מדיניות הפרטיות

This Privacy Policy describes how TasKey collects, uses, stores, and protects user information in the TasKey web-based CRM application, available at:

https://taskey.co.il

(hereinafter referred to as the "Website").
"Personal Information" includes, among other things, user details, system usage data,
and information related to services and purchases made through the Website
(hereinafter referred to as the "Information").
All Information is stored in TasKey's databases and processed in accordance with
the provisions of the Israeli Protection of Privacy Law, 5741-1981.

Information Security

TasKey makes significant efforts to protect the security of users' information
and prevent unauthorized access by third parties.
The collection and processing of information are carried out using advanced
security technologies, including SSL encryption.
The system may only be accessed using a personal username and password.
TasKey reserves the right to suspend a user's account and/or condition the
provision of services upon receiving proof that the account was created and
used in accordance with these Terms and applicable law.

User Consent and Limitation of Claims

User Consent and Limitation of Liability

By accepting the Terms of Use and this Privacy Policy, the user declares that they shall have no claim, demand, or legal action against TasKey, the owners of the Website, or anyone acting on their behalf, arising from hacking attempts, unauthorized access to systems, malfunctions, disruptions, or technical failures, to the fullest extent permitted by applicable law.

The user waives any claims regarding system availability, response times, maintenance work, data updates, or technical issues.

Payments and Billing Information

As detailed in the Terms of Use, payments are processed through third-party payment service providers, including Google and Apple.

TasKey does not store credit card information on its servers.

Communications and Notifications

TasKey and/or its representatives may send users updates regarding system activity and service-related notifications.

The user agrees to receive emails at the address provided during registration and may unsubscribe at any time by using the unsubscribe link included in each email.

Registration on the Website constitutes consent to receive push notifications, which may be considered advertising messages under Section 30A of the Israeli Communications Law (Telecommunications and Broadcasting), 2008.

Users may disable push notifications through their system settings.

Advertisements

TasKey reserves the right to display advertisements on the Website.

By using or registering on the Website, the user agrees to the display of such advertisements.

Cookies and Tracking Technologies

TasKey uses Cookies and similar technologies to ensure the proper operation of the system, enhance security, authenticate users, collect statistical information, and improve the user experience.

Information collected through Cookies does not personally identify the user.

The use of Cookies is also subject to Google's Privacy Policy, as published on Google's official websites.

Facebook Integration and Lead Data (Meta Platforms)

TasKey allows users to optionally connect their Facebook account in order to view and manage leads within the TasKey CRM system.

When a user connects their Facebook account and grants the required permissions, TasKey may access the following information solely for the purpose of displaying leads within the CRM:

• A list of Facebook Pages managed by the user.
• Business Manager information associated with the user.
• Lead data received from connected Facebook Pages (such as name, email address, and phone number).

Purpose of Using Facebook Data

Facebook data is used exclusively to:

• Select the Facebook Page managed by the user.
• Display leads within the TasKey dashboard.
• View and manage the user's own lead data.

TasKey does not publish content on Facebook, send automated messages, run advertising campaigns, modify Facebook assets, or collect leads without the user's explicit action.

Access to Facebook data is granted only after the user provides explicit authorization through Facebook Login.

Retention and Deletion of Facebook Data

Users may request the deletion of Facebook-related data at any time by contacting:

📧 privacy@taskey.co.il

https://taskey.co.il/facebook-data-deletion

Once the request has been verified, Facebook-related data will be deleted within thirty (30) days unless a longer retention period is required by law.

Advertising Data (Meta - ads_read)

TasKey CRM accesses advertising performance data from Meta platforms only after receiving the user's explicit authorization. The collected data is read-only and may include metrics such as impressions, clicks, advertising spend, results, and cost metrics. This information is used exclusively to generate reports and analyze advertising performance within TasKey CRM.

TasKey CRM does not create, edit, manage, or optimize advertisements. Advertising data is not shared with third parties and is accessible only to the user who granted the authorization. Users may revoke this permission at any time, upon which TasKey CRM will immediately cease all access to the advertising data.

Staging Environment

The domain taskey.sample.ws serves as a development and testing (Staging) environment for application development and approval purposes. It provides the same functionality as the primary domain taskey.co.il.

WhatsApp Business Platform

If you choose to connect your WhatsApp Business Account to TasKey CRM, we collect and process only the information that you explicitly authorize through Meta's official Embedded Signup process.
This information may include your WhatsApp Business Account (WABA), WhatsApp Business Account ID (WABA ID), Phone Number ID, Business Profile information, message templates, template status, webhook configuration, and other information required to provide WhatsApp Business functionality within TasKey CRM.
We use this information solely to:

• Connect and manage your WhatsApp Business Account.
• Display your connected WhatsApp Business information.
• Create, edit, submit, synchronize, and manage WhatsApp message templates.
• Send and receive WhatsApp Business messages initiated by you.
• Display message delivery status and conversation history.
• Maintain and operate the WhatsApp Business integration within TasKey CRM.

