Privacy Policy

The platform is operated by Sagarnu (a registered Israeli business, Osek No. 558635520) ("we", "us", "our") — an appointment scheduling service. This website, sagarnu.co, is one of the sites through which the service is offered.

This Privacy Policy explains how we collect, use, store, and protect personal information when you use the platform — whether as a Merchant, an End Client, or a visitor to our website.

For the purposes of this policy, the terms "Sagarnu", "we", "us", and "our" refer to Sagarnu (a registered Israeli business, Osek No. 558635520), the entity operating the service, even where the service is offered under different brands, trade names, or domains.

From Merchants (Business Owners)

We may collect the following information:

• Mobile phone number, for identity verification via one-time code (OTP)
• Full name and business name
• Business address and location information, to the extent the Merchant chooses to provide it, including via integration with Google Maps
• WhatsApp number and social media links, to the extent the Merchant chooses to add them
• Profile photo or logo
• Service descriptions, pricing, and availability schedules
• Staff member names and working hours
• Gallery images uploaded to the system

From End Clients (People Who Book Appointments)

We may collect the following information:

• Full name
• Mobile phone number, for booking confirmation, reminders, and operational updates
• Appointment details such as date, time, selected services, and selected staff member
• Notes the Merchant chooses to enter about the client, such as preferences or service history

We do not collect credit card details at this stage.

Automatically Collected

When using the website or platform, we may also collect:

• IP address and general location information, such as country or city
• Browser type, operating system, and basic device information
• Pages viewed and usage times, for operational, security, measurement, and service improvement purposes
• Language preference, stored in browser localStorage
• Temporary data related to the authentication process, stored in browser sessionStorage

We use personal information for the following purposes:

• Creating, managing, and maintaining the user account and business profile
• Secure identity verification via OTP code sent by SMS
• Operating the Merchant's booking page and enabling clients to schedule appointments
• Sending appointment confirmations, reminders, and operational updates via WhatsApp, SMS, or other digital communication channels
• Displaying business location on the booking page, where the Merchant has chosen to include it
• Providing reports, statistics, and management capabilities to Merchants
• Sending service-related communications, such as system updates, security alerts, and operational or commercial notices related to the service
• Detecting issues, preventing fraud, securing the platform, and enforcing our Terms of Service
• Improving user experience, our product, and our services
• Complying with legal requirements

For users in the European Economic Area or where GDPR applies, we process personal information on one or more of the following legal bases:

• Performance of a contract, where processing is required to provide the services you requested
• Legitimate interests, such as fraud prevention, platform security, service improvement, and day-to-day operations
• Consent, where required by law, for example in relation to certain features or communications
• Legal obligation, where we are required to process or retain information under applicable law

For Israeli residents, personal information is processed in accordance with the Protection of Privacy Law, 5741-1981, and other relevant applicable laws.

For Merchant account data — such as name, phone number, business details, and account settings — Sagarnu acts as the data controller.

For End Client data — such as names, phone numbers, and appointment details entered or managed in the platform by Merchants — Sagarnu acts generally as a data processor on behalf of the Merchant, who is the data controller. Merchants are responsible for ensuring they have a lawful basis to collect and use their clients' personal data, and for providing appropriate privacy notices where required.

We may share personal information with external service providers, only to the extent necessary for operating and providing the service, and subject to appropriate contractual, technical, and organisational safeguards.

These providers may include:

• Meta Platforms (WhatsApp Business API), for sending WhatsApp messages
• Google Maps Platform, for displaying business location on booking pages, where the Merchant chooses to use this feature
• Google Analytics, for measuring how visitors use our own marketing website
• Meta Platforms (Meta Pixel), for measuring which of our own advertisements on Facebook and Instagram lead to a business signing up — on our marketing website and signup pages only
• Infrastructure, storage, and cloud providers, for hosting servers, databases, files, and service-related infrastructure
• Communications and messaging providers, where used to send operational messages, authentications, reminders, and updates

We do not sell personal information to third parties, and we do not use End Client data for advertising purposes. We do use measurement tools on our own marketing website and signup pages, in order to understand how our advertising performs — see section 9.

