NetoBricks — Privacy policy

Version 2026-11-02 · section 2: an order or a sign-up on a business's page keeps which network the visitor came from, by its name, and never which account they have there. In force from 16 November 2026, for everybody. Before it: version 2026-10-31 · sections 2, 6 and 10: a tool you record in yourself, such as the notebook, keeps the recording with the item so you can play it back; before the first recording the app reminds you to tell whoever can be heard and to record only where it is allowed. In force from 31 October 2026 for new accounts, and from 14 November 2026 for accounts opened before it. Before it: version 2026-10-25 · section 16: a booking taken on your booking page is written into your connected Google Calendar; YouTube: the YouTube Terms of Service and Google's Privacy Policy, how to withdraw access, and that upload records are deleted after 30 days or at once on withdrawal; TikTok: what we receive when you connect it, and that nothing is posted without your press. Before it: version 2026-10-23 · section 16 added: what we receive from Google and Microsoft when you connect them. It applies to a connection from the moment it is made; nothing is received from an account that is not connected. Before it: version 2026-10-21 · in force from 21 October 2026 for new accounts, and from 4 November 2026 for accounts opened before it (sections 2, 5, 6, 8, 10 and 13: mail forwarded to us, sending from Gmail, meeting transcripts, pictures and voice-overs, Cloudflare, and support access by the pilot terms). Before it: version 2026-10-18 (section 8: payment is taken through Morning, its card terminal is Grow's). Corrected the same day, before it applies to any existing account: sections 2, 3, 10, 11 and 14 now say what is true about somebody planning a business, the customer records a business's own pages keep, the terms our providers work under, and workers aged 15 to 17; and sections 2, 5, 6 and 15: WhatsApp is for signing up and for links, a voice note sent there is not listened to, and a change is announced before it takes effect, without a fixed 14 days. The Hebrew text is the binding one.

1 · Who is responsible

NetoBricks is run by Ido Lavon, a registered business (עוסק) in Haifa, Israel. General contact: support@netobricks.com. Privacy questions and requests: privacy@netobricks.com.

There are two kinds of information here, and we stand in a different place for each:

• Your account — sign-in, contact and payment details. We decide what is collected and why, and we are responsible for it.
• What a business puts in about its own work and its own people. The business decides what goes in. We hold it and process it for that business, on its instructions. If you work at a business that uses NetoBricks and want to see, correct or remove something about you, ask the business first; we will help it answer you.

2 · What we hold

What · Examples · Where it comes from

Account · e-mail, name as you want it shown, sign-in times · you

Phone number · when you sign up through WhatsApp, or a phone is connected to receive links · WhatsApp

What you tell and show us about the work · answers in the interview, steps, corrections, notes, messages to the assistant, files, photographs, a walk-through video of the premises · you and the people you invite

People at the business · a name and a role, who confirmed or corrected what, training and quiz results · the business

Use of the app · which screens were opened and which actions taken — from a fixed list, never free text · the app

A visit to the public page · which site you came from, how far down you scrolled, what you pressed, language and kind of device. No address of your machine and nothing that identifies you. Only if you agreed: a random number kept in your browser, so we know you came back · the page

A connected calendar · only its shape: how many bookings, at which hours. Never a title, a name or a description · the address the owner pasted

Answers from the public · what somebody typed into a poll or a sign-up page a business published · the person answering

Somebody planning a business · what they tell the agent about themselves to find and plan a business: experience, work today, savings and debts, family. Only they see it · the person

A business's own customers · what the business's own pages and apps ask its customers: a name, a phone or an e-mail, an order, a booking, answers. Held for that business and only for it; the business decides what is asked · the business's customers

An order or a sign-up on a business's page · one word for how the visitor reached the page: directly, from a search, from a social network (by its name: Instagram, TikTok, Facebook, YouTube, LinkedIn or X; from 16 November 2026, before that only "a social network"), from a chat, from an ad, or some other way. It says which network the link was on and nothing of any account they have there. It is decided in their own browser and kept with the order or the sign-up for as long as those are kept. No address of the page they came from, no address of their machine, no cookie and nothing that identifies them · the page

