1. Information We Collect
1.1 Information you provide
- First and last name
- Email address
- Organization name and role
- Content created and uploaded to the platform (content managers)
1.2 Information collected automatically
- Platform usage data: courses viewed, scores, time spent, progress
- IP address and general location data
- Browser type and operating system
- Cookies — see section 6
2. How We Use Information
We use the information we collect for the following purposes:
- Providing access to the platform, identity verification, and account management
- Displaying courses, tracking progress, and generating reports for the organization
- Improving the product and analyzing issues and bugs
- Sending essential service updates and communications (no marketing without consent)
- Complying with legal obligations
4. Data Retention
- Account data: for the entire term of the engagement, and afterward up to 30 days for full deletion
- Sign-in and administration log (email address, IP address, time and the action taken): 400 days, including after the account or organization is deleted — for security and audit purposes. It is then deleted automatically
- Usage data (AI usage logs, study assistant conversations, sync logs): 12 months from creation, then deleted automatically
- Learning data (progress, quizzes, reflections, questionnaires): for as long as the learner has access, and 12 more months after that access ends — unless otherwise agreed with the organization. Ratings and insights the learner posted in a program remain, no longer attributed to them
- Backups: up to 7 additional days after active deletion — this is our daily backup window
- Google Analytics cookies: 26 months (per Google's default setting, can be shortened)
5. User Rights
Under Israel's Protection of Privacy Law, 5741-1981, you have the following rights:
- Right of access: to request to see the personal information we hold about you
- Right to rectification: to request correction of inaccurate information
- Right to erasure: to request deletion of your information (subject to legal obligations)
- Right to object: to object to the use of your information for marketing
For inquiries on these matters, contact: info@contento.team
7. Information Security
We take security measures in line with the Protection of Privacy Regulations (Information Security), 5777-2017:
- Encryption of data in transit (TLS 1.2+) and at rest
- Role-based access control (RBAC)
- Daily backups
- Security event monitoring
8. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated to you via your registered email at least 30 days in advance. Continued use of the platform after the change takes effect constitutes acceptance of the updated policy.
9. Contact
For questions, inquiries, or to exercise your rights: info@contento.team