1. Who we are
The website at shabetzli.com and the Shabetzli service are operated by Shabetzli ("we", "us"), which operates in Israel. You can reach us about anything in this policy at get.nivoai@gmail.com.
This policy is also available in Hebrew. For users in Israel, if there is any inconsistency between the versions, the Hebrew version prevails. The policy applies equally to everyone, regardless of gender.
2. Two different roles
We handle personal information in two different capacities:
- Our website, waitlist and contact forms, and business-customer accounts. Here we decide why and how information is processed. We are the controller (in Israeli terms, the controller of the database).
- Employee information in the service. When a business (our customer) uses Shabetzli to schedule its staff and record their hours, the business decides whose information is processed and for what purpose. For that information the business is the controller, and we are its processor (in Israeli terms, a holder of the database on its behalf): we process the information only on the business's instructions and under our agreement with it. If you are an employee, your employer is your first point of contact for requests about this information, and we will help them answer.
3. Information we collect through the website
3.1 Forms
When you join the waitlist or contact us, we collect what you enter: your email address, your phone number, or both, and, if you choose to provide them, your name, business name, industry, the topic of your message and the message itself. We also record the page you came from and the language of the site you used, so we know how to reply.
Form submissions are processed by Formspark, a form-handling service, which forwards them to us.
3.2 Technical information
Like most websites, our hosting provider (Vercel) automatically records technical information when you visit, such as your IP address, browser type, the pages requested and the time of the request. We use these logs to operate and secure the site.
To display the site, your browser also loads resources directly from third-party services: fonts from Google Fonts, scripts and styles from cdnjs (Cloudflare) and icons from Iconify. These providers receive your IP address and basic browser information when your browser requests those files, and process it under their own privacy policies.
3.3 Cookies and browser storage
At the time of writing, this website does not set its own cookies and does not use analytics, advertising or tracking technologies. The icon library may keep copies of icons in your browser's local storage so pages load faster; this contains no personal information. If we add analytics or similar technologies, we will update this policy first and, where the law requires, ask for your consent.
4. Information we process in the service
When a business uses Shabetzli, we process:
- Manager and account details: names, email addresses, phone numbers and business details of the people who set up and manage the account.
- Employee details provided by the business: name, phone number, role, skills, the location they work at, and the scheduling rules that apply to them.
- Language preference: the language each employee chose to receive messages in.
- Employees' messages: the WhatsApp messages each employee sends to Shabetzli are processed when they arrive, so that the service can understand them. We do not store the raw text of these conversations. We keep only the structured results needed to run scheduling and the time clock - for example availability, time-off requests, preferences, swap and cover requests, shifts and clock-in and clock-out times - and a summary of the conversation.
- Scheduling data: draft and published schedules, swaps, cover arrangements and related history.
- Time clock data: the times each employee clocks in and out by message, and the hours calculated from them per shift, week and month, compared with the schedule (for example late starts, missed clock-outs and overtime). Each employee can see their own hours; the business's managers can see their team's. The time clock does not collect GPS or other location data.
- Service logs: technical records of how the service is used, kept to operate, secure and improve it.
Employees sometimes explain why they can't work - for example, an exam, a medical appointment or a family matter. We don't ask for this, and we encourage employees to share only what's needed to arrange their shifts. Such information may be information of special sensitivity under Israeli law (for example, health information), and we handle it with corresponding care. Managers only ever see a summary, never the raw text of a conversation.
Messages to and from employees are sent through WhatsApp, which is operated by Meta. WhatsApp processes messages under its own terms and privacy policy, and a copy of each chat remains on the employee's own phone, as with any WhatsApp conversation.
5. Is providing information required?
No law requires you to give us personal information, and providing it depends on your choice. Without an email address, however, we cannot add you to the waitlist or reply to you. In the service, employee details are provided by the employer. An employee who does not reply to Shabetzli or does not clock in through it may need to arrange their shifts or hours with their employer another way; an employee who does not want to use Shabetzli should tell their employer.
6. Why we use information
- To run the waitlist, reply to your message, and get in touch when a spot opens.
- To provide the service: collect availability, prepare schedules, handle swaps and cover, and send each employee their shifts.
