מדיניות פרטיות

עודכן לאחרונה: 22 בפברואר 2026  |  תאריך תחילה: 22 בפברואר 2026

תוכן עניינים

  1. סקירה כללית
  2. מידע שאנו אוספים
  3. כיצד אנו משתמשים במידע שלך
  4. הבסיס המשפטי לעיבוד
  5. שיתוף מידע וגילוי
  6. עוגיות וטכנולוגיות מעקב
  7. שמירת נתונים
  8. אבטחת נתונים
  9. הזכויות שלך
  10. העברות נתונים בינלאומיות
  11. פרטיות ילדים
  12. שירותי צד שלישי
  13. שינויים במדיניות זו
  14. יצירת קשר

1. Overview

ERRA LTD ("Company", "we", "us", "our") operates the ERRA Analytics platform ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using the Service, you agree to the collection and use of your information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Category Data Collected Purpose
Account Information Name, email address, password (hashed) Account creation & authentication
Profile Information Company name, phone number, bio, avatar Personalization of experience
Billing Information Payment method (processed by Paddle), billing address Subscription management & invoicing
User Content Queries, saved searches, reports, AI chat history Providing and improving the Service
Communications Support tickets, feedback, correspondence Customer support & service improvement

2.2 Information Collected Automatically

Category Data Collected Purpose
Device Information Browser type, operating system, device type Optimizing Service for your device
Log Data IP address, access times, pages viewed, referring URL Security, analytics, troubleshooting
Usage Data Features used, frequency, interaction patterns Service improvement & analytics
Cookies Session identifiers, preferences Authentication, personalization

2.3 Information from Third Parties

  • Google OAuth: When you sign in with Google, we receive your name, email address, and profile picture from Google.
  • Paddle: Our payment processor may share transaction status, subscription status, and billing events with us.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service.
  • Process transactions and manage your subscription.
  • Personalize your experience and deliver relevant content.
  • Generate analytics reports and AI-powered insights based on your queries.
  • Send transactional emails (account confirmations, billing receipts, subscription changes).
  • Send promotional communications (only with your consent; you may opt out at any time).
  • Detect, prevent, and address technical issues and security threats.
  • Comply with legal obligations.
  • Improve the Service through aggregated, anonymized usage analytics.

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your information includes:

  • Performance of Contract: Processing necessary to provide the Service you have subscribed to.
  • Legitimate Interests: Improving the Service, fraud prevention, and security.
  • Consent: Marketing communications and non-essential cookies.
  • Legal Obligation: Compliance with applicable laws and regulations.

5. Information Sharing & Disclosure

We do not sell your personal information. We may share information only in the following circumstances:

  • Service Providers: We share data with trusted third-party processors who assist in operating our Service (e.g., hosting, analytics, payment processing). These providers are contractually obligated to protect your data.
  • Paddle (Merchant of Record): Payment and billing data is processed by Paddle. See Paddle's Privacy Policy.
  • Legal Requirements: We may disclose information if required by law, regulation, or court order.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the successor entity.
  • With Your Consent: We may share your information for any other purpose with your explicit consent.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

  • Essential Cookies: Maintain your session, authenticate your identity, and ensure security (e.g., CSRF tokens). These are strictly necessary and cannot be disabled.
  • Preference Cookies: Remember your settings and preferences.
  • Analytics Cookies: Understand how you use the Service so we can improve it. We may use anonymized analytics tools.

You can manage cookie preferences through your browser settings. Disabling essential cookies may prevent the Service from functioning properly.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:

  • Account data: Retained for the lifetime of your account plus 30 days after deletion.
  • Billing records: Retained for 7 years as required by tax and financial regulations.
  • AI chat history: Retained while your account is active; deleted within 30 days of account closure.
  • Server logs: Retained for up to 90 days.

You may request deletion of your data at any time by contacting us (see Section 14).

8. Data Security

We implement industry-standard security measures to protect your data:

  • All data transmitted between your device and our servers is encrypted using TLS (HTTPS).
  • Passwords are securely hashed and never stored in plaintext.
  • Access to personal data is restricted to authorized personnel on a need-to-know basis.
  • Regular security audits and vulnerability assessments are conducted.
  • Server infrastructure is hosted in reputable data centres with physical and network security controls.

While we strive to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we restrict processing of your data.
  • Portability: Request a machine-readable copy of your data.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent for processing based on consent at any time.

To exercise any of these rights, please contact us at privacy@erra.co.il. We will respond within 30 days.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

12. Third-Party Services

Our Service may integrate with or contain links to third-party services. This Privacy Policy applies only to our Service. We are not responsible for the privacy practices of third-party services, including but not limited to:

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also send an email notification. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

14. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: