Privacy Policy

1. Who is responsible for your data

FIREWEBZ is operated by [OPERATOR FULL LEGAL NAME], a sole proprietor registered in Israel (business number [OSEK NUMBER]), of [STREET ADDRESS, CITY, ISRAEL] (“FIREWEBZ”, “we”, “us”). You can reach us at contact@firewebz.com.

We are the controller of the personal data described in this policy. This policy explains what we collect when you use firewebz.com and app.firewebz.com (the “Service”), why, who we share it with and what rights you have. It applies under the Israeli Protection of Privacy Law, 5741-1981 and its regulations, and, for people in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

2. What we collect

Tenders shown in the Service come from public sources. They may include the name or business email of a buying official as published by the government source; we do not use that information for any other purpose.

3. Why we use it, and our legal basis

• To provide the Service: run your account, sign you in, collect and score tenders, send alerts, digests, event reminders and billing notices (trial ending, failed payments), and show partner listings. Basis: performance of our contract with you.
• To bill you, through Paddle. Basis: contract; legal obligations such as tax records.
• To keep the Service secure: prevent abuse, enforce sanctions screening, investigate incidents. Basis: legitimate interests and legal obligations.
• To support you and tell you about changes to the Service, these policies or your plan. Basis: contract and legitimate interests.
• To improve the Service, using aggregated usage information. Basis: legitimate interests.

We do not sell personal data, do not use it for advertising, and do not send marketing emails without your consent.

4. AI processing

To calculate how well a tender fits your products, the app sends the text of the tender and the relevant text of your product documents to Anthropic, PBC, which provides the Claude AI model, through its commercial API. Under Anthropic's commercial terms this data is processed to return the result to us and is not used to train its models. Account owners can switch AI scoring off in the app's Settings; matching then uses keywords only and your product text is not sent to an AI provider.

5. Who we share data with

We use these service providers (processors), who act on our instructions and are bound by data-protection terms:

Paddle.com Market Limited (United Kingdom) is our reseller and the Merchant of Record for all orders. When you pay, Paddle collects your payment and billing details directly and processes them as an independent controller under its own privacy notice.

Other users of the Service see partner listings that partners choose to publish, and the members of your own organization see your organization's data. We may also disclose data where the law requires it, to protect our rights or users' safety, or to a buyer of our business, who would be bound by this policy.

6. International transfers

Our providers process data in the United States and the United Kingdom. Where the law requires it, we rely on adequacy decisions or on standard contractual clauses and equivalent safeguards offered by these providers. Israel is recognized by the European Commission as providing adequate protection for personal data.

7. How long we keep it

• Account data and Your Content: while your account is open, then deleted within 30 days of closure.
• Sign-in codes: expire after 10 minutes and are deleted within a day.
• Audit and security logs: up to 12 months.
• Billing records: as long as tax and accounting laws require (in Israel, generally 7 years). Paddle keeps its own records.
• Backups: overwritten on a rolling cycle of up to 30 days.

8. Cookies and similar technologies

The app uses one essential cookie to keep you signed in and protect forms; it expires after 12 hours. Your light/dark display choice is stored in your browser's local storage. The marketing site at firewebz.com sets no cookies. To count visits to it, each page loads a tiny image from app.firewebz.com; we record the page, the date and an anonymous identifier made by one-way scrambling your IP address and browser details together with a secret that changes every day. The IP address itself is never stored, and the identifier can't be linked across days or back to you. Bots are ignored. We do not use advertising or tracking cookies, or third-party analytics. When you pay, Paddle's checkout window sets its own cookies, described in Paddle's notice.

9. Security

We use encrypted connections (HTTPS), store sign-in codes only as hashes, encrypt credentials you save for tender sources with a key unique to your organization, separate each organization's data, keep an audit log, and limit access to production systems. No system is perfectly secure; if a breach affects your personal data we will notify you and the authorities as the law requires.

10. Your rights

Account owners can download a copy of the account's data (as JSON and CSV files) and delete the account themselves, from Settings in the app. You may also ask to access, correct or delete your personal data, to receive a copy in a portable format, to restrict or object to processing based on legitimate interests, and to withdraw any consent you gave. Write to contact@firewebz.com; we will reply within 30 days and may need to confirm your identity. If your organization's account owner controls the data (for example, a colleague's notes), we may refer you to them.

You may also complain to the Israeli Privacy Protection Authority or, in the EEA or UK, to your local data-protection authority.

11. Children

The Service is for businesses and is not intended for anyone under 18. We do not knowingly collect children's data.

12. Changes

We will post any change to this policy on this page with a new date, and email account owners about material changes before they take effect.