Privacy Policy

Last updated: October 22, 2026

This policy explains what information the ציר מרכזי (Tzir Merkazi) management systems (the "System") receive, how it is used and how it is protected. The systems are operated by Chaim Kritzler under the name ציר מרכזי.

1. Information received from Google

• Owner identity: the email address and Google account ID of the system owner, used only to identify the owner and ensure only they can install, reconnect or recover the System.
• Files the System creates in Google Drive (drive.file): the System creates a folder, spreadsheets and backups in the organization's Drive, and reads and writes only those files. It has no access to any other file.
• Sending email (gmail.send): the System sends emails it generates (notifications, reports and messages to the owner) from the organization's address. It does not read, delete or view any email in the mailbox.

2. Where data is stored

• System data is stored in the organization's own Google Drive, under its full ownership.
• Google access credentials are stored encrypted on Cloudflare servers and used only to operate that organization's System.
• System users: username, role and a one-way hashed password are stored on Cloudflare servers.
• For performance, an encrypted copy of screen data may be cached on the server for a few minutes and then deleted.
• The site uses a single session cookie to keep users signed in. No advertising or tracking cookies.

3. Limited use

Data is used solely to provide and improve the System for the organization. We do not sell data, do not use it for advertising, do not transfer it to third parties (other than the infrastructure providers Google and Cloudflare, solely to operate the System), and do not use it to train AI models. No person reads the organization's data unless the organization explicitly requests it for support, or as needed for security or to comply with law.

ציר מרכזי's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Revocation and deletion

The owner can revoke the System's access at any time at myaccount.google.com/permissions. Data in Drive remains the organization's. On request, we delete the access credentials and user records from our servers within 30 days.

5. Security

All communication is encrypted. Access credentials and user passwords are encrypted. Server access is restricted to the System operator only.

6. Contact

fk0534162658@gmail.com