מדיניות פרטיות ואבטחת מידע – מדדקאלק Privacy Policy & Information Security – MadadCalc

1Statutory Privacy Notice (Section 11)

MadadCalc operates in strict compliance with the Israeli Protection of Privacy Law, 5741-1981 (including Amendment No. 13), Data Security Regulations 5777-2017, and GDPR:

• No Legal Obligation to Provide Data: You have no statutory legal obligation to provide personal data to the operator; submission is entirely voluntary and based on your free consent.
• Purposes of Processing: Account authentication, delivery of indexation calculations and lease scanning, customer support, and cybersecurity compliance.
• Zero Third-Party Transfers: Personal data is never sold, leased, or transferred to third parties for advertising or marketing purposes.
• Data Subject Rights: You have the full right to inspect data gathered about you (Section 13) and request correction or complete deletion (Section 14) via info@madadcalc.co.il.

2Categories of Processed Data

MadadCalc processes exclusively technical commercial data required for index linkage:

• Contract Parameters: Base rent amount, base index date, linkage formula (Known / Determining), floor clauses, and caps.
• Anonymous Business Descriptors: Unit identifiers (e.g. "Suite 1804") and non-PII tenant nicknames.
• Client-Side Redaction: When ingesting lease PDFs, client-side browser redaction masks identifying information before text leaves your device.
• Account Data: Email address and organization name strictly for secure authentication (via Supabase Auth).

3Zero-Admin Access Principle

Calculation parameters entered by users are completely inaccessible to all personnel, including site operators and system administrators:

• Client-Side Pure Execution: Index calculations run locally in your browser. No rental figures or lease terms are retained on our servers during standalone calculations.
• Multi-Tenant Isolation (RLS): For registered users saving portfolios, records are secured via PostgreSQL Row Level Security accessible only to the authenticated owner.
• No Super-Admin Backdoors: The platform contains no administrative interface capable of reading or extracting user lease agreements or rent figures.

4Cookies, Local Storage & Consent Management

MadadCalc is designed with Zero Tracking by Default for anonymous browsing. The use of cookies and local storage (LocalStorage) strictly adheres to transparent, controlled standards:

• Zero Tracking by Default: During anonymous guest visits prior to account login or explicit consent, zero advertising, profiling, or third-party tracking cookies are deployed to your device.
• Essential Security Cookies: Created strictly upon active user login (Supabase Auth JWT) for authenticated sessions, CSRF prevention, and client-side UI preferences (language and accessibility settings).
• Anonymous Analytics (GA4 / GTM): Measurement tools remain paused and inactive until explicit user consent is granted via the cookie consent toolbar, operating under Google Consent Mode v2 with IP anonymization.
• Cookie Management & Browser Controls: You may adjust consent preferences at any time via the "Manage Cookies" button in the site footer, or configure your browser settings to block or delete cookies entirely (Chrome, Edge, Safari, Firefox).

5Security, Encryption & Subject Rights

Data resides on certified cloud infrastructure (Supabase / PostgreSQL) certified under SOC2 Type II and ISO 27001. All network communication is encrypted with TLS 1.3 / HTTPS, and data at rest is encrypted via AES-256.