This English translation is provided for convenience. The Hebrew version is the binding one. — View the Hebrew page
🔏 Privacy Policy
1. 👤 Details of the site owner (the data controller)
Name: Oren Edelstein
City: Haifa, Israel
What the site does: Remote technical support services — computers, Windows and Linux, networks, smartphones and information security. The site includes request forms, a customer portal, voice and video calls from the browser, chat, and file sharing.
Privacy inquiries (access, correction, deletion): through the contact form — choose the subject "Privacy and personal information".
2. 📊 What information is collected
A. Automatically, for every visitor to the site
| Type of information | What is collected | Purpose |
|---|---|---|
| IP address | The visitor's IP address | Security, abuse prevention |
| Hostname | Reverse DNS name of the IP | Identifying the source of access |
| Browser | Browser type and version | Technical compatibility |
| Operating system | Windows / Linux / macOS / iOS / Android | Technical compatibility |
| Device | Desktop / Mobile / Tablet | Technical compatibility |
| User-Agent | Full browser string | Bot detection and security |
| Referrer | The address the visitor arrived from | Understanding the source of access |
| Date and time | Time of entry, exit, and browsing | Activity log |
| Download activity | File name, size, download time | Managing file sharing |
| Session cookie (PHP) | Temporary session identifier | Managing authenticated sign-in |
| Identifier cookie (oa_visitor) | Anonymous identifier for repeat visits | Aggregate statistics |
| Browser fingerprint | Canvas, WebGL (GPU vendor/renderer), Audio, screen resolution, time zone, languages, number of CPU cores and memory | Identifying repeat visits and statistics — collected only after consent |
The browser fingerprint (the technical data in the last row of the table) is collected via a client-side script only after you have approved cookies in the consent banner. If you declined, or have not yet chosen, the script is not loaded at all.
B. What you provide in forms and services — voluntarily
| When | What is collected | Purpose |
|---|---|---|
| Support / contact form | Name, email, phone, city, fault description, computer details, screenshots you attached | Providing the service and handling the request |
| Customer sign-up request | Name, email, phone, address, username (the password is stored hashed only) | Opening a customer account |
| Signing in with Google | The email address and name from your Google account, after your approval in Google's window | Verifying the address without codes |
| Call from the site (voice/video) | Name, phone, verified email — and the call itself is recorded, as stated at the start of every call | Providing the service, documentation and legal coverage |
| Screen sharing in remote support | Recording of the support session, after your explicit consent at its start | Documentation, quality control and learning |
C. Use of artificial intelligence — in full transparency
Part of the service is provided by "Shula" — an AI-based voice assistant (Google's Gemini service). When you speak with Shula — on the home page or in a call from the site — your audio is transferred to Google's service in order to process the call in real time.
Two further uses, both on text from the transcript only — not on the audio: (a) in-depth lookup during the call — when a spec, menu, or known solution is needed for your model, the technical question and a short excerpt from the transcript are sent to Anthropic's Claude service, which may search public sources (manufacturer websites, professional forums). If you attached screenshots to a request you opened on the site, and the call was opened from that same request, the screenshots (up to four) are sent to that same service along with the question — so the advisor can read the error message as it is, rather than you having to read it aloud; (b) post-call analysis — the transcript is analyzed by the same service for a summary, recommendations and quality control, so that Oren knows what has already been tried before he gets back to you.
For a registered customer: a summary of your previous calls (what the fault was, what was tried, whether it was resolved — up to three calls from the last year) is used in your next call with Shula, so you can continue from that point. The summary is stored on the site's server and is sent to Google's service as part of setting up the call.
3. 🎯 Purposes of using the information
- Providing the support services you requested, and managing the relationship with you
- Documenting calls and sessions — for legal coverage, quality control and service improvement
- Securing the site and preventing unauthorized access and misuse
- Internal statistics for site maintenance
- The information is not used for advertising, is not sold, and is not used for marketing mailings
4. 🔐 Information security
The information collected is stored in an SQLite file on a private server. Access to the database is restricted to the site owner only. Passwords are stored hashed using bcrypt, not in plain text. There is no external network access to the database file.
5. ⏱️ Data retention
Direct calls with Oren in the app: the call audio is first stored in the app's private storage area on Oren's phone, and enters an upload queue to Google Drive when the call ends. The recording is linked to the customer's identifier or to a guest's clarification reference. The local copy is cleared only after the upload and its permissions are verified; when the upload or verification fails, it is kept on the phone for a retry. A clarification call following a refusal requires separate consent to its recording and is not automatically sent for AI processing.
