ELDIGITAL

Privacy Notice

Last updated: September 2026

This notice explains how Oren Hayoun, an Israeli registered business (no. 315726927) trading as "Eldigital" / ELDIGITAL ("we", "us" or "the provider") collects, uses and protects personal data in the ELDIGITAL AI Agent platform and in the sales agent embedded on customer websites. It follows the Israeli Protection of Privacy Law, 5741-1981 and its regulations, and where applicable the principles of the EU/UK GDPR.

Who is the controller

  • For platform subscriber data the controller is Oren Hayoun, an Israeli registered business (no. 315726927) trading as "Eldigital" / ELDIGITAL ("we", "us" or "the provider").
  • For agent conversations with visitors on a customer's website, the customer is the controller and we act as a processor on their instructions.
  • Privacy contact: office@eldigitalgroup.com · +972 54-646-5226.

Categories of personal data

  • Account data: name, email address, business name, user ID, hashed password and login records.
  • Usage data: conversations, answers, credits consumed, timestamps and client identifiers.
  • Conversation data: agent message content, visitor language, timings and anything the visitor chooses to send.
  • Lead details voluntarily provided by visitors: name, phone, email and a description of their need.
  • Technical data: page URL, traffic source (UTM / click IDs), browser, operating system, device type and IP address.
  • Content crawled from the customer's public website (text, products, prices) used to build the agent's knowledge base.
  • Payment data is processed by Paddle; we never see or store card numbers.

Purposes and legal bases

  • Delivering the service and running the agent — performance of our contract.
  • Sending leads and notifications to the business owner (email, WhatsApp, dashboard) — performance of contract.
  • Security, rate limiting and fraud prevention — legitimate interests and legal obligation.
  • Quality improvement, measurement and debugging — legitimate interests, using minimised data.
  • Marketing messages (offers, discounts, product news) — your explicit consent given at signup, in line with section 30A of the Israeli Communications Law; withdraw at any time.
  • Operational messages (receipts, quota alerts, billing reminders, security notices) are part of the service and are not marketing.

Sharing with third parties

  • Hosting, database and infrastructure providers — to store data and run the service.
  • AI model providers — to generate answers from conversation content only; content is never sold or used for advertising.
  • Email delivery provider — lead alerts, operational messages and consented marketing.
  • Paddle.com — Merchant of Record for payments, subscriptions, invoices and tax compliance.
  • Professional advisers and competent authorities — where required by law or to protect rights.
  • We never sell personal data and never share it with advertisers.

International transfers

  • Some providers store or process data outside Israel, including in the EEA and the United States.
  • Transfers rely on recognised safeguards such as Standard Contractual Clauses and adequacy decisions, and on the Israeli cross-border transfer regulations.

Retention

  • Account and billing records are kept for the term and afterwards as required by law (typically 7 years for tax purposes).
  • Conversations and leads are kept while the account is active and for up to 24 months from the conversation, unless earlier deletion is requested.
  • The crawled knowledge base is deleted when the client record is deleted.
  • After account closure there is a 30-day export window; data is then deleted or anonymised, except where retention is legally required.

Security

  • Data is stored in an encrypted database with TLS in transit and row-level access rules, so each customer only reaches their own data.
  • Access to the management panel requires authentication; administrative access is restricted and logged.
  • Rate limiting, error monitoring and backups are in place.
  • In a serious security incident we will notify affected parties and the Israeli Privacy Protection Authority as required.

Your rights

  • Access, correction and deletion of data we hold about you under the Protection of Privacy Law.
  • Withdraw marketing consent at any time via the unsubscribe link or by contacting us; operational messages continue.
  • Where GDPR applies: access, rectification, erasure, restriction, portability, objection and withdrawal of consent, plus the right to complain to a supervisory authority. We respond within 30 days.
  • Exercise your rights at office@eldigitalgroup.com.

Children

  • The service is for businesses and users aged 18 or over; we do not knowingly collect children's data.
  • If you believe a child submitted data through the agent, contact us and we will delete it.

Cookies

  • Cookies and similar storage are described in our cookie policy, including categories and how to manage preferences.

Changes and contact

  • We may update this notice; material changes will be published on the site and notified where appropriate.
  • Oren Hayoun · Eldigital (ELDIGITAL) · Israeli registered business no. 315726927
  • office@eldigitalgroup.com · +972 54-646-5226 · Sunday to Friday, 9:00-18:00 (Israel time).
WhatsAppCall