Privacy Policy

Last updated: November 6, 2026

This policy explains what personal information Winch.AI collects through this website, why, and what choices you have. If anything here is unclear, email us at eshed.shisha@winchai.co.il.

1. Who we are

This website is operated by Winch.AI, a business of LEGAL NAME, business ID BUSINESS ID, REGISTERED ADDRESS, Israel ("Winch.AI", "we", "us"). Winch.AI is the controller (database owner) of the personal information described in this policy.

2. Information we collect

Information you give us

When you fill in the contact form, message us on WhatsApp, email or call us, we collect:

  • Your name, company name, email address and phone number;
  • Your team size, the services you're interested in and anything you write in your message;
  • Your consent choices (agreeing to this policy and, if you opt in, to marketing messages).

You are not legally required to give us this information, but without your contact details we can't respond to your request.

Information collected automatically

  • Technical data such as your IP address, approximate country, browser and device type, collected by our hosting provider for security and delivery;
  • Campaign data (for example "utm" parameters in the link you clicked) and the page you submitted the form from, so we know which channels bring visitors;
  • Aggregated, cookie-free usage statistics (pages viewed, referrer), if analytics is enabled.

3. How we use your information

  • To respond to your request and schedule a free automation audit;
  • To prepare proposals and, if we work together, to provide our services;
  • To send you marketing messages, only if you explicitly opted in;
  • To protect the website against spam and abuse;
  • To understand which content and channels work, so we can improve the website;
  • To comply with legal obligations and to establish or defend legal claims.

If you are in the European Economic Area or the UK, we rely on these legal bases: your consent (marketing), steps taken at your request before entering into a contract (responding to your inquiry), our legitimate interests (security, improving the website) and legal obligations.

4. Marketing messages

We send advertising messages by email, SMS or WhatsApp only to people who gave explicit consent, in line with section 30A of Israel's Communications (Telecommunications and Broadcasting) Law, 5742-1982. Service messages related to your request (for example, scheduling your audit call) are not marketing. You can withdraw marketing consent at any time by clicking "unsubscribe", replying "STOP" or "הסר", or emailing us.

5. Who we share information with

We do not sell your personal information. We share it only with service providers that help us run the business, under contractual confidentiality and security obligations:

  • Our CRM and marketing-automation platform (HighLevel / LeadConnector), which stores contact details and sends messages;
  • Website hosting, security and analytics (Cloudflare);
  • Email, SMS and WhatsApp delivery providers (for example Google Workspace and Meta's WhatsApp Business Platform);
  • Professional advisers, and authorities where the law requires it.

6. International transfers

Some of these providers store or process data outside Israel, including in the United States and the European Union. When information is transferred, we rely on the safeguards permitted under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001 and, where relevant, the GDPR (such as Standard Contractual Clauses).

7. How long we keep it

We keep inquiry information for as long as needed to handle your request and for up to 24 months after our last contact, unless we start working together or the law requires us to keep it longer. Client information is kept for the duration of our engagement and as required for tax and legal purposes afterwards.

8. Your rights

Under Israel's Privacy Protection Law, 5741-1981, you may ask to see the information we hold about you and ask us to correct or delete information that is inaccurate, incomplete or out of date. You may also ask to be removed from any list used for direct marketing. If you are in the EEA or UK, you also have the rights to restrict or object to processing, to data portability and to withdraw consent.

To use any of these rights, email eshed.shisha@winchai.co.il. We'll reply within the time limits set by law. You can also complain to the Israeli Privacy Protection Authority or, in the EEA/UK, to your local data protection authority.

9. Cookies

This website does not use advertising or tracking cookies. Our hosting provider may set strictly necessary security cookies (for example to filter bot traffic), and our analytics, if enabled, is cookie-free. If we ever add non-essential cookies, we will update this policy and ask for your consent first.

10. Security

We use reasonable technical and organisational measures to protect personal information, in line with the Privacy Protection (Data Security) Regulations, 5777-2017, including encrypted connections (HTTPS), access control and reputable providers. No method of transmission or storage is completely secure, so we can't guarantee absolute security.

11. Children

This website is intended for businesses and is not directed at people under 18. We don't knowingly collect information from minors.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date above shows when it last changed. Significant changes will be highlighted on this page.

13. Contact

Winch.AI, LEGAL NAME, REGISTERED ADDRESS
Email: eshed.shisha@winchai.co.il · Phone: +972 50-332-3151

If this policy is also published in Hebrew and the versions differ, the Hebrew version prevails for users in Israel.