Privacy Policy

1. General

This policy describes what personal information Reflect Media Ltd. ("the Company") collects on the website ratingplus.co.il and in the Rating+ system (app.1st.media), for what purposes, to whom it is transferred, and what rights every person has regarding information about them. This policy is part of the Terms of Use, and its terms have the meanings given in the Terms of Use.

Last updated: September 29, 2026.

2. Database Owner and Contact

Reflect Media Ltd., company no. 516533288, registered address: 11 Buber St., Petah Tikva, Israel, is the owner of the database and is responsible for it. Privacy inquiries: contact@reflect-media.co.il.

3. Information Collected on the Website

Through the "Start tracking a campaign" form: the campaign name, the advertiser name, a work email address, the on-air date (if provided), the selected plan, the page language, and the acceptance of the Terms of Use and the Privacy Policy.

When contacting us by email or WhatsApp: the content of the message and the contact details provided in it.

4. Information Collected in the System

Account details: name, email address and sign-in details.

Organization details: the organization's name, its Users and their permissions.

Campaign selections: the campaigns selected, the measurement audience, the plan and the goals.

Pricing data uploaded by the Customer: rate cards, agreements and pricing data.

Purchase details: the plan, the amount and the invoice details. The System does not store credit card details.

Usage data: sign-in times, screens and actions in the System, and technical data such as browser and device type.

5. IP Addresses and Abuse Prevention

To prevent abuse, such as repeated or mass form submissions, the IP address of a request is stored only as a keyed one-way hash, never in raw form. The hash makes it possible to recognize repeated requests from the same address without storing the address itself.

6. Purposes of Use

The information is used to review requests and issue sign-in links; to create and manage accounts and permissions; to provide the Service, including the dashboards, calculations and emails; to process purchases, issue invoices and collect payment; to provide support and respond to inquiries; for security and abuse prevention; to improve the Service and analyze its use; and to comply with legal obligations.

7. Is Providing Information Required

There is no legal obligation to provide the information, and providing it depends on your choice and consent. However, without the details marked as required in the form or at registration, it will not be possible to handle the request, open an account or provide the Service.

8. Disclosure to Third Parties

The Company does not sell personal information. Information is disclosed only:

(a) to providers that help operate the Service: cloud hosting and application platforms, email delivery, payment processing and invoicing, and analytics tools, to the extent required for their role and subject to confidentiality and security obligations;

(b) to other Users in the same organization, according to the permissions in the organization's account, and to anyone the Customer chose to share a dashboard with, to the extent the Customer chose;

(c) where required by law, under a court order or a demand from a competent authority;

(d) in a merger, acquisition or transfer of the Company's business, provided the recipient undertakes to act in accordance with this policy.

Pricing data uploaded by a Customer is not displayed or disclosed to Users from other organizations.

9. Transfers Outside Israel

Some providers store and process information on servers outside Israel. Such transfers are made in accordance with the Privacy Protection Regulations (Transfer of Data to Databases Abroad).

10. Emails

The Service sends: a personal sign-in link; service emails, such as campaign confirmation, payment and invoice, changes to the account and the plan, and material notices; and a daily summary email to Customers, which includes an unsubscribe link.

Essential service emails are sent for as long as the account is active. Marketing emails, if sent, will be sent only in accordance with the law and with the required consent, with the option to unsubscribe at any time.

11. Cookies, Browser Storage and Analytics

The Website stores the language choice in the browser. The System uses cookies and local browser storage required for sign-in and for keeping the session.

The Company and its providers may use measurement and analytics tools to understand how the Service is used and to improve it. Infrastructure providers may process IP addresses and technical data in their system logs, for operation and security.

Cookies can be blocked or deleted in the browser settings. Blocking essential cookies may prevent signing in to the System.

12. Retention

Website request details: for as long as the request is being handled and a reasonable period after, and if an account is opened, for as long as the account exists.

Account details and campaign data: for as long as the account and the Service are active, according to the dashboard availability periods in the Terms of Use.

Purchase records and invoices: for the period required by law.

IP address hashes: for the period required to prevent abuse.

At the end of the period, the information will be deleted or de-identified, subject to retention obligations under law.

13. Rights of Access, Correction and Deletion

Every person has the right to access information about them held in the database, and to request the correction of information that is inaccurate, incomplete, unclear or out of date, or its deletion. It is also possible to ask not to receive marketing emails.

Requests are sent to contact@reflect-media.co.il. Before handling a request, the Company may ask for details to verify the requester's identity. The Company will respond within the period set by law, and if a request is declined, a reasoned notice will be given.

Deleting information required to provide the Service may require closing the account. A User invited by a Customer may also contact that Customer.

14. Security

The Company takes reasonable and accepted measures to protect the information, including encryption in transit, role-based access permissions and separation between organizations' data. However, absolute protection against unauthorized access cannot be guaranteed.

15. Changes to This Policy

This policy may be updated from time to time. Notice of a material change will be given on the Website, in the System or by email, and the updated version applies from its publication.

16. Contact

Reflect Media Ltd., company no. 516533288, registered address: 11 Buber St., Petah Tikva, Israel.

Privacy inquiries, support and any other inquiry: contact@reflect-media.co.il