We retain personal information for as long as is required to provide the service, manage operations, comply with legal requirements, resolve disputes, and enforce our rights.

As a general rule:

• Information for active accounts is retained for as long as the account remains active
• Personal information associated with a deleted account will be deleted, anonymised, or retained in a limited form, within a reasonable period and in accordance with operational, legal, and regulatory needs
• Booking records, system logs, and usage data may be retained for as long as is reasonably necessary for operational, security, service improvement, legal compliance, and dispute resolution purposes

Subject to applicable law, you may have the following rights in relation to your personal information:

• Right to access information we hold about you
• Right to request correction of inaccurate or outdated information
• Right to request deletion of personal information
• Right to request restriction of processing in certain circumstances
• Right to object to processing based on legitimate interests
• Right to receive information in a portable format, where applicable under law
• Right to withdraw consent, where processing is based on consent

To exercise your rights, please contact us at: legal@sagarnu.co

We will act on your request within a reasonable timeframe and in accordance with applicable law.

Where you are an End Client, we may in some cases need to direct your request to the relevant Merchant, who is the data controller for the information collected within that relationship.

The platform uses local browser storage mechanisms for operational purposes. In particular:

• sessionStorage may be used to store a temporary identifier or temporary data during the OTP authentication process. This information is deleted when the browser tab is closed.
• localStorage may be used to store the user's language preference. No sensitive personal information is stored there.

In addition, our marketing website and our signup pages use analytics and advertising measurement technologies:

• Google Analytics, to understand how visitors use the site and to improve it.
• Meta Pixel, which sets the _fbp and _fbc cookies, to measure which of our advertisements on Facebook and Instagram result in a business signing up. These are advertising cookies set by Meta Platforms and governed by its own policies.

These technologies are used only on our own marketing website and signup pages. Merchants’ public booking pages do not carry them, and End Client activity within the platform is never reported to advertising platforms.

Where a Google Maps component is embedded on the site, Google may load cookies or similar technologies governed by its own policies.

We apply reasonable industry-standard security measures to protect personal information from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include:

• Transmission of data over secure connections
• Restricting access to information based on operational need
• Use of authentication and security mechanisms
• Limited validity and single-use nature of OTP codes
• Ongoing monitoring, maintenance, and testing of system components

No system is completely secure, and we cannot guarantee security in all circumstances.

Our primary servers are located in Israel. Where personal information is transferred or stored outside Israel or the European Economic Area, we will take steps to implement appropriate protections in accordance with applicable law, including contractual or other mechanisms as required.

The platform is intended for businesses and their clients, and is not designed for independent use by children under the age of 13. Merchant accounts are intended for individuals who are at least 18 years old.

We do not knowingly collect personal information directly from children under 13. If you become aware that such information was collected inadvertently, please contact us and we will act to delete it in accordance with applicable law.

We may update this Privacy Policy from time to time. In the event of a material change, we will update the effective date at the top of this document and, where appropriate, provide notice through reasonable means, such as email or an in-platform notification.

Continued use of the platform following the updated policy taking effect will constitute acceptance of the updated version, subject to applicable law.

In the event of a merger, acquisition, sale of assets, reorganisation, or similar transaction, personal information may be transferred to the acquiring party or relevant entity, subject to applicable law and the protection of your rights.

For privacy-related questions, requests, or complaints:

סגרנו

Address: נחל דליה 10 כניסה א, עתלית 3033778

Phone: 058-651-8155

Email: legal@sagarnu.co

Website: sagarnu.co

If you are an Israeli resident and believe your privacy rights have been violated, you may also contact the Israeli Privacy Protection Authority.

If you are an EU resident, you may have the right to lodge a complaint with the data protection authority in your country of residence.