Privacy policy

What data is collected

What you fill into the contact form — name, a way to reach you and a short message.
What you send me directly on WhatsApp or by email.
What you write in the assistant chat on the site and, if you leave a request, your name, phone or email and the task.
Technical logs from the hosting provider (IP address, browser type) — created automatically on any site. The server also holds the IP address of whoever submits the form in memory for a short while, to rate-limit spam.

Where the form data goes

The form sends what you filled in to the site's server. From there the data goes straight to me: into my personal enquiry-tracking system, or, if that does not respond, as an email through the delivery service Resend. The site's server itself writes nothing to a database — it only passes things on. To block spam it keeps the sender's IP address in the instance's memory for 10 minutes (no more than 5 submissions in that window); a restart wipes that memory. The form also has a hidden honeypot field for bots — a person never sees it and never fills it in.

The assistant chat on the site

The assistant is an AI, not a person. Your messages pass through the site's server and are sent to the Groq language model (Groq, Inc., USA) — only so that it can produce a reply. Along with the latest messages, the model receives the address of the page you are on.
If you leave a name, a phone or email and a task in the chat, they reach me together with the whole conversation as a request — by the same route as a form submission (see above). Without such a request, the conversation as a whole does not reach me.
Until you leave a request, the conversation is kept only in your browser and is erased when you close the tab. The site's server does not save conversations, except for the hosting provider's technical logs: they record the page address, the beginning of your last message and the beginning of the assistant's reply (about 160 and 200 characters). They are needed to spot where the assistant gets things wrong.
Do not write more than needed in the chat: passport details, card numbers, passwords and the like are not something the assistant needs. To guard against spam, the server briefly keeps your IP address in memory — no more than 40 chat requests in 10 minutes.

Why the data is used

Only to answer your message and run the project. Not for mailings, not for marketing, and not for selling or handing on to anyone else — apart from the delivery services your message physically travels through to reach me (listed below).

Where data is stored and for how long

A request — from the form or from the chat, together with the chat conversation — is stored in my personal enquiry-tracking system, which only I can access. If that system does not respond, the request reaches me as an email and stays in my mailbox. Requests that do not lead to a contract are deleted after 2 years. Other correspondence (WhatsApp, email) is kept while the work continues and as the law requires. There is no mailing list and no contact database for advertising. The services listed below operate outside Israel (in the USA), so data is stored and processed there.

Who else touches the data

Resend (USA) — the email delivery service: the email carrying your request passes through it if the main route did not work.
Groq — the language-model service: it receives the chat messages in order to produce the assistant's reply.
Anthropic (the Claude model) — my AI assistant does a first read of incoming requests: it picks out the point and drafts a reply for me.
WhatsApp (Meta) — if you chose to write on WhatsApp.
The email provider — if you chose to write by email, and also when a form submission reaches me as an email.
Railway (USA) — the site's hosting: processes technical logs.
Cloudflare — DNS and proxy in front of the site: traffic passes through it and it sees the visitor's IP address.
Cal.com — the embedded call booking: if you book, your name, email and meeting time go to Cal.com and into my calendar.

Your rights (תיקון 13)

Under the Protection of Privacy Law and Amendment 13 (תיקון 13) you have the right to know what data is stored about you, to correct it and to ask to delete it. To exercise this right — write to me through the channels below. I will reply within a reasonable time.

Instagram app

For my own Instagram accounts I use my own app (Meta for Developers). It publishes my posts, reads insights, comments and Direct messages of my accounts and helps me reply to them. If you comment on my posts or write to me in Direct, the app sees your username and the text — exactly what I see in Instagram itself. This data is used only to reply to you; it is not sold or shared with third parties.

Data deletion

To delete data related to you — from enquiries, site chat or Instagram — email [email protected] with the subject “Delete my data” and include the username or address I can find you by. I will delete it within 30 days and confirm by reply.

Cookies

The site uses only one technical cookie — it remembers the language you picked. There are no tracking cookies and no advertising, so there is no “we use cookies” banner.