מדיניות פרטיות

Privacy Policy (English)

Who we are. Smart Lead Desk (the "Service") is operated by Yizhak Ohad, a registered sole proprietor (Osek Murshe) in Israel. Privacy contact: support@smartleadesk.co.il.

The Service helps businesses (for example, real estate agents) manage their calls and clients. For data about a business's own clients, the business is the controller and the Service processes that data on its behalf and under its instructions.

Data we collect. Account details (name, email, business name and settings); business phone calls received from the business's phone line provider, with their transcripts and summaries, and missed calls (number and time only); contacts, notes, tasks and meetings; and technical logs needed for security and operation.

WhatsApp and Meta data. When a business connects its WhatsApp Business account, we receive and store the business phone number and display name, messages sent and received on the connected number, contact names and phone numbers in those conversations, message templates and delivery statuses. We use this data only to show the business its conversations, send messages the business approved, and create tasks and reminders for the business. We do not sell this data, do not use it for advertising, and do not share it beyond what is needed to run the Service. The business can disconnect at any time and request deletion.

Google data. If a business connects a Google account, the Service accesses Contacts and Calendar only to sync contact names and create meetings the business requested. Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data we receive from Meta and why. WhatsApp Business Account ID and phone number ID (to send and receive messages for the business and route them to the right account); message content, contact phone numbers and names (to show the business its conversations in the lead card); delivery statuses — sent, delivered, read, failed (to show whether a message arrived); message templates and their review status (to let the business create and send templates). We use this data only to operate the business's own WhatsApp messaging. Content of messages between a business and its clients is not sent to AI providers, with two exceptions: (1) messages the business owner sends to the Smart Lead Desk assistant number, which OpenAI processes to perform the owner's request; (2) only if the business turns on the client assistant: when a client calls the business and the call is not answered, the assistant may send that client one WhatsApp message on the business's behalf, and if the client replies, OpenAI processes the client's messages to answer on the business's behalf, understand the request and prepare a summary for the business owner. The assistant introduces itself as the business owner's assistant, says it is an AI assistant if asked, and hands the conversation to the owner when needed. It does not promise prices, availability or meetings and does not send listings without the owner's approval. A client can ask for a person at any time, or reply "הסר" (stop) to receive no further messages.

Usage analytics. We use Google Analytics and Microsoft Clarity to understand how the Service is used and to improve it: which screens are opened and where people click. They run only on the Service's screens after sign-in (and on the sign-in and sign-up screens), never on pages that a business's clients see. All text and fields are masked, and no names, phone numbers, transcripts or client identifiers are sent.

Where data is processed. Cloudflare (hosting; EU and US), OpenAI (US), Google (US; encrypted backup stored in Israel), Meta (US), the phone line provider (Israel), the email delivery provider (US).

Service providers. Cloudflare (hosting), OpenAI (call transcription and summaries), Google (contacts, calendar and encrypted backup), Meta (WhatsApp), the business's phone line provider (recordings), and an email delivery provider. Each receives only the data it needs.

Retention and security. Each business's data is kept separate. Access is restricted and backups are encrypted. Data is kept while the account is active and deleted within 30 days of a deletion request or account closure, except where the law requires otherwise.

Your rights. You can request access, correction or deletion by emailing support@smartleadesk.co.il or by following the instructions on the Data Deletion page.