Privacy Policy

1. Who we are and what this policy covers

1.1 Ornexi (“we”, “us”) is the brand name of an Israeli business owned by Tzvika Gershon. The websites ornexi.co.il (Hebrew) and ornexi.com (English), together “the site”, are operated by us. We are the controller of the database in which the personal information described in this policy is kept.

1.2 This policy explains what information is collected when you browse the site, contact us (through a form, the chat, the project wizard, the AI calculator, email, phone or WhatsApp) or receive services from us; what we do with it, who receives it, how long it is kept, and what rights you have. It is the notice required under section 11 of the Protection of Privacy Law, 5741-1981 (“the Law”).

1.3 This policy does not apply to websites we build or host for clients. On those sites the client is the controller of the information and is responsible for it. We act for the client as a processor, which means we process the information only on the client’s instructions and under our agreement with them. Questions about information on those sites should be sent to the client, under that site’s privacy policy.

2. How to contact us about privacy

• Privacy contact: Tzvika Gershon.
• Email for privacy matters and for exercising your rights: privacy@ornexi.com
• General email: office@ornexi.com
• Phone: +972 73-737-3191

Under the Law, we are not required to appoint a privacy protection officer. Requests are handled directly by the business owner.

3. The notice under section 11 of the Law, in brief

• Obligation or consent: you are under no legal obligation to give us any information. Giving it depends on your will and your consent.
• If you do not give it: you can browse the site and read its content without giving any details. Without contact details we cannot reply to an inquiry, prepare a quote or provide a service.
• Purposes: replying to inquiries, preparing quotes, providing the services and managing the engagement, securing the site and preventing abuse, complying with legal obligations, and statistics that do not identify anyone (details in section 5).
• Who receives it: providers that process it for us (email, message delivery, the server, the chat’s AI model), and authorities where the law requires it (details in section 7). Some of the providers operate outside Israel (section 8).
• Your rights: to inspect the information about you (section 13 of the Law) and to ask for it to be corrected or deleted (section 14 of the Law). Details in section 11.

4. What information we collect

4.1 Information you give us

• Contact form: name, email, phone, business name (if given) and the content of the message.
• Project wizard: your answers about the site you want (type of business, type of site, features you need and so on) and the contact details you add. The summary is sent to us only when you click send.
• AI calculator: your answers about your business, the estimate calculated from them, and contact details if you asked us to get back to you.
• The chat (the AI assistant): the messages you write, and the contact details you give so that we can get back to you (see section 6).
• Direct contact: details you give us by email, phone or WhatsApp. Phone calls are not recorded.
• Clients: the details needed for the agreement, the billing documents and the receipts — name, ID number or business or company number, address, contact details and transaction details. If a payment is made by credit card, it is made through an external payment provider; we never store credit card numbers.

4.2 Technical information

• When you start filling in a form or open the chat, when you send a form and when you send a chat message, our server processes your device’s IP address for rate limiting and to prevent abuse. The address itself is not stored and is not written to any log. Only an encrypted code of it (a hash) is kept, made with a random value that changes every day, so that after that day the address cannot be recovered from it.
• An inquiry sent through the contact form, the project wizard or the AI calculator passes automatic checks against spam and abuse. The checks are made by our own code, with no external service: a single-use token that our server issues and signs when you start filling in the form, a short computation that your browser performs in the background, and a check for common signs of spam, such as a link or a phone number in an unusual format. None of this is stored in your browser. An inquiry in which signs of spam were found reaches us marked as such. An inquiry that does not pass the checks may be refused; it is then not sent to us and not kept. The results of the checks are also counted as daily numbers, which are kept for 14 days and do not identify anyone.
• The server does not keep a log of visitors’ IP addresses for the site’s pages. The technical logs of the forms and chat service contain the time, path, status, duration and the beginning of the encrypted code. For a form that is sent, they also contain the result of the checks: whether it passed, whether it was sent with the page’s script or without it, which signs of spam were found, and how long the computation took. They never contain a name, an IP address, the content of a message or contact details.
• The web server’s error logs and the server’s protection mechanisms (a firewall and the blocking of intrusion attempts) may record the IP addresses of failed or blocked connections, for a limited time and for security purposes only.
• Communication between you and the site is encrypted.

4.3 Statistics that do not identify you

We may collect aggregate usage data about the site: which pages were viewed, where visitors came from (for example a search engine or a link), the approximate country or region, the type of device and browser, and which buttons or forms led to an inquiry. This is done without cookies and without storing IP addresses. To count unique visitors we may use, if at all, a temporary code that does not allow identification and changes every day. The data is kept as aggregate numbers only and is not linked to any person.

4.4 Cookies and local storage

The site does not use cookies — not for tracking, not for advertising and not for statistics — and does not load third-party code: the fonts and components are served from our own server. The only thing stored in your browser is the accessibility preferences you chose (text size, contrast and so on). They are stored on your device only and are not sent to us.

5. How we use the information

5.1 We use the information to:

• reply to inquiries and prepare quotes and specifications;
• provide the services, manage the engagement, issue billing documents and receipts, and collect payment;
• send service messages about the engagement (for example about a domain renewal or maintenance) by email or WhatsApp;
• secure the site and the service, and prevent abuse and fraud;
• comply with legal obligations, such as keeping accounting records;
• understand how the site is used and improve it, based on statistics that do not identify anyone;
• exercise or defend legal rights in case of a dispute.

