Website privacy policy

1. Data controller

The data controller for bdtech.app is:

Y. Ben David — BD TECH
Email: support@bdtech.app
Website: https://www.bdtech.app

For any privacy-related request or question, contact us at the email above. We aim to respond within 30 days.

2. What data we collect and why

a. Analytics — Google Analytics 4

We use Google Analytics 4 (GA4) to understand how visitors use this site. GA4 collects:

• Pages visited and time spent
• Approximate geographic location (country and region — not precise address)
• Device type, operating system, and browser
• Referring website or search engine
• Technical performance data

GA4 does not collect your name, email address, or any other directly identifying information. IP addresses are anonymized by Google before storage.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f) GDPR) — understanding aggregate site traffic to improve the site and ensure it functions correctly. Israeli law: Notice is provided under the Israel Privacy Protection Law, 5741-1981, as amended.

Google acts as a data processor on our behalf, governed by Google's Data Processing Terms. You can learn more at Google's Privacy Policy.

b. Hosting logs — Vercel

The site is hosted on Vercel Inc. Vercel automatically logs each HTTP request, which includes your IP address, the page requested, the date and time, and your browser's user-agent string. These logs are used for security monitoring, debugging, and infrastructure management. Vercel acts as a data processor; see Vercel's Privacy Policy.

Legal basis (GDPR): Legitimate interest (Article 6(1)(f)) — operating and securing the website.

c. Contact via email

The site contains mailto: links. If you choose to send us an email, we receive your email address and the content of your message. We use this information solely to respond to your enquiry. We do not add you to any mailing list without your explicit consent.

Legal basis (GDPR): Legitimate interest (responding to your direct enquiry); or, where applicable, performance of a contract.

3. Cookies

Google Analytics sets cookies in your browser to distinguish unique visitors and sessions. The primary cookies are _ga (expires after 2 years) and _ga_* (session cookie). No other cookies are set by this site.

You can prevent Google Analytics cookies by installing the Google Analytics Opt-out Browser Add-on, or by configuring your browser to block third-party cookies.

4. Data sharing and international transfers

We do not sell or rent your data to anyone. Data is shared only with the processors described above:

• Google LLC (United States) — analytics data. Google participates in the EU–US Data Privacy Framework and applies Standard Contractual Clauses for data transferred from the EEA.
• Vercel Inc. (United States) — hosting logs. Vercel offers EU-region deployments and provides Standard Contractual Clauses for GDPR compliance.

We do not transfer personal data to any other third country.

5. Data retention

• Google Analytics: User-level and event-level data is retained for 14 months, after which it is automatically deleted. Aggregated reports are retained indefinitely.
• Vercel access logs: Retained per Vercel's infrastructure policies (typically up to 30 days for raw logs).
• Email correspondence: Retained for as long as necessary to handle your request, and thereafter for up to 3 years for record-keeping purposes.

6. Your rights

Depending on your location, you may have the following rights regarding your personal data:

Under EU law (GDPR — Regulation 2016/679)

• Right of access (Art. 15) — request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — request correction of inaccurate data.
• Right to erasure (Art. 17) — request deletion of your personal data ("right to be forgotten").
• Right to restriction (Art. 18) — request that we restrict processing of your data.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on legitimate interest. We will comply unless we demonstrate compelling legitimate grounds.
• Right to lodge a complaint — you have the right to complain to your national supervisory authority. In the EU, a list of authorities is available at edpb.europa.eu.

Under Israeli law (Privacy Protection Law, 5741-1981, as amended)

• Right of access and correction (Section 13) — you may request to inspect personal information held about you and correct it if inaccurate, incomplete, or misleading.
• Right to object to use for direct marketing — we do not conduct direct marketing.
• Right to lodge a complaint — you may contact the Israeli Privacy Protection Authority (PPA).

To exercise any of these rights, contact us at support@bdtech.app. We will respond within 30 days. Note that for data held by Google or Vercel, we may need to direct you to their respective privacy tools.

7. Security

bdtech.app is served exclusively over HTTPS. We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorised disclosure. In the event of a personal data breach that is likely to result in a high risk to individuals, we will notify the relevant supervisory authority within 72 hours where required by law.

8. Children

This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided personal data through this site, please contact us and we will delete it.

9. Links to other websites

This site links to external product sites and app stores. We are not responsible for the privacy practices of those sites. Please review their privacy policies separately.

10. Changes to this policy

We may update this policy to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will be revised accordingly. Where changes are material, we will take reasonable steps to notify users.