Mail a business forwards to us · the sender, recipient, subject and text of mail the business chose to forward to its own address with us. Attachments are not kept · the business

A Gmail connection for sending · a permission from Google to send in the business's name, and what was sent. We never read the mailbox · the owner

A recorded meeting · the sound, until the transcript and summary are written; then only the text, the summary and the tasks · whoever recorded it, after confirming everyone present knows

A recording made in a tool · the sound of what you recorded in a tool that keeps recordings (today: the notebook), kept with the item in your folder · you, after a reminder to tell whoever can be heard

Payment · what was bought and when. Card details stay with the payment processor; we never see them · the processor

Security records · who did what and when, and a record of every AI call · the system

3 · What we ask you not to send, and what we do not do

• Information about a business's patients or clients that it is bound by law or by its profession to keep confidential: do not send it to the agent. A business set to "confidential" has names, numbers and amounts replaced before any text reaches an AI model (section 5).
• Identity numbers, card numbers and health information: we do not ask for them, and ask you not to type them. Card details for a payment stay with the payment processor.
• No advertising trackers and no advertising cookies. The app keeps a sign-in token and your preferences on your device. On the public page, and only if you agreed in the notice shown there, your browser also keeps a random number that lets us know you came back. It goes to nobody else, and you can remove it at any time under "Cookie settings" at the foot of the page.
• We do not sell personal information, and we do not use it for advertising.

4 · What we use it for

• To run the service for the business: to build its picture of how the work is done, and the tools made from it.
• To sign you in, to answer you, to take payment.
• To keep the service safe and to be able to show afterwards what happened — including recording a request that tried to misuse the agent (section 13).
• To see which parts of the app are used and where people get stuck.
• To improve the general picture of how a trade works, from corrections — in the narrow way section 9 describes.

5 · Artificial intelligence

Most of what NetoBricks writes is produced by AI models run by other companies. To produce an answer, the relevant text — and a photograph or file, when you sent one to be read — is sent to that company.

• For a business set to “confidential”, names, phone numbers, e-mail addresses and amounts are replaced with placeholders before the text leaves, and put back when the answer returns. This catches the names the system knows and common patterns; a name said for the first time can pass.
• These companies do not train their models on what we send.
• They may keep what was sent for a limited time to detect abuse — at present up to 30 days, and longer only for content flagged as breaking their rules.

No decision about a person is made by the system alone. By default it drafts and a person at the business decides. In an area where the owner allowed it to send by itself (a reply to a customer, for example), it sends in the business's name, and every send is logged. A picture or a voice-over someone asked for in the chat is made by a Google service from the description written.

6 · Voice

When you speak to the app, the speech must be turned into text.

• Dictation uses your own browser's recogniser. Depending on the browser, the sound is processed on your device or sent to the browser's maker. The screen says so before it listens.
• The spoken interview is carried live to Google's Gemini service.
• A recorded meeting is turned into text by Soniox, in the EU. The sound is deleted once the transcript and summary are written.
• We keep the text of what was said, not the sound, with one exception: a tool you record in yourself, such as the notebook, keeps the recording with the item so you can play it back. Before the first recording the app reminds you to tell whoever can be heard and to record only where it is allowed (you may choose not to see the reminder again). The recording stays in your own folder, is not shared by a link, is not sent to an AI model and is not used to identify anyone. It is deleted when you delete it from your files, and with the account.
• A voice note sent to our WhatsApp number is not listened to, turned into text or kept.

Typing is always available instead.

7 · Photographs and video

A photograph or a walk-through video may show people. We do not blur faces or remove people from a picture automatically. So: film when the place is empty, photograph the thing rather than the person holding it, and tell your staff before you film. If someone asks for a picture they appear in to be removed, the business can delete it, or ask us to.

8 · Who else receives it

We use these companies to run the service. Each receives only what its part needs.

