This policy explains what personal data GeoSmart-IL collects when you use the GeoView web service, why we collect it, who it is shared with, and what you can ask us to do about it. It describes the hosted service at this website, and it is written to match what the software actually does.

Who is responsible

GeoSmart-IL, a registered business in Israel, is the data controller for personal data processed by the hosted GeoView service.

What we collect

We collect only what the service needs in order to work, to bill correctly, and to stop abuse of the free trial:

• Account details you enter: first and last name, username, e-mail address, and password. Passwords are never stored in readable form - only a salted PBKDF2 hash. If you sign in with Google we store no password at all.
• Organization details, when you register a team: organization name, billing e-mail address, country, and optionally a tax registration number.
• Billing records: which plan was purchased, the amount, the VAT treatment applied, and the identifier of the invoice issued for it. We never see or store your card details.
• Anti-abuse signals, used only to enforce one free trial per person: a one-per-mailbox record derived from your e-mail address, an opaque device cookie, and a weak fingerprint of your network and browser. The network address and browser details are stored ONLY as salted one-way hashes, and the IP address is truncated to its surrounding network before hashing - we do not keep your raw IP address in these records.
• Content you create in the tools - projects, routes, zones, uploaded files and chat messages you send to the AI assistant - stored so the service can show it back to you.
• Operational logs needed to run and secure the service, including error diagnostics and records of failed sign-in attempts.

Signing in with Google

If you choose to sign in with Google, Google tells us your e-mail address, whether Google has verified it, and your first and last name. That is all we request and all we receive - we get no access to your Gmail, Drive, contacts or any other Google data. We store a Google account identifier so we can recognise you at your next sign-in. Using Google sign-in is entirely optional; registering with an e-mail address and password works the same way.

Why we process it

• To provide the service you asked for: creating your account, keeping you signed in, and storing your work (performance of a contract).
• To charge the correct price and issue a lawful tax invoice, including determining whether Israeli VAT applies to your purchase (legal obligation).
• To enforce one free trial per person, so the trial remains available to genuine new customers (legitimate interest).
• To keep the service secure - rate-limiting sign-in attempts and investigating misuse (legitimate interest).

Who we share it with

We share personal data only with the service providers needed to run the service, and only with what each of them needs:

• Morning (Green Invoice), our Israeli invoicing provider - receives your billing details in order to issue the tax invoice required by law.
• PayPal - processes the payment itself. Your card details go directly to the payment provider and never reach our servers.
• Google - only if you choose to sign in with Google, and only as part of that sign-in.
• A geo-location lookup service, which receives the IP address of a visitor at checkout so we can corroborate the country you declared. This is required as evidence for zero-rated export sales and is used for no other purpose.
• Microsoft Azure (West Europe), which hosts the service and its database.
• Our e-mail provider, which delivers account activation, password reset and billing notices.

We do not sell personal data, and we do not share it for advertising.

Cookies

We use only cookies that the service needs to function. There are no advertising or analytics cookies:

• A sign-in cookie that keeps you logged in.
• A long-lived opaque device identifier, used solely to detect repeat free trials. You can delete it in your browser.
• A language cookie that remembers whether you chose Hebrew or English.
• A security cookie that protects forms against cross-site request forgery.

We do not use third-party tracking cookies and we do not build advertising profiles.

How long we keep it

Account and content data is kept while your account exists, and deleted when the account is deleted. Billing and invoice records are kept for as long as Israeli tax law requires. The one-per-mailbox trial record is kept even after an account is deleted - that is deliberate, and it is what stops a deleted-and-recreated account from claiming a second free trial. It contains a hashed e-mail address and no account details.

Your rights

Depending on where you live, you may have the right to:

• Ask what personal data we hold about you and receive a copy.
• Have inaccurate details corrected - most account details can be edited yourself on the Account page.
• Ask us to delete your account and its data, subject to invoices we are legally required to retain.
• Object to processing based on legitimate interest, or withdraw consent where processing relies on it.

To exercise any of these, write to us at the address below. We will respond within the period required by applicable law.

Security

Traffic to the service is encrypted with HTTPS. Passwords are stored only as salted PBKDF2 hashes and can never be recovered, only reset. Sign-in and registration are rate-limited against automated guessing. No system is perfectly secure, and we do not claim otherwise.

Self-hosted installations

GeoView can also be licensed as a self-hosted installation running inside a customer's own network. In that case GeoSmart-IL operates nothing and receives no personal data: the customer running the installation is the controller of any data in it. That deployment does not send e-mail, does not process payments, does not perform geo-location lookups, and does not offer Google sign-in.

Changes to this policy

If we change how we handle personal data we will update this page and the date shown at the top. Material changes will be notified to account holders by e-mail.

Contact

Questions about this document, or a request concerning your personal data, can be sent to orenhalpern.work@gmail.com