This document is a working draft prepared for review by qualified Israeli and US counsel. It has not been approved and must not be treated as final. Items marked "For counsel" are open decisions.
Data Deletion and Retention
How to ask us to delete your data, what happens when you do, and what we may have to keep.
- Effective:
- (proposed)
- Last updated:
- Version:
- 2026-10-18-draft.1
1. How to request deletion
- Sellers: sign in and go to Settings → Privacy. You can download your data first, then delete your account after re-entering your password.
- Buyers with an account: sign in and use Account → Privacy.
- Anyone else (for example a buyer who ordered as a guest): use the request form below, or contact [to be confirmed before publication] (privacy email). A guest order was sent to the seller, who holds that record — we will help route your request to the seller as well as handle our own copy.
We verify identity first. Signed-in users confirm with their password. For form requests we email the address you give to confirm it is yours before we act, and may ask for details that match our records.
2. What deletion does
- Seller account: removes the profile, catalogs, products, categories, images, order records (including the buyer details inside them), statistics and settings from live systems. Orders you have received disappear with the account — download them first. Uploaded image files are removed from storage as part of deletion.
- Buyer account: removes your saved profile and the account. Orders you placed stay with the sellers who received them (they are the seller's records) and are no longer linked to you; ask the seller to delete them if you wish.
- Active paid subscription: cancel it in Billing first so you are not charged after deletion.
3. What we may keep, and for how long
- Billing and tax records with our payment provider and in our books, for the period the law requires.
- A minimal log that a request was made and handled (type, dates, outcome), kept to prove compliance.
- Security and abuse-prevention logs for a short operational period.
- Data we must keep to meet a legal obligation or to establish or defend a legal claim.
- Encrypted provider backups, which age out on the provider's normal cycle. Deleted data is not restored into live systems except to recover from a disaster, in which case deletions are re-applied.
We do not promise instant permanent erasure from every backup. Live data is removed promptly after verification; the rest follows the cycles above.
For counsel: state concrete retention periods once confirmed (tax records, request log, security logs, provider backup window). Confirm the "orders disappear with the seller account" consequence is acceptable for buyers and whether a grace period (e.g. 14 days soft-delete) should be added.
4. Timing
We aim to complete verified requests within 30 days. Self-service account deletion from Settings → Privacy takes effect immediately in live systems.
5. Request form
Use the form on this page to ask for deletion, a copy of your data, a correction, to withdraw consent, or to raise a privacy complaint.