- To run the time clock: record clock-in and clock-out times, calculate hours and show them to the employee and their managers.
- To produce the summaries, hours and weekly figures managers see in the manager platform.
- To onboard and support customers.
- To keep the website and service secure, prevent misuse and fix problems.
- To improve the service, using information only to the extent needed for that purpose.
- To comply with legal obligations and protect our legal rights.
We use automated tools, including AI language models, to understand messages written in free text and to prepare draft schedules, summaries and hours. A manager reviews and approves every schedule before it is published; Shabetzli does not make decisions about employees on its own, and the business remains responsible for decisions it makes.
We do not sell personal information, and we do not use it for advertising.
If you are in the European Union or the United Kingdom, our legal bases for the processing we carry out as controller are: taking steps at your request before entering into a contract, or performing a contract (waitlist, contact, customer accounts); our legitimate interests in running, improving and securing our business, balanced against your rights; your consent, where we ask for it; and compliance with legal obligations. Where we act as a processor, the business we act for determines the legal basis.
7. Who we share information with
- Service providers that help us run the website and the service - for example hosting, form handling, messaging, AI processing and email - under agreements that allow them to use the information only to provide services to us and require them to protect it.
- The business you work for, if you are an employee scheduled through Shabetzli: your managers see your schedule, your requests, your hours and clock-in and clock-out times, and summaries of your conversations.
- Authorities, where we are required to by law or a court order, or where needed to protect our rights, our users or the public.
- A successor business, if Shabetzli is involved in a merger, acquisition or sale of assets, provided it continues to protect the information in line with this policy.
8. International transfers
Some of our service providers store or process information outside Israel. When we transfer information abroad, we do so in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 and, for information about people in the EU or the UK, with appropriate safeguards under the GDPR.
9. How long we keep information
- The raw text of employees' conversations: not stored once the message has been processed.
- Waitlist and contact submissions: for as long as the waitlist is active or as needed to handle your request, and then deleted, unless you become a customer.
- Service data, including schedules and time clock records: for as long as the customer's account is active, and then deleted or anonymized within a reasonable period, unless the customer instructs us otherwise or the law requires us to keep it. Customers are responsible for keeping any records they themselves must retain by law.
- Technical logs: for a limited period, as needed for security and troubleshooting.
10. Security
We use reasonable technical and organizational measures to protect personal information, in line with the Privacy Protection (Data Security) Regulations, 5777-2017, and we limit access to people who need it to run and support the service. No system is completely secure, and we cannot guarantee absolute security. If a security incident affects personal information, we will notify the Privacy Protection Authority, our customers and the people affected where the law requires.
11. Your rights
Under Israeli law
Under the Protection of Privacy Law, 5741-1981, as amended (including Amendment 13), you may ask to review personal information about you held in a database, and to have information corrected or deleted if it is inaccurate, incomplete, unclear or out of date. If we refuse a request, we will tell you why, and you may appeal as the law provides. You may also ask to be removed from any list used to contact you, and you can unsubscribe from our emails at any time. If you believe your rights have been infringed, you may contact the Privacy Protection Authority.
Under the GDPR (visitors in the EU and UK)
You may have the right to access your information, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time without affecting processing that took place before. You may also lodge a complaint with your local data protection authority.
How to make a request
Write to get.nivoai@gmail.com. We may need to verify your identity before acting on a request, and we will respond within the time the law sets. If you are an employee and your request concerns information we hold for your employer, we may refer it to your employer and help them respond.
12. Minors
The website is intended for businesses and is not directed at children. Where a business schedules employees under 18 through Shabetzli, the business is responsible for any consent or notice the law requires.
13. Emails from us
By joining the waitlist, you agree that we may contact you about early access to Shabetzli by email, phone or WhatsApp, using the details you gave us. Every email includes a way to unsubscribe, and you can always ask us to stop contacting you or write to us and we will remove you.
14. Changes to this policy
We will update this policy as the service develops. The date at the top shows when it was last changed. If we make a significant change, we will make it clear on the website or tell customers directly before it takes effect.
15. Contact
Questions or requests about privacy: get.nivoai@gmail.com. For a plain-language overview, see our Security & Privacy page.