Privacy Policy

Effective and last updated: July 22, 2026 (version 2)

Your identity, home, absence dates, communications, and verification material are sensitive. This policy explains how Sit Sababa handles personal information under the Israeli Privacy Protection Law, 5741-1981 and its regulations.

1. Who controls the information

The controller of the Sit Sababa database is the operator of the service trading as "Sit Sababa". Contact the controller at sitsababa@gmail.com or through the "Report a problem" page. These channels also receive privacy-rights requests and legal or security notices.

2. What we collect

Account and identity data: name, email, authentication record, optional display name, photo, phone, language, role preference, social links, and Google or Facebook sign-in identifiers if you choose that method. Marketplace data: owner, home, animal, sitter and availability details; photos; sit dates and date-precision choice; applications, invitations, saved items, matches and reviews. Exact address, contact phone, and handover notes are stored separately as private data. Trust and support data: verification status and method, reference contacts and notes, reports, moderation records, support correspondence, and audit events. We do not collect or store identity documents. Communications: in-platform conversation and message content, delivery metadata, and service-notification records. Technical data: security and server logs, IP/device/browser and request information handled by hosting and security providers, cookie-consent choice, and—while optional cookies remain on—PostHog analytics and Meta advertising events. We receive information directly from you, your counterparties and references, OAuth providers you select, and the technical/service providers described below.

3. Why we use it

We use information to create and secure accounts; publish the fields you choose for listings and profiles; enable applications, invitations, conversations, confirmed matches and reciprocal private-detail reveal; operate service emails and reviews; review and verify submissions; moderate reports and protect people, animals, property and the service; provide support; prevent fraud and misuse; maintain, debug and improve the service; establish, exercise or defend legal rights; comply with legal duties and valid authority requests; and, only with optional-cookie consent, measure product use and advertising attribution. We do not sell or rent personal information or use private member content for advertising.

4. Who can see marketplace information

Public visitors may see approved listing and profile fields, photos, city/neighborhood, reviews that have been published, and open-listing dates at the precision selected by the owner. Public matched listings suppress absence dates. Signed-in members may see additional workflow information needed to apply, invite, message, or manage their own activity. Authorized operators may access submissions and private information for review, support, moderation, security, and legal duties. Exact address, reciprocal contact details, and handover notes are never public and are revealed only to the owner and selected sitter after the owner confirms the match. Reveal timestamps are recorded. Do not place private details in public text or photos.

5. Verification & references

We do not collect or store identity documents. Where a sitter opts in, an authorized administrator confirms a government ID visually on a live video call; nothing from that call is recorded or retained, and only the check result and the method used are stored. We retain the resulting verification level and may retain necessary decision notes and audit records. Reference contact details are private and are used only to request or assess a reference. Where you ask us to email a referee, we send a single transactional message containing a one-time link, and we store that referee’s name and address for that request alone. If you give us another person’s details, you confirm that you are authorized to do so and have told them why their details will be used.

6. Recipients & service providers

We disclose only what is reasonably needed: to the matched counterparty and other members according to the visibility rules above; to authorized operators and professional advisers; and to processors supporting the service, currently including Supabase (database, authentication and storage), Vercel (hosting), Resend (service email, when enabled), Google or Meta (only if you select their sign-in), PostHog (consent-gated analytics), Meta Pixel (consent-gated advertising attribution on approved public routes), and Sentry (PII-scrubbed error monitoring, when enabled). We may also disclose information when required by law, a valid order, or reasonably necessary to protect rights, safety, or security. A provider may act under its own policy where you directly choose its service. We do not sell or rent personal information.

7. Processing outside Israel

Some providers and their sub-processors process or store information outside Israel, including in the European Economic Area, the United States, and other locations. We will make transfers only on a basis permitted by Israeli law and require appropriate written privacy and security protections from recipients where required. Protection and government-access rules in another country may differ from Israel.

8. Cookies & analytics

Essential storage supports authentication, security, theme/display preferences, and remembers your cookie choice. Optional analytics and advertising are on by default and run until you turn them off by selecting "Essential only" under "Cookie settings" in the footer. While they are on, PostHog (EU-hosted) receives whitelisted usage events and an internal user ID, not name, email, phone, address, message text, or form content; Meta Pixel receives approved events and public-page URLs for advertising attribution, never Advanced Matching or pageviews from account, listing-management, message, or admin routes. Your choice is stored in first-party browser storage and a first-party consent cookie so the same rule applies to client- and server-side analytics. You may opt out at any time through "Cookie settings" in the footer; opting out stops future optional collection but does not retroactively erase processing already completed.

9. Security

We use organizational, technical, and access controls proportionate to the information, including deny-by-default database rules, separation of private listing details, private verification storage, short-lived document access, role-based administration, and PII scrubbing from observability. No system is completely secure. We investigate suspected incidents and notify the Privacy Protection Authority or affected people when the law requires. Please report a suspected account or security issue promptly.

10. Retention & deletion

We retain information only while reasonably needed for the purposes above, the active marketplace relationship, safety and dispute handling, security and audit, or legal obligations. A self-service deletion request is available when no confirmed or active match exists. It removes login access and personal profile, home, sitter, photo, verification, favourite and pending-activity data, while messages, conversations, completed-match history, reviews, and necessary audit records may remain with your identity anonymized so another member's history and legitimate safety records are not destroyed. Open listings and pending activity are closed. Backups and provider logs may expire on their normal protected cycles.

11. Your rights

Subject to applicable law, you may request access to personal information about you in the database and correction of information that is incorrect, incomplete, unclear, or outdated. You may ask for deletion or cessation of use where the law provides it, withdraw optional-cookie consent, and object to or unsubscribe from marketing/direct-mail uses. You may complain to the Israeli Privacy Protection Authority. Some account fields can be edited or deleted through the service; for other requests, contact us. We may verify identity and may retain or refuse information where the law permits or requires. We will respond within the period required by law or otherwise within a reasonable time.

12. Adults only

The service is for people aged 18 or older. We do not knowingly create accounts for minors. If you believe a minor provided personal information without valid authorization, contact us so we can investigate and delete or restrict it as appropriate.

13. Policy changes

We may update this policy prospectively. We will update the effective date and give a reasonably prominent advance notice of a material change where appropriate. If a new use requires fresh consent, we will ask for it rather than relying only on continued use.

14. Contact

For privacy questions, rights requests, consent withdrawal help, or security notices, email sitsababa@gmail.com or use the "Report a problem" page and write "privacy". Include the email associated with your account and the type of request, but do not email an ID document unless we specifically request a secure verification method.

Questions or requests? Write to us: sitsababa@gmail.com