Hasama

Privacy policy

Updated: 2026-11-04

This policy explains what personal data Hasama ("the site", "we"), operated by LegoTech, collects, why, who it is shared with and your rights. It follows Israel's Protection of Privacy Law, 5741-1981 and its regulations (including Amendment 13).

1. What we collect

  • Account: name, email and, if you sign in with Google, your Google account ID (never your password).
  • Profile: phone, city, professional headline, LinkedIn link.
  • CVs and cover notes you upload, and their text.
  • Applications: which jobs you applied to, when, and their handling status.
  • Technical: IP address, browser type, and security logs (sign-ins, file downloads).

2. How we use it

  • To let you search jobs and apply.
  • To pass your application to the placement agency that posted the job — and only to it — so it can review it, contact you and present you to employers.
  • To compute, at the agency's request, an automated CV-to-job match score (section 4).
  • To send you messages about your applications and, if you opted in, job alerts.
  • To secure the site and prevent abuse.

3. Sharing

  • The agency you applied to, which may present you to its client employer for that job, as you consented when applying. Other agencies do not see your data unless you explicitly opt in to the "shared pool" in your profile.
  • Service providers acting for us: hosting, email, and an AI provider (Anthropic) for match analysis — bound by confidentiality and not allowed to use the data for their own purposes.
  • Authorities, where required by law.

We do not sell personal data.

4. Automated match score (AI)

Agencies may use a tool that compares your CV with the job requirements and produces a score and notes. It is instructed to ignore age, gender, religion, origin, family status, pregnancy, disability and other protected traits under the Equal Employment Opportunities Law. The score is advice only; a person at the agency makes the decision.

5. Security

Files are kept in private storage that is not reachable from the internet and are delivered only to authorised users over HTTPS. Every file is checked before it is stored and every CV download is logged.

6. Retention

Data is kept while your account is active. CVs of accounts inactive for 24 months are deleted automatically.

7. Your rights

  • View and correct your data in "My area".
  • Delete your account: My area → "Delete account". This removes your CV and personal details.
  • Withdraw consent to alerts at any time.
  • Contact us: ofirmalach@gmail.com. You may also complain to the Privacy Protection Authority.

8. Cookies

Only essential cookies: a sign-in cookie and a language cookie. Google sign-in is provided by Google under its own privacy policy.