---
title: 'Privacy Policy'
---

**Effective date:** [[[EFFECTIVE_DATE]]]

**Version:** [[[PRIVACY_VERSION]]]

This Privacy Policy explains how **[[[LEGAL_ENTITY_NAME]]]** ("Multideal," "we," "us") collects, uses, shares, and protects personal data when you use the Multideal website, apps, and related services (the **"Service"**).

It should be read together with our [Terms of Service](/legal/terms) and [Cookie Policy](/legal/cookies).

## 1. Who we are

The data controller for the Service is **[[[LEGAL_ENTITY_NAME]]]**, registration number **[[[COMPANY_REGISTRATION_NUMBER]]]**, of **[[[REGISTERED_ADDRESS]]]**.

Contact: privacy@multi.deal

## 2. What we collect

Depending on how you use the Service, we may process:

- **Account and identity data:** phone number, email address, display name, Firebase authentication identifiers, and session tokens.
- **Transaction data:** orders, vouchers, payment status, refunds, delivery or pickup details you provide, and support communications about a purchase.
- **Payment data:** payment method metadata and transaction references processed by our payment providers. We do not store full card numbers on our servers.
- **Vendor data:** business details, onboarding documents, payout account references, and deal content submitted by vendors.
- **Usage and technical data:** device/browser type, IP address, pages viewed, referral links, locale preference, cookies, and security logs.
- **Communications:** messages sent through the platform, support tickets, and marketing preferences where you opt in.

## 3. How we use data

We use personal data to:

- provide, secure, and improve the Service;
- authenticate users and prevent fraud;
- process purchases, vouchers, refunds, and payouts;
- provide customer and vendor support;
- send transactional notices required for your account or orders;
- send marketing communications only where permitted and, where required, with your consent;
- comply with law, tax, accounting, and dispute-resolution obligations.

## 4. Legal bases

Where applicable, we rely on one or more of the following: performance of a contract, legitimate interests (such as security and service improvement), legal obligation, and consent (for example, optional marketing email).

## 5. Sharing

We share data only as needed with:

- **Vendors** — limited information required to fulfill a deal you purchased (we do not expose customer phone numbers or email addresses to vendors through the marketplace UI);
- **Payment and payout providers** — such as Stripe, to process payments and vendor settlements;
- **Infrastructure providers** — hosting, email delivery, analytics, and error monitoring vendors bound by confidentiality obligations;
- **Authorities** — when required by law or to protect rights, safety, and fraud prevention.

We do not sell personal data.

## 6. Retention

We retain data for as long as needed to provide the Service, resolve disputes, enforce agreements, and meet legal retention duties. When you request account deletion, we delete or anonymize data unless retention is required for transactions, refunds, fraud prevention, tax, or legal claims.

## 7. Security

We use technical and organizational measures appropriate to the risk, including encryption for sensitive fields, access controls, and monitoring. No online service can guarantee absolute security.

## 8. Your rights

Subject to applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent where processing is consent-based. Israeli residents may also have rights under the Protection of Privacy Law, 5741-1981.

To exercise rights, contact privacy@multi.deal. We may need to verify your identity.

## 9. International transfers

Our providers may process data outside Israel. Where required, we use appropriate safeguards for cross-border transfers.

## 10. Children

The Service is not directed to children under 13. If you believe a child provided personal data without appropriate consent, contact us.

## 11. Changes

We may update this Policy. Material changes will be posted with an updated effective date. Continued use after notice may constitute acceptance where permitted by law.

## 12. Contact

**[[[LEGAL_ENTITY_NAME]]]**
privacy@multi.deal
**[[[REGISTERED_ADDRESS]]]**