Legal

Privacy Notice

Last updated: June 2026Version 1.0

1. What Data We Collect

We collect the following categories of data when you use HLS.IL Connect:

Account data: Email address and authentication provider (Google, email/password). This is created when you register.
Profile data: Full name, phone number, role, company, country, LinkedIn URL, and website URL, provided when you complete your profile.
Organization association data: The organization you are associated with or have requested to be associated with on the platform, and the status of that association.
Introduction request data: The content of introduction requests you submit, including connection goals, relevance context, target organizations, and timing.
Feedback and reports: Bug reports, incorrect information reports, and suggestions you voluntarily submit through the feedback flow.
Usage analytics: Page views, organization profile views, search queries, button clicks, session duration, and interaction events. Used to improve the platform and detect abuse.
Security logs: Hashed IP addresses (raw IP addresses are not stored), masked IP identifiers (e.g. 1.2.*.*), IP-derived location data (country, region, city), browser type, device type, operating system, session identifiers, risk scores, suspicious activity flags, and security event records.
Consent records: The date and version of the Terms of Use and Privacy Notice you accepted.
Admin review notes: Where applicable, internal notes added by authorized HLS.IL admins during account review, profile review, or introduction facilitation.

2. Why We Use Your Data

To operate the platform and authenticate your account.
To review profile completeness and verify organizational associations.
To review, facilitate, and communicate about curated introduction requests.
To provide admin support for account and profile management.
To improve the ecosystem by understanding how the platform is used and what is valuable to the community.
To prevent scraping, abuse, unauthorized data extraction, and security incidents.
To analyze usage patterns and improve the product experience.
To send operational communications related to your account or submitted requests.
To comply with legal obligations and protect HLS.IL's legitimate interests.

3. Platform Monitoring, Analytics, and IP Intelligence

HLS.IL may collect and monitor usage analytics including page views, organization profile views, directory search activity, button clicks, session duration, and other interaction events. These analytics are stored securely and are accessible only to authorized HLS.IL admins.

Analytics and monitoring data is used for:

Service improvement and platform development
Understanding ecosystem interest and activity patterns
Security monitoring and incident response
Abuse prevention and rate limiting
Detecting and preventing scraping, data harvesting, automated extraction, and unauthorized access patterns
Investigating suspicious behavior and protecting platform integrity

HLS.IL processes IP-derived location data (country, region, and city) and hashed IP identifiers, browser and device data, and security signals to protect the platform, prevent scraping, investigate abuse, and improve the service. Raw IP addresses are not stored. Masked IP identifiers (which show only the first portion of an IP address, such as 1.2.*.*) and location data derived from IP headers are retained for security and fraud prevention purposes.

HLS.IL may monitor activity to detect and prevent scraping, harvesting, abuse, unauthorized data extraction, and security incidents. Suspicious activity such as excessive page views, rapid organization browsing, automated request patterns, bulk data collection attempts, or other indicators of data harvesting may result in rate limiting, access restrictions, IP-level blocking, investigation, and legal action where appropriate. Specific IP addresses or address ranges may be blocked where abuse is identified.

4. Who Can Access Your Data

You: You can view your own profile details and the status of your submitted requests.
Authorized HLS.IL admins: HLS.IL team members can access your profile, activity records, and submitted requests for the purposes of platform operation, introduction facilitation, security review, and community management.
Selected partners (introduction only): Your contact details and relevant profile information may be shared with a specific organization or individual only after you submit an introduction request and HLS.IL reviews and facilitates it. No contact information is shared automatically or without review.
Service providers: Infrastructure and hosting providers necessary to operate the platform may have limited access subject to appropriate data processing agreements.
Legal or security authorities: Where required by applicable law, legal process, or to protect against serious misuse, fraud, or security threats.

5. What Is Not Public

The following data is never displayed publicly on the platform:

Your email address, phone number, and personal contact details
Admin notes or internal review comments
Your activity analytics and session data
Introduction request content, messages, and history
Profile update submissions and review history
Organization association review details
Consent records and timestamps
Feedback report private details
Security log entries and risk flags

6. Data Sharing for Introductions

Contact details and profile information are not shared automatically. HLS.IL may share relevant profile and contact details only when all of the following conditions are met:

You have submitted an introduction request or participated in an opportunity request through the platform
HLS.IL has reviewed the request and determined a relevant fit
HLS.IL has decided to facilitate the introduction
The sharing is directly relevant and proportionate to the specific request

7. Data Security

HLS.IL uses reasonable administrative, technical, and organizational measures designed to protect your personal data, including:

Role-based access controls with admin-only access to private data
Server-side authorization on all protected API endpoints
Row-level security (RLS) on the database layer
Hashed and masked IP addresses in security logs (raw IPs are never stored)
IP-derived location data (country, region, city) processed for security purposes only
Rate limiting and abuse prevention on public-facing APIs
Activity monitoring to detect and prevent scraping, unauthorized access, and abusive patterns

No system can be guaranteed to be completely secure. HLS.IL does not promise or guarantee absolute security of data and recommends that you exercise reasonable care with your account credentials. Users should not submit information they are not authorized to share.

8. Data Retention

We retain your data for as long as necessary to operate the platform, manage the ecosystem community, fulfill requests, maintain security records, and comply with applicable legal or legitimate business obligations. Account and profile data is retained while your account is active. Analytics events and security logs are retained for operational and security purposes.

You may request deletion or correction of your account and associated personal data by contacting us (see Section 11). Requests will be handled subject to applicable law and operational necessity.

9. Cookies, Local Storage, and Session Identifiers

HLS.IL Connect uses browser session storage and local storage to maintain session identifiers for analytics, security, and user experience purposes. These identifiers are anonymous and do not directly identify you as an individual.

We give you control over optional cookies through the cookie consent banner and Cookie Preferences link in the footer. Optional cookies are only loaded after you provide consent.

9a. Cookie Categories

Essential cookies: Required for login, security, and basic site functionality. These cookies cannot be disabled. They include session identifiers, authentication state, and security tokens.
Analytics cookies: Help us understand how visitors use the platform so we can improve it. We may use tools such as Google Analytics. These cookies are only loaded if you consent. They do not include your name, email address, phone number, or any other directly identifying personal data.
Marketing cookies: Help us measure the effectiveness of campaigns and reach relevant audiences on platforms such as Google, LinkedIn, and Meta. These cookies are only loaded if you consent. They may be used to build anonymous audience segments and measure ad performance. No private contact details are shared with advertising platforms.

You can change your cookie preferences at any time using the link in the footer. Changing your preferences takes effect immediately on the current session.

10. Your Rights

Subject to applicable law, you may have the right to:

Request access to the personal data we hold about you
Request correction of inaccurate or incomplete data
Request deletion of your account and associated personal data
Object to or request restriction of certain processing of your data
Lodge a complaint with a relevant data protection authority

To exercise these rights or for any privacy-related inquiry, contact: zak@hlsil.co.il

11. Contact

For questions, requests, or concerns regarding this Privacy Notice or your personal data, contact: zak@hlsil.co.il