Privacy Policy

Protecting your privacy matters to us

1. Introduction

Joya-Tech (“we”, “our”, “the company”) is committed to protecting your privacy. This privacy policy explains how we collect, use, protect and disclose your personal information when you use our website (joya-tech.net) and our services.

By using our website, you agree to the collection and use of information in accordance with this policy. If you do not agree to this policy, please do not use our website.

2. What information we collect

2.1. Information you provide to us

• Contact details: name, email address, phone number, company name
• Information in forms: messages, questions, service requests, service preferences
• Account information: if you create an account, we collect information about your account (including through Google OAuth)
• Communication content: all correspondence with us by email, contact form, or other channels

2.2. Information collected automatically

• Usage data: pages you visited, visit time, links you clicked, actions you performed
• Device data: browser type, operating system, IP address, device identifier
• Cookies and similar technologies: we use cookies, pixels, and other tracking technologies
• Google Analytics data: we use Google Analytics to track use of the website

3. How we use information

We use the information collected for the following purposes:

• To provide and improve our services: handling requests, providing technical support, improving the website and the services
• For communication: to send updates, service messages, responses to requests, important notifications
• For marketing: to send newsletters, service offers, marketing content (only if you agreed)
• For security: to prevent fraud, detect suspicious activity, protect the website and the users
• For legal compliance: to meet legal obligations, respond to legal requests, protect our rights
• For analysis and analytics: to understand how users use the website, improve the experience, conduct research

4. Sharing information

We do not sell your personal information. We may share your information in the following situations:

• Service providers: we use third-party service providers (such as Firebase, Google Cloud, Resend) that help us operate the website and the services
• Google OAuth: when you sign in with Google, we receive basic information from your account (name, email, picture)
• Legal obligations: if required by law, a court order, or a government request
• Protection of rights: to protect our rights, our property, or the safety of users
• Business transactions: in the event of a merger, acquisition, or sale of assets

5. Storage and security of information

We use Firebase (Google Cloud) to store your information. The information is kept on secure servers with encryption. We take appropriate security measures to protect your information, but no method of storage or transmission over the internet is one hundred percent secure.

We keep your information for as long as it is needed for the purposes set out in this policy, or as required by law.

6. Your rights

Under the Israeli Privacy Protection Law and the GDPR (if you are a resident of the European Union), you have the following rights:

• Right of access: you can ask to receive a copy of the personal information we hold about you
• Right of correction: you can ask to correct inaccurate or out-of-date information
• Right of erasure: you can ask to delete your information (“the right to be forgotten”)
• Right to object: you can object to the processing of your information for marketing purposes
• Right to restriction: you can ask to restrict the processing of your information
• Right to portability: you can ask to transfer your information to another provider

To exercise your rights, please contact us at:

• Email: Gal@joya-tech.net
• Phone: 054-646-8676

7. Cookies and tracking technologies

We use cookies and other tracking technologies to improve your experience on the website. Cookies are small files that are stored on your device.

Types of cookies we use:

• Essential cookies: needed to operate the website (such as saving preferences, authentication)
• Analytics cookies: help us understand how users use the website (Google Analytics)
• Functional cookies: improve functionality (such as saving language, design)

You can set your browser to refuse cookies, but this may affect the functionality of the website.

8. Third-party services

Our website uses the following third-party services:

• Google OAuth: for signing in with Google. Google’s privacy policy applies to the use of this service.
• Firebase (Google Cloud): for data storage. The Google Cloud privacy policy applies.
• Google Analytics: for analysing use of the website. The Google Analytics privacy policy applies.
• Resend: for sending emails. The Resend privacy policy applies.
• Google Places API: for displaying Google reviews. Google’s privacy policy applies.

9. Access to Google Business Profile data

Shortip, a service of Joya-Tech, offers business customers the option to connect their Google Business Profile in order to see the profile’s performance inside our dashboard. The connection is entirely voluntary and the service works fully without it.

What we read

Only with your permission, and through the scope https://www.googleapis.com/auth/business.manage, we read the name of the business location and its Google identifier, and the daily performance metrics that Google provides: the number of profile views, the number of clicks on “Call”, the number of direction requests and the number of clicks to the website.

What we do not do

We do not change, delete or publish anything on your profile. We do not read reviews, messages or photos. We do not access your Google account beyond this. We do not sell, rent or transfer this data to a third party, and we do not use it for advertising or for training models.

Why

To show you whether our service works: how many people reached you from Google before the installation and after it. The data is shown to you and to us only.

Where it is stored

In an encrypted and secure database (Supabase, European Union region). The authorisation token is stored on the server side only and is never exposed in the browser.

For how long

For as long as the connection is active. You can disconnect at any moment with one click in the dashboard, or from your Google account at myaccount.google.com/permissions. On disconnection we revoke the token with Google and delete it from our systems permanently, together with the performance metrics collected, within 30 days.

Compliance with Google’s data policy

Shortip’s use of information received from Google APIs, and any transfer of it to another application, will comply with the Google API Services User Data Policy, including the Limited Use requirements. Information received through the business.manage scope is used solely to display your metrics inside your dashboard. It is not transferred to a third party, except to the extent needed for security purposes, to comply with the law, or with your explicit consent. We do not use it for advertising, and we do not allow a person to read it except for support you requested or where the law requires it. Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy)

9A. Shortip: orders, enquiries and the loyalty club

Ordering a subscription and making an enquiry through the Shortip page

When you order a subscription we collect your full name, the business name, the dealer or company number, mobile phone, email and country. When you make an enquiry we collect your name, the business name, phone, email (optional) and the content of the enquiry. The details are used only to set up the subscription and charge for it, or to get back to you about the enquiry. Order details are kept in our Shortip system (Supabase, in the European Union) and are passed to Morning (Green Invoice) for payment and for issuing the receipt. Enquiry details reach us by email through our email provider (Resend). Credit card details are given directly on the Morning (Green Invoice) payment page, via Grow, and do not pass through us.

The loyalty club (new)

When a customer of a business joins that business’s club, their name, their phone number and their visits to the business are collected. The phone number is verified with a code sent by SMS. Messages from the business are sent only to club members who agreed to receive messages.

The business owner is the controller of the database of their club members. Joya-Tech holds the information on their behalf and uses it only to operate the club for them. A club member who wants to review the information about them, correct it, or leave the club, can contact the business, or us.

Subprocessors: hosting (Supabase and Vercel), an SMS sending provider for phone verification, and Apple and Google for displaying the punch card in the phone’s wallet.

Where the information is stored

The information is stored with well-known cloud providers, encrypted in transit, and each business sees only its own customers. The database is hosted with Supabase in the European Union (Frankfurt, Germany). The website itself is hosted on Vercel.

When a business cancels its subscription

We undertake to export to the business owner, at their request, the list of their club members, and to delete the information about them 30 days after the cancellation takes effect.

10. Children’s privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and discover that your child has provided us with personal information, please contact us.

11. Changes to the policy

We may update the privacy policy from time to time. Any change will be published on this page with an updated revision date. We recommend that you check the policy from time to time to stay informed.

12. Contact

If you have questions or concerns about our privacy policy, please contact us:

• Joya-Tech
• Email: Gal@joya-tech.net
• Phone: 054-646-8676
• Address: 47 Moriah Boulevard, Haifa 3463425