Privacy policy.
The short version: we collect only what we need in order to build your site and support it. Your data is stored in Israel or the EU only. We do not sell data to anyone. At any moment you can ask to see or delete everything we hold about you.
This English version is provided for convenience. The Hebrew version is the binding original.
Who we are and why it matters
The data controller is AL Platforms, an Israeli platform that builds websites for small businesses. Any privacy question → privacy@al-platforms.com.
This policy applies to anyone who uses al-platforms.com, submits a lead through the wizard, or buys a service.
What data we collect
| Data type | What it includes | Why |
|---|---|---|
| Contact details | Full name, business name, phone, email | To reach you after the purchase, send invoices, and support you on WhatsApp |
| Business brief | Your industry, your goal, target audience, existing branding, brand color, requested domain, chosen template | To build a site that fits you and to write marketing copy that is actually relevant |
| Inspiration material | URLs, images you upload (≤5MB each), free-text notes | To understand your taste and style the site accordingly |
| Technical / analytics | IP address, user-agent, visit times, pages viewed | Security (spam blocking), performance, bug hunting |
| Payment | Amount, currency, date, transaction approval (last 4 digits) | To issue an invoice and handle refunds. Full credit card details are never stored on our side (they are handled by the PCI-DSS payment processor). |
What we do not collect: government ID numbers, health data, financial data beyond the specific transaction, GPS location, or information about minors under 16.
Why we use this data
- Delivering the service — setting up your site and connecting a domain.
- Support — answering your questions on WhatsApp or by email.
- Legal — issuing a tax invoice and meeting Israel Tax Authority requirements.
- Product improvement — aggregate analytics that do not identify you personally.
- Security — blocking spam, bot attacks, and abuse.
We will not use your data for: third-party marketing, selling lists, or marketing profiling unrelated to the service you bought.
Where the data is stored
Your data is stored only with established infrastructure providers, in Israel or the European Union only (not in the US, and not in countries with weak privacy protection):
- Vercel (site hosting) — servers in the EU.
- Cloudflare (CDN and anti-bot) — handles traffic, stores no sensitive content.
- Greeninvoice / Icount (invoicing) — servers in Israel.
All of these providers meet the requirements of GDPR and of the Israel Privacy Protection Authority.
Sharing with third parties
We do not sell your data. We share it only with providers that are essential to running the service:
- Payment processor (Cardcom / Tranzila / Hyp) — payment details only, for the specific transaction only.
- SMS / WhatsApp provider (Twilio / Greeninvoice) — phone number only, for the automated messages you approved.
- Analytics services (Plausible / PostHog) — aggregate data, not personally identified.
- Law enforcement — only under a court order or an explicit legal requirement.
Cookies and tracking
We use a small number of cookies:
- Essential — saving your progress in the wizard (
localStorage, never sent to the server). Required for the site to work. - Analytics — aggregate usage measurement (Plausible, no personal identifiers). Optional — you can turn it off in the cookie banner.
- Anti-bot (Cloudflare Turnstile) — a temporary token that is deleted when you close the browser.
We do not use Google Analytics, the Facebook Pixel, or any other cross-site tracker.
Your rights
Under GDPR and the Israeli Privacy Protection Law, you have full rights over your data:
- Right of access — request a copy of all your data within 30 days.
- Right to rectification — if something is inaccurate, we correct it within 14 days.
- Right to erasure ("Right to be Forgotten") — you can request full deletion. We keep only what the law requires us to keep (invoices, 7 years).
- Right to portability — we hand you your data in a standard format (JSON / CSV) so you can export it to another service.
- Right to object — stop processing for marketing or product-improvement purposes.
- Right to restriction — ask us to freeze processing until a matter is clarified.
To exercise any of these rights, email privacy@al-platforms.com. We respond within 30 days at most.
How long we keep data
| Data type | Retention period |
|---|---|
| Leads that did not buy | 12 months from the day the lead came in, then automatic deletion |
| Active customers | For the whole engagement + 12 months after it ends |
| Invoices / financial records | 7 years (legal requirement — Section 144 of the Israeli Income Tax Ordinance) |
| Technical logs (IP, user-agent) | 90 days |
| Backups | 30 days, rotating |
Information security
- All traffic is encrypted with HTTPS (TLS 1.3).
- Passwords are stored with bcrypt (cost factor 12).
- Sensitive data (PII) is encrypted with AES-256-GCM in the database.
- Infrastructure access — only through an SSH key + 2FA, and only for company staff.
- Automatic daily backups, encrypted, stored in a separate geographic location.
- In the event of a data breach — we notify you within 72 hours by email and on WhatsApp, and we notify the Privacy Protection Authority.
Minors
The service is not intended for minors under the age of 16. If you have reached this site and you are under 16 — do not upload personal data. If we identify processing of a minor's data without parental consent, we delete it immediately.
Changes to this policy
Material changes will be announced to you by email at least 30 days before they take effect. Cosmetic changes (wording fixes, link updates) are reflected in the date at the top of this page.
Regulatory complaints
If you are not satisfied with the way we handled your matter, you have the right to contact:
- The Privacy Protection Authority (Israel) — gov.il
- EDPB (European Union, if you are an EU resident) — edpb.europa.eu
Contact us
- 📧 Privacy: privacy@al-platforms.com
- 📧 General: hi@al-platforms.com
- 💬 WhatsApp: +972-54-757-4192
This privacy policy is written as transparent, plain ground rules for our customers. ⚠️ We recommend reviewing it with a lawyer qualified in privacy protection / GDPR before the development phase is closed.