Privacy Policy

1. Duty to inform

This policy explains what information is collected, for what purpose, and who is responsible for it, under the Israeli Privacy Protection Law, 1981, including Amendment 13.

A business provides identification and contact details in order to open an account. An end customer voluntarily provides a name, phone number, and email in order to schedule an appointment and receive a reminder for that appointment.

2. Controller and processor

Each business is the controller of its own customer database. Notes, blocks, no-show counts, and marketing consents belong to that business and are not shared with another business.

Bizzit is a processor. It stores and processes the information in order to operate the service, on the business's instructions and as required by law, and does not thereby become the controller of the business's database.

3. Consent forms and health questionnaires

Consent forms, health questionnaires, and questionnaire answers are stored for the business, which is the controller of that database. The record includes the answers, a timestamp, an IP address, and browser data.

Bizzit provides the technology infrastructure only. The business alone is responsible for the content of the forms, for their lawfulness, and for setting them as a condition for booking.

4. Infrastructure providers

To operate the service, Bizzit uses these categories of providers: hosting and storage, identity authentication, email delivery, message delivery, error monitoring, and payments when that service is active.

The providers named here are Google, for sign-in with Google OAuth, and Sentry, for error monitoring. Other providers are described by role only. Processing may take place outside Israel, at the infrastructure provider.

5. Cookies

The site uses authentication cookies, which are required for sign-in, security, and keeping a choice during use. It also uses diagnostics cookies, error monitoring, and technical operation, including through Sentry.

It does not use marketing cookies or third-party advertising trackers.

6. Language models

Free text entered in the chat or in the system's assistant interfaces may be processed by language-model (AI) providers. Basic identifiers, such as a phone number and an email address, are removed as far as possible before that text is sent.

Bizzit does not use personal data, health questionnaires, or end-customer forms to train models.

7. Support access

Bizzit support accesses a business's information only in order to handle a fault or a request, under a limited permission, and does not use that access for marketing or for transfer to another business.

8. Data-subject rights

A data subject may request access, correction, or deletion as provided by law. A request is sent to support@bizzit.co.il. Where the information belongs to a business's database, the request is handled with that business as controller, and Bizzit assists as processor.

Deletion may not include information that must be kept by law, or a backup copy that is removed on the backup cycle.

9. Statistical information

Bizzit owns statistical, aggregated, and anonymized information that does not identify a person or a particular business. That information is not the business's customer database.