Who is responsible for the information
BazSite, operated by Uzi Aluf. Privacy questions: bazsite@aluftech.co.il or by phone at +972-54-653-0335.
What information we collect
- Account details: name, email, phone (optional) and password, which is stored encrypted in a way that cannot be recovered.
- Business and website details: what you fill in the questionnaire, and the text, images and files you upload.
- Payment: plan, amounts and dates. Credit card details go directly to the payment provider SUMIT and are not stored by us.
- Usage: logins to the system and IP address, for security and to prevent abuse.
Why
To build, host and manage your website, to take payment, to send you messages about your account and website (for example a monthly report, or an alert when the website is down), and to keep the system secure.
Who the information is shared with
Only with providers that help us run the service, and only as far as needed:
- Hosting: DigitalOcean's servers.
- Payments: SUMIT.
- Artificial intelligence: Anthropic (Claude), which receives the text needed to write your website's content and design. Under its commercial terms, the information is not used to train its models.
- Email: the email service provider through which the system's emails are sent.
- Off-server backup: DigitalOcean's file storage service.
- Advertising measurement: Meta (Facebook and Instagram), through the pixel on bazsite.com and server reports of sign-ups and payments, and Google (Google Analytics and Google Ads), through Google's tag on bazsite.com, as described in the cookies section.
We do not sell information.
Cookies
The management system uses only the cookie that keeps you logged in (and a "remember me" cookie for 15 days, if you chose it).
On bazsite.com (the marketing pages and sign-up) the Meta pixel is installed. It stores a cookie and reports visits and sign-ups to Meta, so we can measure our ads on Facebook and Instagram and show them to people who may be interested. The pixel, and any other marketing or measurement cookie, only loads after you have agreed to it in the cookie banner. If you chose "No, thanks", no such cookie is stored, and only your choice itself is kept in the browser, so the banner doesn't come back on every page. You can change your choice at any time with the "Cookie settings" link at the bottom of every page, and when you withdraw consent the pixel's cookies are deleted. You can also block cookies in your browser settings or in the ad settings of your Meta account. The pixel is not installed on the websites customers build with the system.
In the same way, and only after you have agreed to cookies, Google's tag (Google Analytics and Google Ads) also loads. It stores Google cookies, counts page visits, and reports sign-ups to Google, so we know which Google searches and ads brought sign-ups. Personalized advertising and Google signals are turned off on our side. If you chose "No, thanks", the tag doesn't load at all. You can limit Google's use of the information in the ad settings of your Google account (adssettings.google.com).
Even without cookie consent, when a new account is opened or a plan is paid for, our server reports it to Meta (Conversions API) to measure which ads brought sign-ups. These are the details sent: the email address and phone number after one-way hashing (SHA-256, so Meta doesn't receive them in plain text), the IP address, the browser type, and if you came from an ad, its click id. No cookie is stored in your browser for this. Meta uses this information to match the event to its account and measure the ads. You can limit this use in the ad settings of your Meta account. You can also ask us not to report your details to Meta.
Information about visitors to your websites
Form messages, visitor accounts and orders on your website are kept by us on your behalf. For that information, you are the owner of the database and we process it according to your instructions. A privacy policy for your website is created automatically, and it's worth going over it.
How long information is kept
As long as the account is active. A website that wasn't paid for is deleted after 180 days with no activity, after being saved in a backup. Nightly backups are kept for 7 days. Payment information is kept as the law requires.
Your rights
Under the Israeli Protection of Privacy Law, and under the privacy laws of your own country where they apply (such as the GDPR), you can ask to see the information about you, correct it or delete it. Write to bazsite@aluftech.co.il, and we'll answer within 30 days.
Security
Passwords and keys are stored encrypted, the connection to the system is encrypted (HTTPS), and there is a daily backup. No system is completely immune, and if a security incident affects your information, we will notify you and the relevant authorities as required.
Last updated: November 4, 2026