes will be announced on the website (and, for apps, in-app) before taking effect, and the “last updated” date will change accordingly. Continued use after an update constitutes acceptance of the updated policy.

15. Contact

• Email: contact@leadaster.co.il
• Address: Leadaster, Yaar Odem 6, Lod, Israel
• Phone / WhatsApp: +972-52-318-6144