Company · For · What reaches it · Where

Supabase · database, sign-in, file storage · everything in section 2 · European Union

Google — Firebase Hosting · serving the app · the request: address, time, browser · global

Google — Cloud Run · running the assistant and the WhatsApp connection · content in passing; nothing kept there · EU

Anthropic · AI models · text, photographs and files sent to be read · United States

Google — Gemini · the spoken interview; pictures and voice-overs asked for in the chat · the sound and text of the interview; the picture's description or the text to be read · global

Google — Gmail · sending mail from the business's own Gmail, when connected for sending · the mail sent · global

Soniox · transcribing recorded meetings · the sound of the meeting · EU

Cloudflare · receiving mail a business forwards to us; serving businesses' public pages · the forwarded mail; the page request: address, time, browser · global

Meta — WhatsApp · carrying WhatsApp messages · the phone number and the messages · global

Morning (Green Invoice) · the payment page, invoices and receipts for a NetoBricks plan · the payer's name, phone or e-mail, and what was bought · Israel

Grow (Meshulam) — the card terminal inside Morning · clearing the card; card details stay with it · the card and the amount · Israel

We also disclose information if the law requires it, and will tell the business concerned unless the law forbids that.

9 · The shared picture of a trade

When a business corrects the general picture of how a trade works, that correction may help improve it for everyone — only once three businesses with no connection between them have each said the same thing independently. What enters is the point itself, restated, with no name, no business and nothing that identifies anyone. Recipes, prices, suppliers, names and anything a business marks as its own never enter, however many say it.

10 · How long

What · Kept

A business's content · while the account is open, and up to 90 days after

Account details · while the account is open, and up to 30 days after

Answers from the public to a poll or sign-up · 60 days

What somebody planning a business told the agent, if no business was opened · 12 months after they last used it, then deleted

Use-of-the-app records · 13 months

Records of visits to the public page · 13 months

Security records and payment records · 7 years

A conversation recorded because it tried to misuse the agent · 12 months, or longer while a dispute about it is open

WhatsApp messages, at Meta · up to 30 days, under Meta's terms

Mail a business forwarded to us, and mail sent from Gmail · 90 days

The sound of a recorded meeting · until the transcript and summary are written

A recording you made in a tool · until you delete it from your files, and with the account's content

When an account is deleted, its content is deleted. One thing stays: a correction that three unconnected businesses independently made as well. At that point it is nobody's in particular, and it carries nothing that identifies you.

11 · Outside Israel

Some of the companies in section 8 process information in the European Union, in the United States or elsewhere. We use them under their business terms and their data processing terms, which bind them to protect it and to use it only to provide their service to us.

12 · Your rights

You may ask to see the information held about you, to have it corrected, and to have it deleted. An owner can download a copy of everything in the business's account from the settings screen at any time. Anyone can delete their own account in the app, on the account screen: it is kept aside for 30 days and then deleted, as section 15 of the terms describes. For anything else write to privacy@netobricks.com; we answer within 30 days.

You may also complain to the Privacy Protection Authority (הרשות להגנת הפרטיות).

13 · How it is protected

• Information is encrypted in storage and on the way.
• Each business's information is separated from every other's in the database itself, and that separation is tested on every release.
• Our staff do not read what a business wrote, with two exceptions: one that needs the owner's yes (below), and a request the agent recorded because it tried to misuse it.
• A request that tries to misuse the agent — to make it ignore its rules, to learn how the service is built, to harvest the research it holds, or to do something unlawful or harmful — is refused and recorded: that message, what was written before it in the same conversation, the reply, the times, and who sent it. Staff are told, see a list without content, and may read one record only with a written reason that is itself recorded. It is used to decide whether to warn or block an account, and for nothing else. When the request came from somebody who works for a business, its owner is told who and that it was refused — never the words. It is kept for 12 months, and the person it is about may ask to see it. Support work uses counts and metadata; a change to an account needs a signed-in staff member with a second factor and a written reason, and is recorded.
• Support access for invited businesses. A business we invited to our programme for improving the service, by accepting the programme's terms, lets our staff see its model, the agent's suggestions and research, and its tools, follow how the interview is going, and correct a tool's content for it. It lasts 90 days from the day the terms were accepted. Every look and every change is recorded and shown to the owner on the same settings screen. The owner can leave the programme there at any moment, and access stops at once. Staff never act in the owner's name and never message the business's customers. Outside the programme nobody is asked and staff see nothing.
• If something goes wrong that puts your information at risk, we will tell the business affected without delay, and the Authority where the law requires.

