Privacy Policy – 1to1000

Last updated: June 8, 2026 · Version: 2026-06-08-v1

This Privacy Policy (the "Policy") describes how Ehad Le-Elef Bishvilcha Ltd. (אחד לאלף בשבילך בע"מ), 10 Sirkin Street, Tel Aviv ("we", "us", "1to1000") collects, uses, stores and discloses personal information about you when you use the Service. This Policy is in addition to and forms part of our Terms of Service. For privacy inquiries: [email protected].

This Policy is drafted in accordance with Israel's Privacy Protection Law, 5741-1981 and its regulations, and aligned with generally accepted GDPR principles to the extent applicable to users in the EU.

1. Information we collect

1.1 Information you provide directly:

Registration details: name, email, phone number, WhatsApp number;
Professional profile (for broker users): brokerage license number, areas of activity, specialization, organization/office, profile photo;
Property details you uploaded or synced;
Communications: support requests, feedback, reports;
Payment details: processed via Tranzila; we do not store full card data.

1.2 Information collected automatically:

Usage data: actions, searches, views, dates and times of use;
Device data: IP address, browser type, operating system, device identifier;
Cookies and similar technologies (see Section 7).

1.3 Information from third parties:

Google sign-in: name, email and profile photo;
Syncing from Yad2 / Madlan / Homely: property data, contact details, and agent details associated with your account;
Analytics providers (Google Analytics, Sentry, Customer.io, Logfire);
Lead Discovery: publicly available information from Facebook regarding people who have publicly expressed interest in properties.

2. Purposes of use

Providing, operating and improving the Service;
Personalizing search results and smart matching between property seekers and property owners;
Account verification, fraud prevention, and system security;
Providing AI features: photo editing, marketing content generation, automated conversations;
Communicating with you about the Service, your account, and material updates;
Statistical usage analysis to improve the product;
Sending marketing material (only with your separate consent);
Complying with legal obligations, regulatory requirements, court orders.

3. AI usage and data processing

Some of our AI features operate via models from external providers — primarily Google Gemini and Veo. When using these features:

Input you send may be sent to the model provider to perform the task;
We work with these providers under agreements that protect data and do not allow them to use your data to train public models;
We may use aggregated and anonymized data to improve product quality.

3.1 Google API Services — Limited Use Disclosure

1to1000's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect your Google account to 1to1000 (e.g. Google Sign-In, Google Calendar):

We request only the minimum scopes required to provide the features you have explicitly enabled — for example, reading and writing calendar events that you or our broker assistant create on your behalf for scheduling property visits and follow-ups.
We do not sell or transfer Google user data to third parties for advertising, marketing, or any unrelated purpose.
We do not allow humans to read Google user data, except (a) with your explicit consent for the specific data in question, (b) for security investigations or to resolve specific abuse, (c) where required by applicable law, or (d) where the data has been aggregated and de-identified.
We do not use Google user data to develop, improve, or train generalized AI/ML models. Specific AI features that operate on data you explicitly submit (e.g. drafting an email reply you asked for) are performed in real time to fulfill that user-facing action only.
You may disconnect Google access at any time from your account settings, or by revoking 1to1000's access at https://myaccount.google.com/permissions.

For deletion requests covering data obtained from Google APIs, follow the instructions on our Data Deletion page or email [email protected].

4. Sharing information with third parties

We do not sell personal information. We may share information in the following circumstances:

Other platform users — when a property seeker contacts a property owner / broker;
Service providers — infrastructure, storage, analytics, payments, AI, WhatsApp/Twilio, email delivery;
Legal framework — if required by law, court order, or a request from a competent authority;
Mergers and acquisitions — in a merger, acquisition, or transfer of assets;
With your consent — for any other purpose to which you separately agree.

5. International transfers

Some of our service providers operate outside of Israel, including in the EU, US, and elsewhere. Transfers are made subject to appropriate contractual protections (Standard Contractual Clauses or equivalent mechanisms).

6. Data retention and deletion

We retain the information for as long as necessary for the purpose for which it was collected, or longer if the law so requires.
A user account inactive for over 3 years may be deleted automatically.
Upon deletion of your account, we will delete personal data, but will retain data we are required to keep for legal, accounting, or legal-defense purposes.

7. Cookies and tracking technologies

We use cookies for login state, language preferences, analytics, error monitoring, and customer communication tools. You can restrict cookies via your browser settings, but doing so may impair Service functionality.

8. Your rights

Right to access — to receive information about your personal data held by us (Section 13 of the Privacy Protection Law);
Right to correction — to request correction of inaccurate or incomplete information (Section 14);
Right to deletion — to request deletion of personal data, subject to exceptions in law;
Right to object to direct marketing — you can unsubscribe at any time;
Right to portability — to receive your data in a structured, usable format.

For personal-data inquiries: [email protected]. We will endeavor to respond within 30 days.

9. Security

We use reasonable security measures, including encryption in transit (TLS), encryption at rest for sensitive databases, role-based access control, error monitoring, and periodic security reviews. However, no method is 100% secure.

10. Children

The Service is not intended for users under 18. We do not knowingly collect information from minors.

11. Updates to this Policy

This Policy may be updated from time to time. With each update we will change the date at the top of the document, and for material changes we will notify you by email or a prominent in-Service notice.

12. Contact

Ehad Le-Elef Bishvilcha Ltd. (אחד לאלף בשבילך בע"מ)
10 Sirkin Street, Tel Aviv
[email protected]