We collect what we need to run your store, use it only for that, never sell it, and treat your shoppers’ data as yours.
Who we are
YallaFlow is a service of [Registered business name], business ID [מספר עוסק / ח.פ.], [City], Israel (“we”). This policy covers this website, the YallaFlow dashboard and the whole service. For any privacy question, email us at [hello@your-domain].
This policy follows Israel’s Protection of Privacy Law, 5741‑1981 and its regulations, including Amendment 13.
What we collect from store owners
- Account: name, email, language and, if you add it, a phone number. Passwords are stored only as a hash we can’t read. If you sign in with Google, Google gives us your name and email.
- Your store: products, photos, texts, design, posts, settings and anything else you put in it.
- Billing: your plan, payment dates and amounts, and an invoice address. [Billing provider] keeps your card; we never see or store card numbers.
- Support: messages in the support chat, by WhatsApp and by email.
- AI apps you connect: which app, the permissions you approved, when, and a log of what it did in your store, so you can see and undo it.
- The dashboard app: if you install it and turn on alerts, the address your device gives us for sending them, until you turn them off.
- Use of your account: when you last used the dashboard or an AI app, so we know whether a Free store is still in use (see the terms of service).
- Technical: IP address, browser and device, and times of access, for security, abuse prevention and fixing problems.
- Cookies: the dashboard uses only cookies it needs to work, such as keeping you signed in. This website has no analytics or advertising tools today; if we add any, we update this page and ask for consent where the law requires.
Your shoppers’ data
When people buy in your store, the store keeps their details: name, address, phone, email, orders, account and, if they allowed it, push notification subscriptions. For that data you are the database owner, and we process it only for you, on your instructions, to run your store, as set out in the data processing agreement. We don’t use it for our own purposes, don’t sell it and don’t contact your shoppers.
Your store’s own privacy page tells your shoppers how you use their data. YallaFlow fills it in from your store details; you review and adapt it.
Why we use information
- To run the service: create, keep, publish and manage your store.
- To bill your plan.
- To keep the service secure and prevent fraud and abuse, including checking stores against the acceptable use policy.
- To give support.
- To send service messages: confirmations, billing, security alerts, unused-store reminders, suspensions, changes to the terms.
- To improve the service, using totals rather than individuals where we can.
- Marketing emails go out only if you agreed, and you can unsubscribe at any time.
Who we share it with
We don’t sell personal information. We share it only with providers that help run the service, and only as much as they need:
| Provider | What for | Where |
|---|---|---|
| Hostinger | Store servers and databases | [EU (Netherlands)] |
| Vercel | Storefronts and our websites | [EU and US] |
| Resend | Sending emails | [US] |
| GitHub | Content files of some older stores | [US] |
| Cloudflare | DNS for store addresses | [Global] |
| [Billing provider] | Charging plans | [ ] |
| Sign-in with Google, if you use it | Under its own terms | |
| Payment providers you connect | Taking your shoppers’ payments | Under their own terms |
| AI apps you connect (such as Claude or ChatGPT) | Only what you allow them | Under their own terms |
Some providers keep information outside Israel, in the European Union and the United States. We transfer it abroad only as the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761‑2001 allow.
We also disclose information when the law or an order of a competent authority requires it.
How long we keep it
- Account and store data: while the account is active.
- A Free store that isn’t used: paused after 90 days without use and deleted 30 days later, with emails before (at 30 and 60 days, and a week before deleting).
- A store paused after cancelling a paid plan or moving to a smaller one: deleted 30 days after the pause.
- When you close your account: deleted within [90] days, except what the law requires us to keep, such as accounting records (7 years). Backups are overwritten within [30] days after that.
How we protect it
Each store runs in its own separate environment, connections are encrypted, requests between our systems are signed with keys that work once, and passwords are kept only as hashes. More on the Security and trust page. No system is completely safe; if a security incident affects you, we tell you and the authorities as the law requires.
Your rights
You can ask to see your information, correct it, or have it deleted. Most of this you can do yourself in the dashboard; otherwise write to [hello@your-domain] and we answer within the time the law sets.
Shoppers of a store on YallaFlow should contact the store first, since it is responsible for their data; we help the store answer.
Children
The service is for people aged 18 and over. We don’t knowingly collect information about minors.
Changes to this policy
If we change this policy in a way that matters, we tell you by email or in the dashboard before the change applies.
Contact
Privacy questions, requests or complaints: [hello@your-domain], or in writing to [Registered business name], [City], Israel.