Privacy policy

What we collect

What you give us: your name, WhatsApp number, email address and company (if you add them), your message, and any photos or files you attach.

Technical information: our host (Vercel) and our bot check (Cloudflare Turnstile) receive your IP address and browser details to deliver the site and stop abuse. We ourselves store only a scrambled (hashed) form of your IP address, used only to block repeated spam submissions and deleted within two days. With a request we also record the page you came from, the page where you entered our site and any campaign tags in the link (for example utm_source), so we know which channels work.

How the site is used: anonymous counts of page views and button taps, with the page, language, the website that linked to us and any utm_source tag. Each browser tab gets a random ID so one visit is counted once; it is not linked to your name, number, IP address or request. If your browser sends a Do Not Track or Global Privacy Control signal, none of this is recorded. These counts are deleted after about 13 months.

Why we use it

To answer your request, prepare a quote, do the work and keep a record of it; to protect the site from spam and abuse; and to understand which of our channels bring requests and which parts of the site are useful. We do not sell your information or use it for advertising.

Who processes it for us

Supabase stores requests, attached files and the anonymous usage counts (database and file storage hosted in Singapore).

Vercel hosts this website.

Resend sends our notification and confirmation emails.

Google (Gmail) hosts our email inbox. Every request is emailed there with your contact details, message, our internal summary and links to your files that work for 7 days; emails you send us arrive there too.

Anthropic (Claude) reads your request, including any photos and PDFs you attach, to prepare an internal summary and suggested follow-up questions for us, and translates messages between you, us and suppliers when we ask it to. A person reviews this before acting on it; the AI never sends you anything itself.

Cloudflare Turnstile checks that visitors are people, not bots. It runs in your browser when the home page (where the request form is) loads, and receives your IP address and browser details to do so.

WhatsApp (Meta) carries our conversations when you message us there.

Our accountant receives the name, company and amounts of work we invoice, to keep our books and file taxes; tax authorities may receive the same where the law requires.

These providers process data on our behalf and may store it outside Israel and Thailand.

Cookies and storage

The public site uses no advertising or tracking cookies and no third-party analytics. During your visit, your browser keeps two small items in session storage, deleted when you close the tab: which link brought you here, and the random visit ID described above. Staff sign-in uses a security cookie that only applies to our internal admin pages.

Your status page

Each request has a private status page. Anyone with its link can see the status, your message, the quoted price and the updates we choose to share there, so share it only with people you trust. The page is not listed in search engines, and if the link reached someone by mistake we can replace it, which turns the old link off at once.

How long we keep it

We keep request records for as long as we need them to serve you and to meet our record-keeping obligations. You can ask us to delete your information at any time; we will delete it from our database, file storage and email inbox, unless we must keep it by law. Copies held by our service providers (such as email delivery logs and AI processing records) are deleted under each provider's retention policy.

Your choices

You can ask to see, correct or delete the information we hold about you, or stop hearing from us, by WhatsApp or email. We will reply within one business day.