TasKey CRM does not access personal WhatsApp accounts and does not send messages, modify WhatsApp Business assets, or access WhatsApp Business data without your authorization.
We do not sell, rent, or share WhatsApp Business Platform data with third parties except where required by law or where necessary to provide the services requested by you.
WhatsApp Business Platform data is retained only for as long as necessary to provide the requested services or to comply with applicable legal obligations.
You may disconnect your WhatsApp Business Account at any time through TasKey CRM or your Meta Business settings. You may also request deletion of your WhatsApp Business related data by contacting privacy@taskey.co.il. Verified deletion requests will be processed within thirty (30) days unless a longer retention period is required by applicable law.
TasKey CRM processes WhatsApp Business Platform data in accordance with the Meta Platform Terms, Meta Developer Policies, WhatsApp Business Platform Terms, and applicable privacy and data protection laws.

Google User Data Privacy Policy - Google Calendar Integration

This policy applies solely to TasKey's use of Google services and Google user data through Google OAuth.

Use of Google OAuth and Google Calendar

TasKey allows users to optionally connect their Google Account, including Google Calendar, using Google's secure OAuth authentication process.

The connection is initiated solely by the user and is required to enable two-way calendar synchronization between Google Calendar and the TasKey platform.

Scope of Access to Google Calendar (Two-Way Synchronization)

When a user connects Google Calendar, TasKey may access calendar data only to perform the following actions, based solely on actions explicitly requested by the user:

• Read events from Google Calendar.
• Create new events in Google Calendar.
• Update existing events in Google Calendar.
• Delete events from Google Calendar.
• Synchronize changes between Google Calendar and the TasKey system (two-way synchronization).

TasKey does not access any Google services beyond those required to provide this functionality.

Use of Google User Data

TasKey represents and warrants that:

• Google user data is used solely to provide scheduling and two-way calendar synchronization explicitly requested by the user.
• Google user data is not used for advertising, marketing, analytics, profiling, or tracking.
• Google user data is not sold, rented, shared, or transferred to third parties.
• Access to Google user data is limited to the minimum OAuth permissions necessary to enable two-way synchronization.
• TasKey does not store Google Account passwords at any time.

Data Storage and Retention

Google Calendar data is accessible only while the connection between the user and TasKey is active. Data is stored temporarily and only as technically required to perform synchronization. TasKey does not retain Google Calendar data beyond what is necessary to provide the requested service and does not create independent copies of Google Calendar data for purposes unrelated to the functionality of the service.

User Control and Revocation of Access

Users may revoke TasKey's access to Google Calendar at any time by removing the authorization through their Google Account security settings or by disconnecting Google Calendar directly within the TasKey platform. Upon revocation, TasKey will immediately cease all access to Google Calendar data.

Compliance with Google Policies

TasKey's use of Google APIs and Google user data fully complies with the Google API Services User Data Policy, including the Limited Use requirements.

Contact Information

For any questions, inquiries, or requests regarding this Privacy Policy, please contact:

📧 privacy@taskey.co.il

---

Use of Google OAuth and Google Calendar

TasKey allows users to optionally connect their Google account, including Google Calendar, using Google’s secure OAuth authentication process.

The connection is initiated solely by the user and is required to enable two-way calendar synchronization between Google Calendar and the TasKey platform.

---

Scope of Access to Google Calendar (Two-Way Sync)

When a user connects Google Calendar, TasKey may access calendar data only to perform the following actions, strictly based on user-initiated requests:

• Read events from Google Calendar

• Create new events in Google Calendar

• Update existing events in Google Calendar

• Delete events from Google Calendar

• Synchronize changes between Google Calendar and the TasKey system (two-way synchronization)

TasKey does not access any Google services beyond what is required to provide this functionality.

---

Use of Google User Data

TasKey represents and warrants that:

• Google user data is used solely to provide scheduling and two-way calendar synchronization explicitly requested by the user

• Google user data is not used for advertising, marketing, analytics, profiling, or tracking

• Google user data is not sold, rented, shared, or transferred to third parties

• Access to Google user data is limited to the minimum OAuth permissions necessary to enable the two-way calendar sync

• TasKey does not store Google account passwords at any time

---

Data Storage and Retention

Google Calendar data is accessible only while the connection between the user and TasKey is active.

Data is stored temporarily and only as technically required to perform active synchronization.
TasKey does not retain Google Calendar data permanently and does not create independent copies of Google Calendar data for purposes unrelated to providing the requested service.

Once the user disconnects Google Calendar, access to Google Calendar data is immediately terminated, and any temporarily stored data is deleted or rendered inaccessible.

---

User Control and Revocation of Access

Users may revoke TasKey’s access to their Google Calendar at any time by:

• Removing the authorization through their Google Account security settings, or

• Disconnecting Google Calendar directly within the TasKey platform

Upon revocation, TasKey immediately ceases all access to Google Calendar data.

---

Compliance with Google Policies

TasKey’s use of Google APIs and Google user data fully complies with the Google API Services User Data Policy, including the Limited Use requirements.

---

Contact Information

For any questions or requests related to this policy or the use of Google user data, please contact:
📧 privacy@taskey.co.il