Privacy Policy

This Privacy Policy is provided by Yanza LTD ("we," "us," or "our"), the company that owns and operates the Karaty platform. Yanza LTD is a company registered under the laws of the State of Israel.

This policy applies to all personal information collected through your use of the Karaty platform, including our website, Progressive Web App (PWA), APIs, and any other products or services we offer. It describes what data we collect, why we collect it, how we use and protect it, and what rights you have regarding your information.

By accessing or using Karaty, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. This policy should be read in conjunction with our Terms of Service, which govern your use of the platform. If you do not agree with this policy, please do not use Karaty.

We collect information in several ways when you use Karaty. The types of information we collect depend on how you interact with the platform.

2a. Information You Provide Directly

When you create an account, build your profile, or interact with the platform, you voluntarily provide us with information, including:

• Account information: When you register for Karaty, we collect your username, email address, and password.
• Profile information: You may choose to provide additional information such as a display name, biography, and profile avatar.
• Content: Any content you create or submit to the platform, including posts, comments, votes, and Spaces (communities) you create.
• Communications: Information you provide when you report content, submit moderation actions, contact us for support, or otherwise communicate with us or other users through the platform.

2b. Information Collected Automatically

When you access or use Karaty, we automatically collect certain technical and usage information, including:

• Device information: Browser type and version, operating system, device type, and screen resolution.
• Log data: Your IP address, the date and time of your visits, the pages you view, the page that referred you to Karaty, and other standard server log information.
• Usage data: How you interact with the platform, including features you use, content you view, feed preferences, voting patterns, and navigation paths.
• Local storage and PWA data: Karaty is available as a Progressive Web App. When installed or used, the PWA may store data locally on your device for caching, offline functionality, and preserving your preferences.

2c. Information from Third Parties

We may receive information about you from third-party services that are integrated with or support the Karaty platform:

• Authentication providers: If we introduce social login or third-party authentication options in the future, we may receive basic profile information (such as name and email) from those providers, with your consent.
• Replyke: Karaty uses the Replyke service as infrastructure for social features such as comments, votes, and feeds. Replyke processes certain user interaction data on our behalf in order to provide these features.

We use the information we collect for the following purposes:

• Providing and operating the platform: To create and maintain your account, display your profile, deliver content through feeds and Spaces, enable posting, commenting, and voting, and generally operate all features of Karaty.
• Personalization: To personalize your experience, including ranking content in your feeds, suggesting Spaces you might be interested in, and tailoring recommendations based on your activity and preferences.
• Community digests: To compile and send periodic activity digests to Space owners, summarizing public activity within their communities. These digests contain only publicly available information (such as post titles, comment counts, and activity metrics) and do not include any private user data. For more details, see Section 4.
• Moderation and safety: To enforce our Terms of Service, detect and prevent abuse, spam, fraud, and other harmful activity, respond to user reports, and maintain the integrity of the platform.
• Communications: To send you service-related communications such as account verification, security alerts, platform announcements, digest emails, and notifications about activity relevant to you. You can manage your notification preferences in your account settings.
• Analytics and improvement: To analyze aggregate usage patterns, understand how users interact with the platform, identify areas for improvement, and develop new features and functionality.
• Legal compliance: To comply with applicable laws, regulations, and legal processes, and to protect the rights, property, and safety of Yanza LTD, our users, and the public.

Karaty provides Space owners and moderators with periodic activity digests — email summaries of public activity within their communities. This section explains how digests work and what data they contain.

What digests include. Activity digests may contain information such as post titles, comment counts, engagement metrics, and activity trends for a given Space. All information included in digests is derived exclusively from content that is already publicly visible on the platform.

What digests do not include. Digests do not expose any private or non-public user data. Specifically, digests do not contain: user email addresses, IP addresses, browsing history, private messages, account credentials, or any other information that is not publicly visible on the platform.

Internal platform feature. The digest system is an internal feature of Karaty designed to help Space owners understand and manage their communities. Digests are not an external API, are not shared with third parties, and are sent only to the relevant Space owners and moderators via email.

Your choices. As a user, the content you post publicly may appear in digest summaries for the Spaces where you post. This is a natural consequence of posting public content on the platform. If you are a Space owner receiving digests, you can manage your digest and email notification preferences through your account settings.

Yanza LTD does not sell your personal data to third parties. We share your information only in the limited circumstances described below:

• Service providers: We engage third-party companies and service providers to help us operate and improve the platform. These providers may include hosting and infrastructure providers, email delivery services, and analytics tools. Service providers are given access to your information only as necessary to perform their services on our behalf, and are contractually obligated to protect your data and to use it only for the purposes we specify.
• Replyke: Karaty uses the Replyke service as infrastructure for core social features, including comments, votes, and content feeds. Replyke processes user interaction data on our behalf to deliver these features. Replyke does not independently use your data for its own purposes.
• Legal requirements: We may disclose your information if we believe in good faith that disclosure is required by applicable law, regulation, legal process, or governmental request, including requests from law enforcement or other government authorities.
• Safety and protection: We may share information when we believe it is necessary to protect the rights, property, or safety of Yanza LTD, our users, or the public, including to prevent fraud, enforce our Terms of Service, or address security or technical issues.
• Business transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the platform before your information is transferred and becomes subject to a different privacy policy.
• With your consent: We may share your information in other circumstances if you have given us your explicit consent to do so.

