Elkabetz Yazamut Ltd. (אלקבץ יזמות בע״מ), company no. 515872067 ("the Company", "we"), operates Dio Fairs and respects its users' privacy. This policy explains what data we collect on the website, the web app and the phone apps, how we use it and how we protect it. If this translation and the Hebrew version differ, the Hebrew version prevails.
1. Data we collect
1.1 Data you give us: name, phone number, email address, business details (name, company or VAT number, address) and invoice details.
1.2 Data a business manages in the Service: tours, departures and calendar; customers and participants (names, phones, emails, bookings, participant declarations and attendance); suppliers and team members; expenses and receipt photos; messages and enquiries.
1.3 Payment details: card details are not stored by us. They are entered on the clearing company's page and stored there, encrypted.
1.4 Data collected automatically: usage data (screens and pages, sign-in times), device details (operating system, app version) and server logs. The website may use cookies and measurement tools.
1.5 Phone permissions: camera and photos, only when you choose to take or attach a picture (a receipt or a tour picture, for example). The app does not collect your location.
2. Google Calendar
2.1 If you connect your Google Calendar, you give us read-only access to your busy times (free/busy) and to the connected account's email address. We do not see event titles, attendees or content, and we do not write to your calendar.
2.2 Busy times are used only to schedule departures and quotes and to show them in the Service's calendar. We do not share them with third parties.
2.3 You can disconnect at any time in the app's settings ("Google Calendar") or in your Google account settings.
3. How we use data
3.1 To run the Service and tailor it to you.
3.2 To send sign-in codes, reminders, alerts and invitations that users sent.
3.3 To charge the subscription and issue invoices.
3.4 For support, improving the experience and finding faults.
3.5 To meet legal requirements and issue documents the law requires.
4. A business's customer data
4.1 Details of customers, participants, suppliers and staff that a business enters into the Service belong to that business. We process them on its behalf and under its instructions, to provide the Service to it.
4.2 The business is responsible for having permission to collect this data and to message people through the Service. Anyone who wants to see, correct or delete the data a business holds about them can contact the business, and us, and we will help.
5. Sharing with third parties
5.1 We do not sell personal data.
5.2 We share data only with service providers working for us, and only as needed: cloud hosting (Google Cloud, Israel region; Vercel for the website), SMS and email delivery, the clearing company Grow (subscription charges and customer payments to the business's terminal), an accounting-documents service (Glance), and Google when you connect your calendar.
5.3 The website may run measurement and advertising tools (such as Google Analytics, Microsoft Clarity and Meta Pixel). They do not run on private pages sent by link, such as a quote or a booking.
5.4 We pass data to authorities only when the law requires it, for example under a court order.
5.5 Every provider is bound to maintain a high level of security and privacy.
6. Security and retention
6.1 Data is kept on secure cloud servers, with encryption in transit, backups and access control.
6.2 We keep data while the account is active, or as long as the law requires (accounting documents, for example). Data that is no longer needed is deleted.
7. Your rights
7.1 To ask for a copy of your data, correct it or delete it, under the Israeli Privacy Protection Law.
7.2 To unsubscribe from marketing, and from invitations through the link in every invitation.
7.3 To disconnect Google Calendar in the settings.
8. Deleting your account
8.1 In the app: Settings → Delete my account → confirm. The account is closed at once and you are signed out.
8.2 You can also ask for deletion through the support page at https://dio-fairs.app/support, from the phone number on the account.
8.3 After deletion we delete your personal data, except what the law requires us to keep (such as invoices and receipts) and data that is part of another business's records (a booking you made with it, for example).
9. Changes and contact
9.1 We update this policy from time to time. The current version is the one published here, with its update date.
9.2 For privacy questions and requests: through the support page at https://dio-fairs.app/support.