Data Protection

1. Our Commitment

Druzna is committed to protecting the personal data of every individual who uses our platform. We take our legal obligations seriously under applicable data protection legislation, including the Israeli Privacy Protection Law (1981) and, where applicable, the European General Data Protection Regulation (GDPR).

2. Lawful Basis for Processing

• Consent (GDPR Art. 6(1)(a)): You voluntarily submit your personal information for the purpose of matchmaking via explicit consent provided during registration.
• Special Category Data – Explicit Consent (GDPR Art. 9(2)(a)): Religious affiliation, faith observance level, and Druze ethnic/community identity are classified as special category data and are processed solely on the basis of your separate, explicit consent provided during registration.
• Legitimate Interest (GDPR Art. 6(1)(f)): We process data to operate and improve the platform and protect its security.
• Legal Obligation (GDPR Art. 6(1)(c)): We may process data where required by applicable law or regulatory authority.

3. AI-Assisted Profiling and Automated Processing

• Druzna uses an AI-assisted compatibility review process (GDPR Art. 22). The system analyses profile attributes – including values, background, faith observance, and preferences – to generate compatibility indicators.
• This constitutes automated profiling. However, no legally or similarly significant decision is made solely on the basis of automated processing. All final matching decisions are reviewed and approved by a human administrator before any contact is made. Importantly, the AI system does not accept or reject any user – it only generates preliminary suggestions that are reviewed by a human before any action is taken.
• When a meaningful match is identified, our admin team may contact you personally via WhatsApp (a service of Meta Platforms, Inc.). When contact is made via WhatsApp, your phone number and the content of that communication may be processed by Meta Platforms in accordance with Meta's own Privacy Policy. We recommend reviewing Meta's Privacy Policy if you have any concerns about how WhatsApp processes your data.
• You have the right to object to automated profiling at any time by contacting Admin@druzna.com. In such cases, your profile will be reviewed manually only.

4. Third-Party Data Processors

• Secure Data Management: Profile data submitted through the platform is stored in a secure cloud-based database infrastructure operated on our behalf by Supabase Inc., under Supabase's data processing terms and standard contractual clauses. This infrastructure is located outside of Israel – see Section 7 (International Transfers) for details.
• Resend Inc.: Confirmation and notification emails are transmitted via Resend. Your email address is shared with Resend solely for this delivery purpose.
• Hosting Infrastructure: The platform is hosted on cloud servers. All data in transit is protected by TLS 1.2 or higher encryption.
• All processors are contractually prohibited from using your personal data for any purpose other than providing their service to Druzna.

5. Data Minimisation

We collect only the data strictly necessary to provide the matchmaking service. We do not collect unnecessary personal information and regularly review the data we hold to ensure it remains relevant and up to date.

6. Data Security Measures

• Data in transit is protected using TLS 1.2 or higher encryption.
• Access to personal data is restricted to authorised administrators only.
• We conduct regular internal reviews of our security practices and access controls.
• No profile data is ever shared between users of the platform.
• Our third-party service providers – including Supabase Inc. and Resend Inc. – apply their own industry-standard security and encryption measures to data they process on our behalf.
• While we implement appropriate safeguards to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.

7. International Transfers

• Your personal data may be transferred to, stored in, or processed in countries outside of Israel. Our data processors – Supabase Inc. and Resend Inc. – are based in the United States of America.
• These international transfers are conducted under appropriate legal safeguards, including standard contractual clauses approved by the European Commission and applicable data processing agreements, as required under the Israeli Privacy Protection Law (1981) and the GDPR where applicable.
• By registering on the Druzna platform and consenting to this policy, you acknowledge and consent to the transfer of your personal data outside of Israel for the purposes described herein.

8. Data Retention

• We retain your personal data for as long as your profile remains active. If you request removal of your profile, we will delete your data within 30 business days, except where we are required to retain certain information by law.
• Please note that following account deletion, residual data may remain in encrypted backup systems for a further limited period – typically up to 90 days – before being automatically overwritten or purged in accordance with our infrastructure providers' standard backup rotation schedules. We will not use backed-up data to restore a deleted account or profile.
• Anonymised, aggregated data that cannot identify you may be retained for platform improvement purposes.

9. Minors

• The Druzna platform is intended exclusively for adults aged 18 years and over. We do not knowingly collect, store, or process personal data from individuals under the age of 18.
• If we become aware that a minor has registered on the platform or provided us with personal data, we will take immediate steps to delete that data from our systems.
• If you believe that a minor may have registered on our platform, please contact us immediately at Admin@druzna.com.

10. Accuracy of Profile Information

• Druzna relies on users to provide accurate, truthful, current, and complete information in their profiles. We do not independently verify or authenticate the information submitted by users.
• Druzna accepts no liability for any loss, damage, harm, or adverse outcome arising from inaccurate, false, misleading, outdated, or incomplete information provided by a user in their profile.
• Each user is solely responsible for the accuracy and completeness of the information they submit. Providing false or misleading information may result in immediate removal from the platform.

11. Your Rights

• Right of Access: Request a copy of all personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Request your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interest or automated profiling.
• Right to Withdraw Consent: Withdraw consent at any time without affecting prior processing.
• Right to Lodge a Complaint: If you believe your rights have been violated, you may lodge a complaint with the supervisory authority in your country – in Israel: the Privacy Protection Authority (PPA, gov.il/moked/privacy); in EU/EEA: your national Data Protection Authority.

12. Exercising Your Rights

To exercise any of the rights above, please contact us at Admin@druzna.com. We will respond within 30 days. We may need to verify your identity before processing your request.

13. Changes to This Policy

We may update this Data Protection Policy from time to time. Any significant changes will be communicated to registered users. The updated policy will always be available on this page with a revised effective date.

14. Data Controller Identity

• Druzna is operated by S. Amer, a registered sole proprietor (עוסק פטור) in Israel and is the data controller for the personal data processed through the platform.
• All data-related inquiries, access requests, deletion requests, and complaints should be addressed to: Admin@druzna.com.