Privacy Policy

Last updated: 07 November 2026

1. General

This policy explains what personal information is collected when you leave your details on the RNSSync website or contact a business that uses RNSSync's lead-management system, what it is used for, where it is stored, who receives it, and what your rights are. It is written in accordance with the Protection of Privacy Law, 5741-1981, as amended, and the regulations made under it.

Privacy contact: rnssync@gmail.com. To request access or deletion see the data deletion page. גרסה בעברית.

2. RNSSync's role

RNSSync as the responsible party. For details left on RNSSync's own website or in RNSSync's own sales enquiries, RNSSync decides what the information is used for and is responsible for it.
RNSSync as a service provider for businesses. RNSSync operates a lead-management system (CRM) and WhatsApp follow-up for businesses that are its customers, including PlayMax Academy, its first business customer. For people who contact a business, for example through its website or landing page, a Facebook or Instagram lead form, or WhatsApp, the business decides what the information is used for and is responsible for it. RNSSync runs the system for the business and under its instructions, and does not use that information for its own purposes.

Each business customer is responsible for the privacy notice it shows to the people who contact it, and for collecting leads and contact details lawfully, including obtaining consent before sending messages. The business's own privacy policy also applies to its customers' information.

3. What information is collected

RNSSync website contact form

Full name and phone number (required); email, business name and the package of interest (optional).
The IP address of whoever submits the form, kept up to 10 minutes to limit the number of submissions and prevent abuse.
Our hosting provider may record technical details such as IP address and browser type in its traffic data.

Providing details is voluntary and not legally required. Without contact details we cannot get back to you.

Facebook and Instagram lead forms (businesses that use RNSSync)

When you submit a lead form in an ad, Meta passes us the details you filled in (usually name, phone and email) and any additional answers in the form, plus identifiers of the lead, page, ad and form, the campaign name and the platform. We read the lead from Meta using the business's access to its page. The lead appears in the business's CRM.

External landing-page forms (businesses that use RNSSync)

A landing page operated by a business can send the enquiry to RNSSync's server. We receive name, phone, email and message (as the page collects them), source and campaign parameters, and the WhatsApp consent details if the page sends them.

WhatsApp (businesses that use RNSSync)

Your phone number and WhatsApp profile name.
The content of messages you and the business exchange, the time of each message and its delivery status (sent, delivered, read, failed).
Your answers to the automated questions (section 6), the consent record (section 5), and the fact that you asked to stop receiving messages.

4. How we use information and on what basis

To contact you about your enquiry and present the service, by phone or WhatsApp message.
To manage enquiries: handling status, follow-up reminders and contact history.
To run the automated WhatsApp conversation and keep the consent record.
To understand which campaigns and sources enquiries come from.
To keep the website and system secure and prevent abuse such as automated form submission.

We use information based on your consent when you submit the form, a separate consent to receive WhatsApp messages, and the need to answer an enquiry you started. We do not sell personal information and do not pass it to others for marketing.

Submitting a form allows us to contact you about your enquiry only. Advertising messages are sent only with your separate, explicit consent, in accordance with the Communications Law (Bezeq and Broadcasting).

Consent. On landing-page forms, consent to receive WhatsApp messages is a separate checkbox that is not ticked by default. An automatic first WhatsApp message is sent only if you ticked it. With your details we store the time of consent, where it was given, and the exact wording you agreed to (a numbered version of the text held by the server). Without a recorded consent, no automatic first message is sent.

Opt-out. You can stop at any time by replying "הסר" or "stop" in the WhatsApp chat, or by contacting us. We then stop messaging that number and record the request.

6. Qualification questions and automated conversation

After you reply to the first message, a rule-based automated flow with fixed texts asks two short questions (urgency and budget range), sends a short information message and offers a short call. It does not use artificial intelligence and does not generate its own text. Your answers are saved on your lead in the CRM.

7. Human involvement and automated processing

Automated processing is limited to sending messages by the rules above and labelling the lead (for example "hot" after a positive reply or a free-text message). We do not make automated decisions that have a legal or similarly significant effect on you. A positive reply or free-text message sends an alert to the business owner, and the business's people handle the enquiry and contact you. You can ask for a person to be involved at any stage by contacting us or the business.

8. Meta

We use Meta platforms (Facebook, Instagram, WhatsApp Business Platform) to receive leads and send and receive WhatsApp messages. Meta processes information under its own terms and privacy policy, which apply to you in addition to this policy, and may transfer and store information outside Israel. Copies that Meta holds itself are not under our control; to remove them use Meta's privacy tools. We keep our access credentials for Meta services in the hosting provider's protected settings, not in website pages.

9. Service providers and transfers outside Israel

To run the website and the system we use infrastructure and cloud providers, including Vercel (website and server hosting), Upstash and Supabase (databases) and Meta (receiving leads and WhatsApp messaging). The website also loads a font from Google Fonts, so the visitor's IP address is passed to Google to load it.

Some providers operate servers outside Israel, including in the USA and the EU, so information may be transferred to and stored outside Israel, for the service only. We disclose information to another party only if required by law.

10. How long information is kept

12 months. Lead information of RNSSync itself is kept for 12 months from the date of the enquiry and then deleted automatically, subject to legal exceptions (for example information the law requires us to keep, or retention for a legal claim). For leads held for a business customer, the retention period is set by the business, which is responsible for the data, and RNSSync deletes on its instruction.
WhatsApp messages and consent records belong to the lead and are deleted with it.
IP addresses used to limit submissions are deleted automatically after 10 minutes.
You can request earlier deletion at any time (data deletion page).
A bare Meta lead identifier, without your details, may be kept so that Meta's retries do not recreate the lead. Copies in an authorised user's browser are removed on that user's next sync.

11. Security

Communication with the website is encrypted (HTTPS).
The databases are accessible only to the system server and not directly from the browser.
Access to the management interface is limited to authorised users with a username and password.
The CRM also keeps a working copy of leads in each authorised user's browser.

No system is completely immune, and we cannot guarantee absolute protection against unauthorised access.

12. Your rights

Access: see the information held about you.
Correction: ask to correct information that is inaccurate, incomplete, unclear or outdated.
Deletion: ask us to delete your information, except information the law requires us to keep.
Stop contact: ask us not to contact you and withdraw consent to advertising messages.

To exercise your rights contact rnssync@gmail.com or follow the data deletion instructions. We will try to handle the request within 30 days. We may ask for details to verify your identity, such as the phone number you gave. If your information is held by a business that uses RNSSync, we will pass the request to the business. You may also contact the Privacy Protection Authority at the Ministry of Justice.

13. Cookies

The website does not use cookies and does not run third-party tracking or analytics tools. If you use the accessibility toolbar, your choices are saved in your browser only and are not sent to us.

14. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the update date.