1. Who we are. This Privacy Policy explains how the Operator ("we") handles data in the WheelDeal service. It forms part of, and is governed by the same terms as, the Terms of Use - including the governing law of the State of Israel and exclusive jurisdiction in the competent courts of Tel Aviv, Israel.

2. Data we collect. Account details (email, phone number), your searches, your device location when you allow it (including any location you choose to share with a rental shop for pickup), the content of WhatsApp messages in the rental-shop threads you open through the app - which may include messages written by your contacts (the shops) - any images or voice notes exchanged in those threads, bookings, feedback, and technical/usage logs. In addition, the messaging infrastructure that keeps your WhatsApp link alive holds a TRANSIENT copy of messages arriving on your linked number - including personal chats outside rental threads - in a dedicated, isolated database, solely so that a rental-shop reply lost in transit can be recovered; these copies are automatically deleted after at most 7 days, are never read, analysed or used for any other purpose, and never enter the app's own data store unless they belong to a rental-shop thread you opened.

3. How and why we process it (purposes and their legal bases). Each purpose has its own basis, and the optional ones have their own switch. (a) OPERATING THE SERVICE - finding shops near you, letting the AI agents read shop replies and negotiate on your behalf, transcribing voice notes and reading photos, processing bookings: performance of our contract with you. Message content, images and voice notes are sent to third-party AI providers (large-language-model and speech/vision providers) for this processing. (b) SAFETY AND ABUSE PREVENTION - rate limits, anti-ban pacing, blocking misuse: our legitimate interest in keeping the service and your WhatsApp number safe. (c) QUALITY ASSURANCE - negotiation conversations and the agents' decision logs may be reviewed internally by the operator to fix and improve the AI agents' behaviour; they are never shared with other users: legitimate interest. (d) PRODUCT ANALYTICS - a structured record of your funnel steps (search, contact, reply, booking stages): ONLY with your consent, off by default, and switchable off at any time in Profile -> Your data. Turning it off stops new collection immediately. (e) MARKET INSIGHTS - your closed deals feeding anonymous, aggregated market statistics: ONLY with your consent, off by default, switchable at any time. See section 8 for exactly what this data looks like. Location you share for pickup is sent to the specific shop only after you explicitly consent on that shop's card.

4. Third-party AI providers & sub-processors. The service relies on independent third-party providers, including LLM providers (for reading and drafting messages), speech-to-text providers (for voice notes), vision providers (for reading photos), mapping providers (for locations), messaging infrastructure, and cloud database hosting (Supabase). These providers process data under their own terms, which are outside our control.

5. Your responsibilities & third-party consent. You warrant that you have the legal right to process the messages of your contacts and to have them read and replied to by automated agents and third-party AI providers. You are STRICTLY PROHIBITED from submitting highly sensitive data through the bot, including medical/health information, payment-card data, and government identification numbers.

6. Storage, retention & deletion. Data is stored on cloud infrastructure (Supabase). Retention is time-bounded and enforced by an automatic nightly prune: operational records (message-handling events, processing traces, risk events) are kept about 90 days; conversation context (negotiation threads, shop replies, sign-in history) about 180 days; your own visible history (searches and offers, which power the Trips screen) about 12 months. WhatsApp messages that recorded a price are DE-IDENTIFIED after about 180 days - the message text and the personal identifiers are removed while the pricing record is kept. Your bookings and the record of your consents are kept for the life of your account. Separately from all of the above, some data is stored in YOUR OWN BROWSER rather than on our servers - the cookie that keeps you signed in, the cookie recording your cookie choices, and, only if you allow them, the keys that remember your theme, language and currency. These live on your device, you can delete them at any time by clearing this site's data in your browser, and section 9 and the Cookie Policy list every one of them. You do not have to contact anyone to exercise your rights: Profile -> Your data lets you DOWNLOAD everything we hold about you as one file, and DELETE your account - the deletion walks every table that keys you (conversations, threads, offers, consents, risk records, all of it), tells you honestly if any part could not be removed, and can be retried. If you have lost access to your account, the operator can produce the same file for you or complete the deletion on your behalf. ONE RECORD DELIBERATELY SURVIVES A DELETION, and you should know why. We keep an internal log of which operator looked at, exported or deleted whose data - the accountability record that lets anyone ask who has been in their file. Erasing an account does not delete that log, because an operator who could erase an account to destroy the record of their own access to it would make the log worthless. Instead your address is replaced in it by a one-way code, so the entries can no longer be traced back to you by name while the record of what each operator did remains.

7. Security & breach disclaimer. We take reasonable measures to protect data, but no method of transmission or storage is fully secure, and the service is provided "AS IS". To the maximum extent permitted by law, the Operator is not liable for any unauthorised access, breach, leak or loss of data.

8. Personal data is not sold; anonymous market statistics. We do NOT sell your personal data - not your messages, your number, your location, your searches, or anything that identifies you. Separately, and only if you switch on 'Market insights' in Profile -> Your data (it is off by default), the outcome of your closed deals may feed ANONYMOUS market statistics: the region, the vehicle type, the price achieved and the negotiation approach - never your name, email, number, or the shop's identity - and only ever published in groups of at least 20 deals, so no individual outcome is recoverable. Deals closed while the switch is off never enter these statistics, and switching off stops new deals entering them. This Privacy Policy may be updated; material changes require re-acceptance on your next sign-in.

9. Cookies and what is stored in your browser. WheelDeal groups everything it stores in your browser into four categories, and only the first is set without asking. (a) STRICTLY NECESSARY - the signed cookie that keeps you logged in, and the cookie that records your answer to this very question. These cannot be switched off: without them there is no session and nowhere to record a refusal. (b) PREFERENCES - your theme, language, currency, sort order and similar, remembered on this device. (c) ANALYTICS - a first-party random identifier with nothing personal in it, plus a record of which screens you reached, so we can find the parts of the app that quietly fail. It is never sold and never used to advertise to you. (d) ADVERTISING - Google AdSense, which funds the free plan. Google's script sets Google's own cookies under Google's terms; WheelDeal does not load that script at all unless you allow this category, and paid plans never show ads. THE ESSENTIAL GROUP IS A CONDITION OF USING THE APP. There is no version of a signed-in account without a sign-in cookie, and no way to honour a refusal without somewhere to record it, so you are asked to accept those two before the app will open - and until you answer, it does not. This is not a condition on the other three: 'Essential only' is a single tap that gets you the complete product, and choosing it is as quick as accepting everything. Categories (b), (c) and (d) are OFF until you turn them on, a refusal is honoured immediately, and switching a category off deletes what is already stored in it on this device. You can change your answer at any time from the Cookies link in the app's footer or from Profile -> Your data, and withdrawing is exactly as easy as consenting. The complete, per-cookie list - every name, its purpose and how long it lasts - is published at /cookies and is generated from the application's own code, so it is always what the app actually does rather than a description of it.