Privacy Policy
Last updated: 14.10.2026
This policy explains what information Ishai Nissim Zaffran (Israeli exempt dealer), business no. 324828300 ("we", "us") collects through Tamidkan (the "Service"), why, who we share it with, and your rights. It is written under the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13, and the Israeli data security regulations. If the Hebrew and English versions differ, the Hebrew version prevails.
1. Two kinds of data, two roles
| Data | Who is responsible | Our role |
|---|---|---|
| Data about businesses that sign up and their users (name, email, phone, business details, settings, usage data) | Us | Database controller |
| Data about the businesses' leads and customers (people who fill in a form on a business's website, receive a message from it, or book an appointment) | The business using the Service | Holder (processor): we process it only for the business and on its instructions |
If you left your details on a business's website that uses the Service, that business is responsible for your data. Please read its privacy policy. You may also contact us and we will forward your request to the business.
2. What we collect
About businesses and users:
- Signup details: name, email, phone, business name, field, service area.
- Business profile: services, prices, message templates, testimonials and photos of work.
- Connections: access tokens for accounts you connect. Today: Google Calendar, and a Facebook Page with its Instagram account if the business connected them. If more connections are added (WhatsApp Business, Google Business Profile), we will update this section. Tokens are stored encrypted.
- Payment: payment is made on Grow's (Meshulam) page. Grow processes the card details; we do not see or store them. We pass the payer's name, phone and email to Grow, and receive the payment status, amount, date and transaction IDs.
- Technical usage data: IP address, device and browser type, activity logs, and our two cookies: login and language (section 10).
About the businesses' leads and customers (on the business's behalf):
- Name, phone, email.
- Enquiry content: what is needed, uploaded photos or files, budget and requested timing.
- Messages sent and received by email, WhatsApp or SMS.
- A message or comment you sent to the business's Facebook Page or Instagram account, if the business connected them: the content is read only to decide whether to send you a private link to the enquiry form. We keep only the ID the network gives you (not your name), the date and what was sent. The message content is not stored.
- Calendar appointment details.
- Call transcripts, if the business uploads them.
- Satisfaction answer and review request.
Sensitive data: If you contacted a business in health or therapy, your enquiry may include information about your health. This is data of special sensitivity under the Israeli Protection of Privacy Law. It is used only so the business can get back to you and handle your enquiry, for nothing else, and is deleted when the business deletes the enquiry. You do not need to write more in the form than is needed to get a reply.
3. How we use data
- To provide the Service: capture leads, prepare draft messages, book appointments, send reminders and review requests, according to the business's settings and approvals.
- To run AI agents that prepare drafts (see Section 5).
- To bill and manage subscriptions.
- To provide support and send service messages (for example a reminder before the trial ends).
- To secure the Service, prevent abuse and comply with law.
- To improve the Service using aggregated usage data that does not identify people.
- To send businesses marketing updates, only with consent and with an opt-out in every message.
We do not sell personal data and we do not use lead data to market to leads ourselves.
4. Who we share data with
With service providers who help us run the Service, only as needed:
| Provider | Purpose | Data location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU |
| Vercel | App hosting and scheduled jobs | US / EU |
| Anthropic (Claude) | AI for drafting and reading images | US |
| Resend | Sending email | US |
| Grow (Meshulam) | Payments and the monthly standing order | Israel |
| Meta (WhatsApp Cloud API, Messenger, Instagram) | Sending and receiving WhatsApp messages, and replying with the form link on Facebook and Instagram, if connected | Per Meta |
| Cloudflare | Domain protection, our email routing, and the "are you human" check on the intake form | US / EU |
| Calendar, reviews and business profile, if connected | Per Google |
Also: where required by law or court order; to protect rights or safety; and in a merger or sale of our business, subject to similar commitments.
Transfers abroad: Some providers store data outside Israel. We transfer data only under the Israeli Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 5761-2001, and under agreements that require providers to protect it.
5. Artificial intelligence
- Agents send our AI provider (Anthropic) only the data needed to prepare a specific draft.