Documentation of consent and access: a random browser identifier is kept, along with an identified account if you signed in, the decisions on consent or refusal, the times of those decisions, and the versions of the documents shown. After a refusal, a number for a personal clarification call is shown. Restoring access is documented after a call with Oren: the language of the call, his confirmation that the terms were explained and consent was given, a short note, the document versions, the identity of the approver and the date of approval. There is no recording of a self-declaration that restores access. The clarification call by itself is not consent to the service or approval of access. This access data is not a browser fingerprint and is not used for advertising.
Requests submitted through the privacy and accessibility channel are kept for the purpose of handling the request, together with the contact details you chose to provide and the date it was handled. To prevent flooding, a hashed security identifier limited to the context of requests is also kept, which does not reliably identify you as a person. This channel does not require consent to the support service.
Technical access logs are automatically deleted after 365 days.
Requests, call recordings and support session documentation are kept for an unlimited period. This is a declared policy: the archive is used for legal coverage, quality control, and learning and improving the service. You can ask to review your material or have it deleted at any time — see the Rights section below — and a deletion request will be reviewed and answered in accordance with the law (subject to the need to retain documentation for legal protection).
6. 🔗 External services involved in providing the service
The information is not sold and is not shared for advertising purposes, and the site does not use advertising tracking tools (Google Analytics, Facebook Pixel, etc.). That said, providing the service relies on external providers, and here is the data that reaches them:
| Provider | What reaches it | For |
|---|---|---|
| Google Gemini | The audio of calls with "Shula", in real time; and for a registered customer — also a summary of their previous calls | Running the voice assistant |
| Anthropic (Claude) | Transcript excerpts as text: the technical question and a short excerpt from the call — during the call; the screenshots you attached to the request from which the call was opened (up to four) — during the call; and the full transcript — afterward | In-depth lookup for your model during the call; summary, recommendations and quality control afterward |
| Google Drive | Call and session recordings | Secure storage of the archive |
| Google (sign-in) | Verifying your identity against your Google account, at your choice | One-click email verification |
| Site fonts | Font files are served from the site's own server | Displaying pages without a separate call to an external font service |
| Cloudflare | All site traffic passes through it | Security, DDoS protection and call relaying |
| Telegram / Firebase (Google) / ntfy | Operational notifications to the site owner, which include the request details you provided | So the site owner knows you got in touch |
| SMS4FREE (an Israeli provider) | The mobile phone number you provided, and the content of the verification code message | Sending a verification code by SMS during registration |
7. 🍪 Cookies
The site uses only two kinds of cookies:
| Cookie name | Type | Validity period | Purpose |
|---|---|---|---|
PHPSESSID | Essential (Session) | Until the browser is closed | Managing authenticated sign-in — without this cookie the site will not function |
oa_visitor | Statistics (1 year) | 12 months | Anonymous identifier for repeat visits — consent required |
il_cookie_consent | Consent (1 year) | 12 months | Storing the user's choice regarding cookies |
oa_access_browser | Essential for access and consent | 12 months | Random identifier linked to the consent state on the server; not an access authorization by itself |
oa_greet | Convenience (60 days) | 60 days | Remembers how many times you've talked with Shula on the home page, so as not to be intrusive |
c2ev | Essential for calls | Limited | Proof that this browser verified the email address — required to place a call |
The PHPSESSID cookie is an essential cookie and does not require consent. The oa_visitor cookie is only created after your consent.
8. ✅ Your rights as a data subject (Amendment 13)
You may request to review the personal information relating to you, including correspondence, transcripts and recordings, subject to identity verification and the provisions of the law. An IP address alone does not reliably identify a person.
You have the right to request correction of incorrect information relating to you.
You may request deletion of information. The request will be reviewed according to the law, the type of information and the need to retain it; there is no guarantee of blanket or automatic deletion.
You may decline the service or ask to withdraw consent. Refusing the processing required for the service blocks receipt of the service; the policy documents and the privacy and accessibility requests channel remain accessible.
To exercise your rights or submit an accessibility request, you can use the privacy and accessibility requests form, available even after declining the terms of service. The request is kept for Oren's personal review, and does not trigger recording or AI processing. An email for a reply and a description of the request are required; identity verification may be required before information is provided. Handling will follow the timeframes and conditions that apply under law.
9. 🔗 External links
The site may include a small number of links to external websites (for example, official help sites). This policy applies to this site only — external sites are governed by their own policies.
10. 📝 Updates to this policy
This policy may be updated from time to time. The most recent update date appears at the top of the document. When the version of the documents changes, explicit consent to the updated wording is required before continuing with the service; continued browsing alone does not replace it. Evidence of previous consents is kept without overwriting what was approved.
11. ⚖️ Jurisdiction and regulatory authority
This site operates in accordance with Israeli privacy protection law. For any complaint you may contact the Privacy Protection Authority: www.gov.il — Privacy Protection Authority.