Privacy Policy

Operated by Maor Intelligent Solutions LLC · Effective Date: May 7, 2026 · Last Updated: May 7, 2026

1. Who We Are

Maor Intelligent Solutions LLC ("we," "us," or "our") operates Torah Readers Tikkun, a free web-based digital Tikkun available at itorah.life. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use the service ("Service").

By creating an account and using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree, please do not create an account or use the Service.

2. Information We Collect

Information you provide directly

When you register for an account, we collect:

Full name
Email address
Organization or synagogue affiliation
Password — stored only as a one-way cryptographic hash (bcrypt). We never store or have access to your plain-text password.

Information collected automatically

When you access the Service, our servers automatically record:

IP address
Approximate geographic location derived from your IP address: country, region, city, ZIP/postal code, time zone, and metropolitan area
Login dates and times
Usage statistics — number of logins and number of Torah reading queries (aggregate counts only, not the specific content you read)

Information from third parties

Google reCAPTCHA v3 processes browser and device data when you submit registration and login forms. See Section 5 for details.

3. Legal Basis for Processing (GDPR / LGPD)

For users in the European Economic Area (EEA), United Kingdom, and Brazil, we process personal data under the following legal bases:

Data	Legal Basis	Reference
Name, email, organization, password hash	Contract performance — necessary to create and maintain your account	Art. 6(1)(b) GDPR · Art. 7(V) LGPD
IP address, geographic data, login dates, usage counts	Legitimate interests — operating and securing the Service, detecting and preventing abuse, understanding geographic usage patterns	Art. 6(1)(f) GDPR · Art. 7(IX) LGPD
reCAPTCHA interaction data	Legitimate interests — protecting forms against automated abuse (bot detection)	Art. 6(1)(f) GDPR · Art. 7(IX) LGPD

Balancing test: Our legitimate interests do not override your fundamental rights. You have the right to object to processing carried out under a legitimate interests basis — see Section 10.

4. How We Use Your Information

We use the information we collect to:

Create and manage your user account
Authenticate you when you log in
Send transactional emails (account confirmation, password reset)
Detect and prevent fraud, automated abuse, and unauthorized access
Understand general geographic usage patterns (aggregate, not individual-level)
Maintain and improve the Service

We do not use your information for behavioral advertising, individual profiling, or sale to third parties.

5. Third-Party Service Providers

Google reCAPTCHA v3

We use Google reCAPTCHA v3 on our registration and login forms. reCAPTCHA collects hardware and software information from your device — including browser type, plugins, mouse movements, and a session fingerprint — and sends it to Google to determine whether you are a human or a bot. This data is subject to Google's Privacy Policy and Google's Terms of Service . We use reCAPTCHA solely as a security measure and do not receive individual-level data from Google about your identity.

Email delivery

Transactional emails (account confirmation, password resets) are sent via our email infrastructure. Your email address is used solely for delivery of these messages.

We do not share your personal data with any other third parties and we do not sell, rent, or trade personal information.

6. Cookies

We use only strictly necessary cookies — cookies that are essential for the website to function. We do not use advertising, analytics, or tracking cookies. See our Cookie Policy for full details.

7. Data Retention

We retain your account data for as long as your account exists. If you request deletion of your account and personal data, we will remove your information from our active systems within 30 days of your request, subject to any legal obligation to retain data.

We do not automatically delete inactive accounts; your data will be retained until you request its deletion.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Passwords are stored as bcrypt hashes — they cannot be reversed
Account creation requires email verification
Registration and login forms are protected by Google reCAPTCHA
Connections to the Service are encrypted via HTTPS/TLS

No system can guarantee absolute security. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users as required by applicable law.

9. International Data Transfers

The Service is hosted and operated in the United States. If you are located in the European Economic Area, United Kingdom, or Brazil, your personal data will be transferred to and processed in the United States, which may not provide the same level of data protection as your home jurisdiction.

We rely on the transfer being necessary for the performance of our contract with you (account creation and service delivery) as the legal basis for this transfer (Art. 46 GDPR; Art. 33 LGPD).

10. Your Rights

Depending on where you live, you have the following rights regarding your personal data:

EEA and UK users (GDPR)

Access (Art. 15)

Request a copy of the personal data we hold about you.

Rectification (Art. 16)

Request correction of inaccurate or incomplete data.

Erasure (Art. 17)

Request deletion of your personal data ("right to be forgotten").

Restriction (Art. 18)

Request that we limit processing of your data in certain circumstances.

Portability (Art. 20)

Receive your data in a structured, machine-readable format.

Object (Art. 21)

Object to processing based on legitimate interests.

You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your national data protection authority in the EU).

California users (CCPA / CPRA)

Right to know — what personal information we collect, use, disclose, and sell
Right to delete — request deletion of your personal information
Right to correct — request correction of inaccurate personal information
Right to opt out of sale or sharing — we do not sell or share your personal information for cross-context behavioral advertising
Right to non-discrimination — we will not discriminate against you for exercising these rights

California residents may submit requests by contacting us at admin@itorah.life. We will respond within 45 days, with a possible 45-day extension if needed.

Brazil users (LGPD)

Confirmation of processing and access to your data (Art. 18, I–II)
Correction of incomplete, inaccurate, or outdated data (Art. 18, III)
Anonymization, blocking, or deletion of unnecessary data (Art. 18, IV)
Data portability (Art. 18, V)
Deletion of data processed with your consent (Art. 18, VI)
Information about entities with whom data is shared (Art. 18, VII)
Information about the possibility of denying consent and the consequences (Art. 18, VIII)
Revocation of consent (Art. 18, IX)

Brazilian residents may submit requests to admin@itorah.life. We will respond within 30 days.

How to exercise your rights

To exercise any right listed above, email us at admin@itorah.life with the subject line "Privacy Rights Request." We will verify your identity and respond within the applicable timeframe: GDPR/LGPD — 30 days; CCPA — 45 days.

11. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the EEA where applicable). We do not knowingly collect personal information from children under these ages. If you believe we have inadvertently collected such data, please contact us immediately at admin@itorah.life and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the revised version at this URL with an updated effective date. We encourage you to review this page periodically. Continued use of the Service after changes are posted constitutes your acknowledgment of the updated policy.

13. Contact Us

For privacy-related questions, requests, or concerns:

Maor Intelligent Solutions LLC
Torah Readers Tikkun — itorah.life
Email: admin@itorah.life