5.2 Marketing: we will not send you advertising (newsletters, offers and so on) unless you have given separate and explicit consent, and you can always unsubscribe in the way stated in the message. Contacting us is not consent to marketing.

5.3 We will not sell, rent or give your information to marketers or data brokers.

6. The AI assistant (the chat)

6.1 The chat on the site is powered by a language model from Anthropic (the Claude model). It is not a person, and it is not authorized to commit us to prices, timelines or terms. Commitments are made only in writing, by us.

6.2 Every message you write is sent, together with the earlier messages in the same conversation, to Anthropic’s servers in the United States to generate the reply. Under Anthropic’s commercial terms, it may not train models on this content. Under its policy, it deletes the content within 30 days, unless the law requires it to keep it, or the conversation was flagged as violating its usage policy, in which case it may keep it for up to two years.

6.3 We do not keep a conversation in which no contact details were given. If you gave contact details in the chat so that we can get back to you, the conversation and your contact details are sent to us as an inquiry and kept like any other inquiry (section 10).

6.4 Do not write sensitive information in the chat: medical or financial information, ID numbers, passwords and the like. The chat is meant only for questions about our services.

6.5 The number of chat messages per day is limited. When the chat is unavailable, the forms, the phone and WhatsApp keep working.

7. Who receives the information (providers and processors)

7.1 We give the information to providers that process it for us, only for the purposes above. We choose well-known providers that apply accepted security measures:

7.2 We will also disclose information: to lawyers, accountants and advisers bound by confidentiality, as needed; to authorities, a court or another competent body, under a lawful order or demand — and, where the law allows, we will tell you; and to anyone who acquires the business, subject to this policy.

7.3 If we replace a provider or add one, we will update this policy.

8. Transfers outside Israel

8.1 Some of the providers in section 7 process the information outside Israel.

8.2 The service that delivers your inquiries and our server are in European Union member states, to which transfers are permitted under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

8.3 The mailbox and the chat’s model are in the United States. The transfer to them is based on your consent: when you send a form or a chat message after a notice about it was shown to you, or when you contact us by email.

8.4 We choose well-known providers that apply accepted security measures, and we work to have each provider undertake to us in writing to protect the information and keep it confidential.

9. Information security

9.1 We take reasonable and accepted measures to protect the information: encrypted communication, a hardened server with restricted access, separation between keys and services, rate limits and spam prevention, encrypted backups, and deletion of information that is no longer needed. On our side, access to the information is limited to the business owner.

9.2 No system is completely immune. In the event of a security incident that may harm you, we will act as the law requires, including notifying the Privacy Protection Authority and you, where this is required.

10. How long we keep information

10.1 An inquiry sent from the site (through a form, the wizard, the calculator, or a chat in which you gave contact details) passes through three stations:

(a) A temporary sending queue on our server: the inquiry stays there only until the delivery service confirms it has received it, usually within seconds. If the service is unavailable, the server keeps trying for up to 30 days, and then deletes it.

(b) The delivery service (Brevo): passes the inquiry to our mailbox. It keeps a record of the delivery, including the subject line, for up to one month, and does not keep the content of the inquiry.

(c) Our mailbox, and in the future also the inquiry system: this is where the inquiry is kept over time, for the periods in section 10.2.

10.2 Retention periods:

10.3 The inquiry system, once it is in operation: our internal system for managing inquiries and clients, which will run on our server in Germany, with access limited to the business owner. The information in it will be kept for the periods in section 10.2 and deleted when they end. Its backups will be encrypted, and information deleted from it will also be deleted from the backups within 90 days at most. Until it is in operation, inquiries are kept in the mailbox only.

10.4 Information needed to resolve a dispute or a claim may be kept until it is over.

11. Your rights

11.1 Right of inspection: you are entitled to inspect the personal information about you in our database (section 13 of the Law). Inspection is free of charge.

11.2 Right to correction and deletion: if the information is not correct, complete, clear or up to date, you may ask us to correct or delete it (section 14 of the Law). We may refuse a deletion when the law requires us to keep the information (for example, accounting documents) or when it is needed to resolve a dispute, and we will tell you so. In addition, and regardless of the conditions in the Law, you may ask us to delete an inquiry you sent, and we will delete it unless the law requires us to keep it.

11.3 Withdrawing consent: you may withdraw any consent you gave at any time, including by asking us to stop contacting you. Withdrawal does not affect the lawfulness of processing carried out before it.

11.4 How to contact us: by email to privacy@ornexi.com. To protect the information, we will ask to verify your identity before we respond. We will reply within 30 days.

11.5 Complaints: if you believe your privacy has been infringed, you may contact the Privacy Protection Authority at the Israeli Ministry of Justice, through the Authority’s website on gov.il.

12. Minors

The site and the services are intended for people aged 18 and over. We do not knowingly collect information from minors. If you learn that a minor has given us information, write to us and we will delete it.

13. Links to other websites

The site may contain links to third-party websites, for example sources in the articles or the WhatsApp service. This policy does not apply to them, and we recommend reading their privacy policies.

14. Changes to this policy

We may update this policy from time to time, for example when we replace a provider or add a service. The updated version will be published on this page with the date of the update, and a material change will be clearly indicated on the site. We will not use information you already gave us for a new purpose that is not described in the policy that was in force when you gave it, unless you agree to it.

15. Governing law and language

15.1 This policy is governed by Israeli law.

15.2 This policy is also published in Hebrew. If there is any discrepancy between the Hebrew and the English versions, the Hebrew version prevails.