Privacy Policy

This Privacy Policy describes how Shukshuk (shukshuk.co.il, "the Site" or "we") collects, uses, shares, and stores information about users of the Site ("you" or "users").

Use of the Site constitutes consent to this policy. If you do not agree, please do not use the Site.

1. Data controller

The data controller is the Site operator. You can contact us at privacy@shukshuk.co.il.

2. Information we collect

• Identification data: name, email address, and profile picture, obtained when you sign in with a Google account.
• User-submitted content: listings, images, contact details you choose to publish, chat messages between users, and messages sent to the Site's AI agent.
• Usage data: IP address, browser and device type, pages viewed, and activity times, for operational and security purposes.
• Cookies: we use cookies that are strictly necessary for site operation (e.g. to persist your sign-in session).

3. Purposes of use

• Operating the Site and providing the services.
• Displaying listings, searching, and matching results.
• Communication between users and between users and the Site.
• Fraud prevention, abuse mitigation, and user protection.
• Improving the service and adapting it to user needs.
• Complying with legal obligations.

4. Sharing with third parties

We do not sell your information. We use the following infrastructure providers, who process some data on our behalf:

• Google LLC — sign-in (OAuth) services.
• Vercel Inc. — site hosting.
• Neon, Inc. — database hosting.
• Cloudinary Ltd. — image storage and processing.
• Pusher Ltd. — real-time messaging between users.
• Anthropic, PBC — AI agent (Claude) for search and listing creation. Every conversation you have with the agent — both the messages you write and the agent's responses — is sent to Anthropic's servers for processing. Anthropic does not, as a default, use the conversation content to train commercial models. A note of caution: do not share sensitive data with the agent that you would not want a third-party AI provider to see (e.g. national ID number, credit-card details, medical information).

These providers are not permitted to use your data for their own purposes, only to provide their services to the Site.

We may also disclose information when required by law, court order, or to protect our rights or the rights of other users.

5. International data transfers

Some of our infrastructure providers store data on servers outside Israel, mainly in the United States and the European Union. In accordance with the Privacy Protection (Transfer of Data Abroad) Regulations, 2001, we ensure that destination countries provide a comparable level of protection, or that transfers occur under your explicit consent or another lawful basis.

6. Retention

We retain information for as long as your account is active or as needed to provide the services and meet legal obligations. You can request deletion at any time (see Section 7).

AI agent conversations: Your conversation history with the Site's AI agent — including the messages you wrote, listings the agent drafted on your behalf, and the agent's responses — is retained indefinitely as part of your account history. This retention lets you revisit previous conversations and lets the agent learn your preferences over time. When you delete your account (Section 7), the entire conversation history is deleted along with it.

7. Your rights

Under the Israeli Privacy Protection Law, 1981, you have the right to:

• Access the information we hold about you.
• Request correction or update of inaccurate information.
• Delete your account and related information at any time directly from your profile settings at /profile. Deletion permanently removes all listings, messages, AI conversation history, API keys, and associated content.
• Withdraw consent to data processing.

For any other request relating to these rights, contact privacy@shukshuk.co.il. We commit to responding within 30 days, per §13(b) of the Law.

8. Security

We employ reasonable security measures, including transport encryption (HTTPS), access controls, and the use of providers that follow accepted security standards. No security is perfect, however, and we cannot guarantee complete protection against unauthorized access.

9. Minors

The Site is not intended for users under the age of 18. If you are under 18, please do not use the Site. If we learn that information has been collected from a minor, we will delete it.