Privacy policy
Last updated: 7 October 2026
1. Who we are
ServiceIL runs a management system and a website for each vehicle business that uses it. This policy covers serviceil.com, the websites and management systems ServiceIL runs for businesses, and the data kept in them. To reach us: support@serviceil.com.
2. Who is responsible for what
- For the people a business deals with, its customers, its suppliers and the visitors to its website, the business decides what is kept about them and is responsible for it. ServiceIL keeps and processes that data on the business's behalf and on its instructions, and uses it for nothing else.
- For the accounts of a business's staff, and for serviceil.com itself, ServiceIL is responsible.
- Under Israel's Privacy Protection Law, 1981, you may ask to see the data kept about you and ask for it to be corrected or deleted. To do so, ask the business you deal with. You may also write to us at support@serviceil.com, and we will pass the request on and help the business deal with it.
3. What is kept, and why
- Staff accounts: name, email address and sign-in details, so that people can sign in securely. Passwords and security codes are never stored in a readable form.
- The data a business manages: details of its customers and suppliers, vehicles and work, deals and payments, and the documents and photographs it keeps, so that it can run its work with them.
- Enquiries from a business's website: what a visitor writes in its contact form, so that the business can get back to them.
- Statistics: counts of page views and clicks, with nothing that identifies a visitor.
- Photographs published on a website do not include where they were taken.
4. Google contacts
A business may choose to connect its Google account so that its contacts come into its contact list in the system. When it does:
- What we read: the contacts in that account: names, phone numbers, email addresses, addresses, organisations, notes and websites; and the Google account's own email address and identifier and the names of its labels, to know which account is connected and to find the business's label.
- What for: to bring them into the business's own contact list, and keep that list up to date with changes made in Google.
- What we write: only new contacts the business adds in the system, under a label named after the business. We never edit or delete anything in Google.
- Where it is kept: in that business's own database, on servers in Israel, and in its backups in the European Union. The access Google grants us is stored encrypted.
- What we never do: share it, sell it, use it for advertising, or use it to train AI models.
- Disconnecting deletes our access here and asks Google to cancel it at once; if Google does not confirm, the system says so. The business can then remove what was imported. Of an imported contact that is deleted, only a coded fingerprint, which cannot be read back without our key, and its Google reference are kept, so that it is not imported again.
ServiceIL's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. Who else handles data
We use service providers that handle data on our behalf and only to provide the service:
- Cloud hosting: the servers in Israel, and the backups in the European Union.
- Content processing: where the system uses an outside provider to process content a user chooses to send, it does so under terms that do not let the provider use it to train or improve its products. The provider may process it outside Israel. We keep only the result, and only if the user saves it.
- Email: to send the system's messages and to receive mail sent to us.
We use no advertising, analytics or tracking services of other companies, and our pages load nothing from other companies' servers. We do not sell data or pass it to others, unless the law requires it.
6. Cookies
serviceil.com stores nothing on your device. The businesses' websites use no cookies, except to remember a choice of light or dark mode. Car pages keep on the device a dated list of the cars viewed and the links pressed, with nothing that identifies anyone, so that each device is counted once a day. The list is not sent anywhere, and past days are removed from it at the next visit to a car page. The management system uses only the cookies needed to sign in securely, and remembers display preferences on the device. There are no advertising or tracking cookies.
7. Security
Every connection is encrypted. Every account signs in with a password and an authenticator app, passwords and secrets are never stored in a readable form, and each business's data is kept apart from every other business's.
8. How long data is kept
- A business's data: for as long as it uses the service. The business can delete most of what it no longer needs. Records a sale, a job or a payment depends on are kept, and anything without a way to delete it is deleted on a request sent to us. A staff account is switched off rather than deleted, so that who did what stays known.
- When a business stops using the service: its data is deleted within 30 days, and the copies in backups expire within 100 days.
- Deleted data stays in backups until they expire, within 100 days at most.
- Server logs and security records, which include IP addresses: up to 30 days.
9. Changes, language and contact
- If this policy changes, the date at its top changes.
- This policy is written in Hebrew and in English. If the two differ, the Hebrew binds.
- Questions and requests: support@serviceil.com.