Prohibition on scraping and automated collection. While content posted publicly on Karaty is visible to users and visitors, the automated collection, scraping, crawling, or harvesting of data from the platform is strictly prohibited without the prior written permission of Yanza LTD. This prohibition is detailed in our Terms of Service.

Karaty uses cookies and similar technologies to operate the platform, remember your preferences, and understand how you use our services. Below is a summary of the types of technologies we use:

• Essential cookies: These cookies are strictly necessary for the platform to function. They are used for authentication, session management, security, and preserving your settings and preferences. You cannot opt out of essential cookies, as the platform cannot operate without them.
• Analytics cookies: We may use analytics cookies to collect aggregate information about how users interact with the platform, such as which pages are visited most frequently and how users navigate between pages. This data is used to understand usage patterns and improve the platform. We do not use analytics cookies to track individual users for advertising purposes.
• Local storage: As a Progressive Web App, Karaty may store data in your browser's local storage or cache. This data is used to enable offline functionality, improve loading performance, and preserve your preferences between sessions. This data remains on your device and is not transmitted to our servers unless necessary for platform functionality.

Third-party advertising. Karaty does not currently use any third-party advertising trackers or serve personalized advertisements. If this changes in the future, we will update this policy and notify you accordingly.

Managing cookies. Most web browsers allow you to control cookies through their settings. You can typically choose to block or delete cookies. However, disabling essential cookies may prevent you from using certain features of the platform.

Storage. Your data is stored using cloud infrastructure providers, including Supabase (managed PostgreSQL database) and other cloud services. These providers maintain their own security certifications and compliance standards.

Security measures. We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:

• Encryption of data in transit using HTTPS/TLS
• Encryption of data at rest
• Access controls limiting who within our organization can access personal data
• Regular reviews of our security practices and infrastructure

While we strive to protect your information, no method of electronic storage or transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

Retention. We retain your personal information for as long as your account is active or as needed to provide you with our services. Specifically:

• Account data: Retained for as long as your account remains active. You may delete your account at any time through your account settings.
• Content: Posts, comments, and other content you submit remain on the platform as long as they are not deleted by you or removed through moderation.
• After account deletion: When you delete your account, your personal profile information (display name, bio, avatar, email) is removed. Public content you posted (posts and comments) may be retained in an anonymized form, attributed to a generic "[deleted]" user, consistent with the license granted in our Terms of Service.
• Logs and analytics: Server logs and analytics data are retained for a limited period necessary for security, debugging, and platform improvement, after which they are aggregated or deleted.

We may also retain certain information as required by law, or as necessary to resolve disputes, enforce our agreements, and protect our legal rights.

You have certain rights regarding the personal information we hold about you. Depending on your location and applicable law, these rights may include:

• Right of access: You may request a copy of the personal information we hold about you.
• Right to correction: You may request that we correct or update any inaccurate or incomplete personal information. You can also update much of your information directly through your account settings.
• Right to deletion: You may request the deletion of your account and associated personal data. You can initiate account deletion through your account settings. Please note that certain information may be retained as described in Section 7.
• Right to data portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where we process your information based on your consent, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that occurred before the withdrawal.
• Notification preferences: You can control which email communications you receive from Karaty, including digest emails, notifications, and other platform communications, through your account settings.
• Content deletion: You may delete your own posts and comments at any time through the platform interface.

How to exercise your rights. To exercise any of the rights described above, please contact us at yanza.ltd@gmail.com. We will respond to your request within 30 days of receipt. In certain cases, we may ask you to verify your identity before we can process your request.

If you believe that we have not adequately addressed your privacy concerns, you may have the right to lodge a complaint with the relevant data protection authority.

Karaty is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you are under 13, please do not create an account or submit any personal information through the platform.

If we become aware that we have collected personal information from a child under the age of 13, we will take steps to promptly delete that information and terminate the associated account.

If you are a parent or guardian and believe that your child under 13 has provided personal information to Karaty, please contact us at yanza.ltd@gmail.com so that we can take appropriate action.

Users between the ages of 13 and 18 may use Karaty only with the consent and supervision of a parent or legal guardian, as described in our Terms of Service.

Karaty is operated by Yanza LTD from Israel. However, the infrastructure and services we use to operate the platform may involve the processing and storage of your data in locations outside of Israel, including in the United States and the European Union.

When your data is transferred to or processed in a country outside of Israel, we take steps to ensure that appropriate safeguards are in place to protect your information. These safeguards may include contractual protections with our service providers, reliance on adequacy determinations by relevant authorities, or other legally recognized transfer mechanisms.

By using Karaty, you acknowledge and consent to the transfer, processing, and storage of your information in countries outside of Israel as described in this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, legal requirements, or other factors. When we make changes, we will revise the "Last Updated" date at the top of this policy.

For material changes that significantly affect how we collect, use, or share your personal information, we will provide notice through one or more of the following methods: posting a prominent notice on the platform, sending an email notification to your registered email address, or delivering an in-app notification.

Your continued use of Karaty after the updated Privacy Policy takes effect constitutes your acceptance of the revised policy. If you do not agree with the changes, you should stop using the platform and may delete your account.

We encourage you to review this policy periodically to stay informed about how we protect your information. Previous versions of this policy are available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Entity: Yanza LTD
• Email: yanza.ltd@gmail.com

We will make every effort to respond to your inquiry promptly and to address your concerns in a timely manner.