Privacy policy

1. Who is responsible for the data.

{legal entity, company number}, which operates Community Ropes. Privacy requests: info@codama.dev.

2. What we collect.

• Guides: phone number, name, a line about yourself, certification status and years of experience (if you gave them), and the events you signed up for and were assigned to.
• Companies: company name, users' names and phone numbers, email if given, the events you posted and who signed up.
• Data a company gives us about guides: a company can add a list of guides it works with (name and phone) so they're recognised when they sign up. We don't message them because of it.
• Technical data: views of event pages and clicks on links, plus standard server data such as IP address and browser type. Measured with our own tools.

3. Why.

Logging in (one-time SMS code); coordinating events (passing your sign-up to the company, assignment confirmation, a reminder before the event); operations, security and abuse prevention; and improving the service from aggregated data. We won't use the data for another purpose without telling you.

4. Messages.

SMS and email are sent only about the service and your events. We won't send advertising without explicit consent, as required by section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982, and any such message will include an easy way to opt out.

5. Who sees what.

• A company that posted an event sees who signed up: name, the line they wrote and certification status. It sees the phone number only after assigning.
• Guides don't see who else signed up. Companies don't see who signed up for other companies' events.
• Providers who work for us (hosting and cloud, SMS and email delivery) get only what the service needs and must protect it. Some servers are outside Israel; transfers follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.
• We disclose data to authorities only when the law requires it.
• We never sell data.

6. Security.

Data is encrypted in transit, access is limited to the people who need it, and we follow the Privacy Protection (Data Security) Regulations, 5777-2017.

7. How long we keep it.

As long as the account is active. After a deletion request we delete the data within 30 days, except what the law requires us to keep.

8. Your rights.

You can see your data, ask to correct it and ask to delete it. Message us on WhatsApp {wa} or email info@codama.dev, and we'll reply within 30 days.

9. Cookies.

The website uses no advertising cookies. The app stores your login in the browser so you don't have to log in every time.

10. Minors.

The service is for people aged 18 and over.

11. Changes to this policy.

We'll post any change here and give advance notice of material changes.

12. Contact.

WhatsApp {wa} or email info@codama.dev.