14 · Children

The service is for businesses and their adult owners. An owner may invite a worker aged 15 to 17: such a worker talks only in the business's own work conversations, never privately with one adult and never with customers; the owners see every conversation the worker is in, and the worker is told so; and nothing from the app reaches them between 20:00 and 08:00 or on the weekly rest day. Nobody under 15 can be invited.

15 · Changes

We will tell you before a material change takes effect, in the app or by message. The date and version of this page are at the top.

16 · Google and Microsoft accounts you connect

You choose whether to connect each of them, in Settings › Connections, and each asks you on its own screen before anything is shared. We receive only what is listed here, and use it only for what is listed here.

• Google Calendar. When your calendar is busy (the start and end of each booking), from which we keep how many bookings there are and how many minutes are booked in each hour of the week. We also read the meetings of the next four weeks and of the past day — their title, time, place and link — and show them only on your business's calendar in the app, to the people who may see it; they are replaced every fifteen minutes and nothing older is kept. We write one thing into your calendar: if you have a booking page in the app, each booking taken on it, moved or removed with the booking. Nothing else in your calendar is changed.
• Gmail. Only permission to send. A reply you choose to send from the app goes out from your own Gmail; we keep what was sent. We cannot read your mailbox.
• Google Contacts. Your contacts' names, e-mail addresses, phone numbers and organisation, read once a day, used only to show who is writing to you on the mail and enquiries your business receives. They are not written anywhere else.
• Google Search Console and Google Analytics. For your business's own site: the searches that led to it, clicks and times shown on Google, and visits by day and by where they came from, for the last 28 days. They are shown to your business on its site page and replaced daily.
• YouTube. NetoBricks uses YouTube API Services, and only to upload: a video is uploaded to your channel only when you press "Publish to YouTube" on it, with the title, description and privacy you chose (unlisted unless you choose otherwise). We do not read, change or delete anything on your channel. We keep the new video's ID and what was sent with it for 30 days, to show you its link, and then delete it. By using this feature you agree to the YouTube Terms of Service, and Google's Privacy Policy applies to what Google receives. You can withdraw our access at any time in Settings › Connections › YouTube, or in your Google account's security settings; either way we delete the stored permission and the upload records at once.
• TikTok. If you connect TikTok: your basic profile (your TikTok name and picture), so the app shows which account a post goes to, and permission to post videos you choose and to send videos to your TikTok drafts. A video goes to TikTok only when you press Post (or send it to your drafts) on it, with the caption, who can watch it and the settings you chose; NetoBricks never posts to TikTok by itself. We keep the record of a post for 30 days. Disconnecting deletes the permission and those records and asks TikTok to withdraw our access; you can also remove NetoBricks in your TikTok app's settings.
• Google Business Profile. Your business's locations and the reviews customers left there, so you can read them and reply from the app. A reply is posted only when you press to send it.
• Google Drive. Only the files the app itself creates there, in one folder named after your business: the backup of your business and copies of its documents. We cannot see or open anything else in your Drive.
• Microsoft OneDrive. We write the same backup and documents into one folder named after your business, and we do not read anything else in your OneDrive.
• Which account it is. The address of the account you connected, so the app can show it.

The permission itself is kept encrypted and is used only by our servers; it is never sent to your browser or to anyone else. Information from Google, Microsoft and TikTok is not sold, not shared, not used for advertising and not used to train AI models, and none of it is sent to an AI model. Disconnecting an app in Settings deletes its permission and what we read through it; disconnecting the last Google app also withdraws our access at Google. Files already in your Drive, OneDrive or YouTube channel are yours and stay there.

NetoBricks's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.