- Under Anthropic's commercial terms the data is not used to train models. We do not train models on it either.
- By default a person at the business approves every message before it is sent. Agents make no decisions with legal or similarly significant effects on anyone.
- Price estimates in the form are preliminary and automated, not a binding offer.
6. Google user data
Tamidkan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We access Google Calendar only to check availability and to create and update appointments the business approved.
- We access Google Business Profile only to read and reply to reviews and to publish updates the business approved.
- We do not use Google user data for advertising, do not sell it, and do not transfer it to others except as needed to provide the Service, for security, or to comply with law.
- No human reads this data unless you consent, for security purposes, to comply with law, or when it is aggregated and anonymized.
- Google user data is not used to develop, improve or train generalized AI or machine learning models.
You can disconnect at any time in the Service settings or in your Google account permissions.
7. Retention
- Business data: while the account is active. To close an account, email support@tamidkan.co.il. Before closing you can export your customer list from the app (Export to Excel). After closing we delete the data within 30 days, except data we must keep by law.
- Lead data: until the business deletes it, and no longer than the business's account. The business can delete a lead at any time and stop messages to a customer at any time.
- Accounting records: 7 years, as required by law.
- Activity and security logs: 24 months, then deleted automatically.
- Backups: deleted in the hosting provider's normal cycle, within 30 days.
8. Security
We apply measures under the Israeli Protection of Privacy Regulations (Data Security), 5777-2017: separation of data between businesses, encryption in transit (TLS) and at rest, encrypted access tokens, least-privilege access, access logging, backups and testing. No system is fully secure. If a severe security incident occurs, we report it to the Privacy Protection Authority and to affected parties as the law requires.
9. Your rights
Under the Israeli Privacy Law you have the right to:
- access your data (Section 13);
- request correction or deletion of data that is inaccurate, incomplete, unclear or outdated (Section 14);
- be removed from a direct-mail list (Section 17F) and refuse advertising messages (anti-spam law);
- withdraw consent you gave and disconnect connected accounts.
Providing data: You are not legally required to give us data. Without signup details we cannot open an account, and without certain connections some features will not work.
To make a request: support@tamidkan.co.il. We respond within 30 days. If the request concerns data a business stored about you, we forward it to that business and help it respond. If you are unhappy with how we handled it, you may contact the Israeli Privacy Protection Authority.
Data deletion
You can ask us at any time to delete your data from the service, including data that reached us through WhatsApp, Facebook or Instagram. If you left your details in a form of a business that uses our service, that business is responsible for the data. You can contact it directly, or contact us and we will pass the request on.
- Email support@tamidkan.co.il with the subject "Data deletion".
- Include the phone number or email you used, and the business name if you contacted a business.
- We handle the request within 30 days. Data we hold ourselves is deleted. Data a business stored about you is deleted by that business: we forward your request to it and help it respond. Data we must keep by law (for example invoices) is kept only for the required period.
10. Cookies
We use two cookies of our own: a login cookie (expires after one day) and a language cookie (one year). Both are needed to run the Service and are not used for tracking. We have no analytics or advertising tools. If any are added, we will update this section and ask for consent.
Payment is made on Grow's page, on their website and not ours, and Grow's privacy policy applies there. Our website loads no component of the payment provider.
The intake form embedded on businesses' websites does not set tracking cookies. It includes Cloudflare's "are you human" check (Turnstile), which may process the visitor's IP address to detect bots.
11. Children
The Service is for businesses and people over 18. We do not knowingly collect children's data.
12. Privacy officer
No privacy officer has been appointed at this time. For any privacy matter: support@tamidkan.co.il. If one is appointed, we will update this section.
13. Changes
We update this policy from time to time. We give notice of a material change by email or in the app before it takes effect.
14. Contact
Ishai Nissim Zaffran (Israeli exempt dealer, no. 324828300) · Ashdod, Israel · support@tamidkan.co.il · +972-55-280-6046