מדיניות פרטיות

Privacy Policy: Group Management (ניהול קבוצות)

Group Management is an internal, closed system of הארגון. Coordinators appointed by the organization use it to manage their groups. Only users the organization adds can sign in.

Data we keep

• Contact details of group members and their families that they gave the organization: name, phone, email, address.
• Group membership and status, coordinators' notes and tasks, and emails sent to or received from members.
• For users of the system: name, email address and the actions they take in it.

Google user data: what we access and why

• Sign in with Google (openid, email, profile): to identify the user by name and email address and check that the organization added them. Nothing else is read from the user's account.
• Gmail, only the organization's own mailbox, connected once by its administrator: sending emails to group members (gmail.send); reading their replies and delivery notices so coordinators can answer them (gmail.readonly, gmail.compose).
• Google Drive (drive.file): only files the app itself uploads, to attach them to emails as links.

How Google user data is used, shared and stored

• It is used only to provide the features above to the organization's users.
• It is not sold, not shared with or transferred to third parties, not used for advertising and not used to train AI models.
• Humans do not read it except the organization's own coordinators within their groups, or when needed for security or to comply with the law.
• The use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Data is stored on the organization's own server over encrypted connections, with encrypted backups. Access tokens are stored encrypted.

Retention and deletion

Data is kept while the person is part of the organization's groups. Anyone whose details are kept can ask to see, correct or delete them; every email has an unsubscribe link. The administrator can disconnect the Google account at any time from the system's settings, which deletes the stored access token; access can also be revoked at myaccount.google.com/permissions.

Contact

Through the organization’s coordinator or administrator.