Supporta website
Privacy Policy
How we handle information when you explore Supporta, contact our team or use the restricted product review.
Last updated 20 October 2026Who is responsible
Supporta is an early-stage project operated by its founding team: Bshara Habib, Yareen Hamdan and Francis Aboud. Supporta is not yet a registered company. In these pages, ‘Supporta’, ‘we’ and ‘our’ refer to that founding team.
The founding team is responsible for the website information described here. Contact us at the email below for privacy questions or requests. This notice covers marketing pages, inquiries and restricted product review. Family accounts, connected-cane information and pilot participation involve separate notices and arrangements. This page does not replace participant consent.
Information we receive
The contact form asks for your name, email address, phone number, inquiry topic and message. An organization name is optional for organization or pilot inquiries. We also receive information you choose to send directly by email and in subsequent correspondence.
Contacting us is voluntary. The fields marked as required are needed to submit the form. You can browse the public website without submitting an inquiry, or contact us directly by email instead. Please do not send passwords, device keys, identification documents or detailed personal health information through this form.
When the website loads, hosting and security services receive technical request information, which may include an IP address, browser and device information, requested page and request time. Cloudflare Turnstile processes browser and network signals to distinguish legitimate visitors from automated abuse.
How we use information
We use inquiry details to respond, arrange relevant conversations or demonstrations, and follow up on the investment, pilot, advisory or partnership topic you select. We use technical information to operate the website, control access, prevent spam and investigate failures or misuse.
Submitting an inquiry does not create a Family account, enroll you in a pilot or subscribe you to marketing emails. We do not sell inquiry information or use it to build advertising audiences. We may also use or disclose relevant records when legally required or reasonably needed to address a security incident or legal claim.
Services that help run the website
Vercel hosts the website. Resend delivers contact messages to the Supporta team mailbox, where our email service also processes the correspondence. Supabase stores limited abuse-control and delivery records. Those Contact records contain keyed digests, counts, timestamps and delivery status, rather than the inquiry’s name, email, phone, message or raw IP address. Inquiry content still exists in the delivery service and team mailbox.
Cloudflare Turnstile processes verification signals, including IP and browser information, for security and service improvement as described in its privacy addendum. Our verification request does not include the text or contact details you enter in the form.
These providers may process information outside Israel. Their locations, retention and processing arrangements depend on the service and account configuration. Their notices explain their own practices; they do not replace this notice about Supporta. Links to other websites are subject to those websites’ practices.
Cookies and browser storage
Restricted review uses a time-limited access cookie to remember an approved session. The accessibility control saves your preferences and its position in local browser storage until you reset them or clear that storage. These settings are separate from your inquiry.
The contact form keeps unsent text in the open page when a submission fails. It does not save that draft to persistent browser storage; reloading or closing the page can discard it. Optional website analytics, when enabled, use the separate choices described below. Hosting and security services still process technical requests.
You can clear cookies and site storage through your browser. Doing so can sign you out of restricted review and reset display preferences. Blocking necessary storage or security scripts may prevent protected pages or the contact form from working; direct email remains available.
Optional website analytics
When website analytics are available, we ask before collecting page views, section reach, selected link clicks, scroll thresholds, broad traffic-source categories and device categories through PostHog. You can reject this collection and still use the website. We use these measurements to understand which public content is useful and improve navigation.
Masked session replay and click heatmaps require a separate optional choice. They describe interaction with public pages, not eye gaze. Replay preserves the public website design and approved published content. We block forms and private content, mask other text and inputs, and exclude account, staff, Family, pilot and private review pages. Contact details and message contents are not joined to this analytics data.
Your choice is remembered in browser storage. After consent, a random identifier is stored for the current browser tab; it is not linked to your account or a named person. We do not use these measurements to identify anonymous visitors, create advertising profiles or track you across devices. The provider still receives the network information needed to process a request.
Use Website privacy on an eligible public page to change your choices or stop optional tracking. Stopping clears the tab identifier and prevents further collection; it does not delete measurements already received. We also respect Do Not Track and Global Privacy Control signals. Provider storage and retention depend on the configured project. Contact the team with questions about retained data.
Retention and security
Inquiry correspondence is retained according to the ongoing conversation, relevant follow-up and any applicable recordkeeping or legal need. There is no single automatic deletion deadline covering the team mailbox, delivery provider and their backups. Contact us to request deletion or ask about information relating to you.
Limited Contact abuse records are subject to age-based cleanup when later Contact activity triggers maintenance. That cleanup is separate from email retention and is not a guarantee that all information disappears at a fixed time. Provider logs and backups follow their own applicable retention arrangements.
We use access controls, encrypted connections and abuse protections. No website or email system can guarantee absolute security. If you believe information has been exposed, contact the team without including additional sensitive details in your initial report.
Your choices and requests
You can ask to review or correct information about you, request deletion, or ask us to stop further inquiry follow-up. Depending on the law that applies, you may also have rights to object to or restrict processing, withdraw consent where processing relies on it, or receive a copy of your information. Some requests are subject to legal exceptions and necessary record retention.
Email the team with ‘Privacy request’ in the subject and enough context to locate your inquiry. We may need proportionate verification before releasing or changing personal information. Do not send an identity document unless we explain why it is necessary and arrange a suitable method. You may also contact the relevant data protection authority, including Israel’s Privacy Protection Authority.
The inquiry and investor-review services are intended for adults. Please do not submit a child’s information. If you believe such information was sent, let us know so we can assess removal.
Changes to this notice
We will update this page when relevant website practices change and revise the date above. If a new activity requires additional information or consent, a revised webpage alone does not replace that requirement.