1. Who we are. This Privacy Policy explains how the Operator ("we") handles data in the WheelDeal service. It forms part of, and is governed by the same terms as, the Terms of Use - including the governing law of the State of Israel and exclusive jurisdiction in the competent courts of Tel Aviv, Israel.

2. Data we collect. Account details (email, phone number), your searches, your device location when you allow it (including any location you choose to share with a rental shop for pickup), the content of WhatsApp messages in the rental-shop threads you open through the app - which may include messages written by your contacts (the shops) - any images or voice notes exchanged in those threads, bookings, feedback, and technical/usage logs.

3. How and why we process it. We process this data to operate the service: to find shops near you, to let the AI agents read shop replies and negotiate on your behalf, to transcribe voice notes and read photos, to detect abuse, and to improve the service. Message content, images and voice notes are sent to third-party AI providers (large-language-model and speech/vision providers) for processing. Negotiation conversations and the agents' decision logs may additionally be reviewed internally by the operator for quality assurance and to improve the AI agents' behaviour; they are never shared with other users. Location you share for pickup is sent to the specific shop only after you explicitly consent on that shop's card.

4. Third-party AI providers & sub-processors. The service relies on independent third-party providers, including LLM providers (for reading and drafting messages), speech-to-text providers (for voice notes), vision providers (for reading photos), mapping providers (for locations), messaging infrastructure, and cloud database hosting (Supabase). These providers process data under their own terms, which are outside our control.

5. Your responsibilities & third-party consent. You warrant that you have the legal right to process the messages of your contacts and to have them read and replied to by automated agents and third-party AI providers. You are STRICTLY PROHIBITED from submitting highly sensitive data through the bot, including medical/health information, payment-card data, and government identification numbers.

6. Storage, retention & deletion. Data is stored on cloud infrastructure (Supabase). We retain data for as long as needed to operate the service and as required by law. You may request deletion of your account data by contacting us; some records may be retained where required for legal, security or anti-abuse purposes.

7. Security & breach disclaimer. We take reasonable measures to protect data, but no method of transmission or storage is fully secure, and the service is provided "AS IS". To the maximum extent permitted by law, the Operator is not liable for any unauthorised access, breach, leak or loss of data.

8. Not sold; changes. We do not sell your personal data. This Privacy Policy may be updated; material changes require re-acceptance on your next sign-in.