Privacy policy

1. General

This privacy policy describes how [full business/company name], [business/company registration number] (the "Company", "we"), which operates PIXFLASH, collects, uses, stores and protects personal data in connection with the site pixflash.co.il and the application app.pixflash.co.il (together: the "Service").

This policy is written in accordance with the Israeli Protection of Privacy Law, 1981, the Protection of Privacy Regulations (Data Security), 2017, and Amendment 13 to the Law. Use of the Service constitutes consent to this policy. You are not legally obliged to provide us with information, but without certain information we will not be able to provide the Service.

2. Two types of users — and two levels of responsibility

Subscribers (photographers and studios): with respect to the information you provide us about yourself and your business — the Company is the database owner and the party responsible for the data.

End clients of subscribers (couples, families, event organizers): with respect to information a subscriber enters into the System about their clients — the subscriber is the database owner and the party responsible for it, and the Company acts as a holder on their behalf, processing the data only according to their instructions and for the purpose of operating the Service. If you are a client of a photographer who uses PIXFLASH and you have a question about your data, please contact the photographer first.

3. What information we collect

Depending on how you use the Service, we may collect:

• Account details: name, business name, email, phone, password (encrypted), plan and billing details. Full credit card details are stored only with the payment provider.
• Details submitted in the contact form or in a demo request: name, email, phone and message content.
• Content the subscriber enters into the System: leads, clients, event details, contracts and signatures, photos and videos, payments, financial documents, team details and messages.
• Technical and usage information: IP address, browser and device type, pages viewed, actions in the System, login times and system logs.
• Communication with us: support requests, conversations with the AI agents in the System and correspondence.

4. Why we use the information

• Operating the Service, verifying identity, managing the account and subscription and collecting payments.
• Providing support, responding to enquiries and improving the user experience.
• Sending operational messages (confirmations, charges, service changes, security).
• Sending updates and marketing content — only subject to your consent, and you may unsubscribe at any time.
• Statistical and anonymous analysis to improve the System and develop new capabilities.
• Data security, prevention of fraud and misuse, and compliance with legal obligations.

5. Sharing information with third parties

We do not sell personal data. We share information only to the extent required with providers that help us operate the Service ("holders"), who act on our instructions and are bound by confidentiality and security obligations, including: cloud storage and infrastructure services, payment processing, email and messaging delivery (including WhatsApp), accounting document issuing, usage analytics and artificial intelligence services for processing conversations with the agents.

In addition, we will share information where required by law, judicial order or the demand of a competent authority; to protect our rights, the safety of users or the public; and in the context of a merger, acquisition or transfer of operations — subject to continued protection of the data.

Some providers may operate outside Israel. Transfer of data abroad is carried out in accordance with the Protection of Privacy Regulations (Transfer of Data to Databases Abroad), 2001, to countries providing an adequate level of protection or under appropriate contractual undertakings.

6. Cookies and similar technologies

We use cookies and similar technologies to operate the site and the System (keeping you logged in and remembering preferences), to measure performance and usage, and to measure the effectiveness of marketing campaigns. You can block or delete cookies through your browser settings, but some Service capabilities may not work properly.

7. Data retention

We retain data for as long as the account is active and as required for the purposes for which it was collected. After the subscription ends, the subscriber's content is available for export for 30 days and is then deleted, except for data we are legally obliged to retain (such as billing and accounting records, for up to 7 years) or that is required for legal defence. Anonymous statistical data may be retained indefinitely.

8. Data security

We implement physical, technological and organizational security measures in accordance with the data security regulations, including: encrypted communication (TLS), password encryption, permission controls and access separation, monitoring and routine backups. However, no online system is entirely immune, and we cannot guarantee absolute security. You must keep your login credentials confidential and limit team permissions to the minimum required.

In the event of a serious security incident concerning your data, we will act in accordance with our reporting obligations under law and will notify you as required.

9. Your rights

Under the Protection of Privacy Law, you are entitled to review the data we hold about you, to request the correction of data that is incorrect, incomplete or out of date, and to request its deletion subject to retention obligations under law. You may also request not to receive marketing mailings at any time. To exercise your rights, contact us using the details at the end of this policy; we will respond within a reasonable time and in accordance with the timeframes set by law.

If you are an end client of a subscriber, please contact the subscriber (the photographer), who is the database owner; we will assist them in fulfilling your request as needed.

10. End client content — guidance for subscribers

As a subscriber, you are responsible for ensuring that the collection of data about your clients and its entry into the System are lawful: providing notice to data subjects under section 11 of the Law, obtaining consent to send messages, not entering sensitive data that is not required, and limiting team access as needed. The System provides tools to help with this, but the legal responsibility rests with you.

11. Minors

The Service is intended for business owners aged 18 and over. We do not knowingly collect data from minors as subscribers. Data about minors appearing in subscriber content (for example in event forms) is entered by the subscriber and is their responsibility.

12. Changes to this policy

We may update this policy from time to time. We will give notice of a material change through the System or by email. The current version and the date of update will always appear on this page.

13. Contact

For any question, request or complaint regarding privacy you may contact the Company's privacy officer: [name], by email at [email address], by phone at 055-936-3701 or through the contact page on the site.