NetoBricks — Security

Version 2026-10-29. This page says what is true today, with no promises about what is not built yet. The full detail on the data itself is in the privacy policy. The Hebrew text is the binding one.

1 · Where the data is

• Your business's database and files are in the European Union, in Ireland, with our database provider (Supabase, on Amazon's servers).
• The agent's background work and the WhatsApp service run on Google Cloud in the Netherlands.
• The app itself reaches you through Cloudflare's and Google's delivery networks, which hold the app's files and not your data.

2 · Encryption

• Everything between your device and us is encrypted (HTTPS).
• The database and the files are also encrypted where they are stored, by the provider.
• Card details never reach us: payment goes through Morning, whose card terminal is Grow's.

3 · One business never sees another

Every table in the database is locked by business: a request sees only the rows of the business the person asking belongs to. Before every version we release, a test runs that deliberately tries to read another business's data, and a version that fails it is not released.

4 · Who at NetoBricks can see your content

• By default, nobody. Our staff see general figures — how many businesses, how much use — and not what you wrote.
• Only if you allowed support access can one part of your business be looked at, and only with a written reason. Every such look is written to a log you read, and you can withdraw the permission at any moment.
• Changing a business's settings by a staff member needs a two-step sign-in and a written reason, and is recorded.

5 · Keys and passwords

The keys to the services we work with — AI models, payment, mail — are kept on our servers only, never in your browser or phone. A password for a supplier's site, if you let the agent sign in for you, is kept encrypted in a vault, and a card number cannot be stored there.

6 · AI

The text concerned is sent to the companies that run the models, and they do not train their models on what we send. In a business set as "confidential", names, phone numbers, e-mail addresses and amounts are replaced by markers before the text leaves. Nothing that cannot be undone — a payment, a filing, a deadline — happens without a person in the business approving it. See section 5 of the privacy policy.

7 · Backup

The database provider backs up the whole database once a day and keeps each backup for seven days.

8 · Signing in

You sign in with a link sent to your e-mail, with your Google account, or with a password you set in your personal area. In your personal area you can turn on two-step sign-in, see which devices have signed in to your account, and sign out of all of them at once.

9 · Your data, yours

You can export your business's data and ask for it to be deleted. What is deleted and when is in sections 10 and 12 of the privacy policy.

10 · Reporting a problem

Seen something that looks like a breach, or received a suspicious message in our name? Write to support@netobricks.com and we will get back to you. How the service is doing now, and over the last thirty days: the status page.