Privacy Policy

Agent Jeremy is operated by Ori Zvida, a sole proprietor (עוסק פטור) registered in Israel under business number 209511013, of 14 HaSharon Street, Herzliya, Israel — email: contact@agent-jeremy.com. We are the "controller" of your personal data within the meaning of the EU General Data Protection Regulation ("GDPR").

We provide an apartment rental search bot on WhatsApp and Telegram, currently serving the Tel Aviv metro area and expanding to additional markets including Amsterdam.

Information you provide directly:

• Your name (if you share it)
• Your WhatsApp and/or Telegram phone number or user ID
• Your search preferences (budget, neighborhoods, apartment features, filters)
• Messages you send us through the bot
• Email address, if you contact us by email, receive email alerts, or sign up for a realtor/pro product

Information collected automatically:

• Basic technical data such as message timestamps and platform metadata (via the WhatsApp Business API and Telegram API)
• Usage data such as which features you use and how often
• Technical error logs when something in the Service malfunctions (see Section 7)

What we do not collect:

• We do not knowingly collect sensitive categories of data (health, religion, ethnicity, sexual orientation, etc.)
• We do not use AI/LLM tools to process your personal messages or personal data. Any AI/LLM processing we use is limited to processing publicly available apartment listing data (e.g., organizing or summarizing listings) — it does not touch your personal information.
• The listing alerts we send contain the listing information and a link to the original source; we do not build profiles of landlords or property owners.

We use your information to:

• Match you with relevant apartment listings based on your stated preferences
• Operate, maintain, and improve the Service
• Respond to your questions or support requests
• Send you service-related messages (e.g., new listing alerts)
• Process payments, if you purchase a paid tier
• Prevent fraud and abuse, and keep the Service secure
• Comply with legal obligations

We do not sell your personal information, and we do not use it for third-party advertising. We do not make automated decisions about you that produce legal or similarly significant effects; the matching of listings to your filters is automated, but it only determines which apartment alerts you receive.

If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases:

• Performance of a contract— to provide the Service you've requested (i.e., apartment matching, alert delivery, account management, payment status)
• Legitimate interests — for security, fraud prevention, error monitoring, and improving the Service, balanced against your rights
• Consent — for optional communications and features you opt into
• Legal obligation — where required by applicable law (e.g., tax and accounting record-keeping)

You can withdraw consent at any time by contacting us; this won't affect processing already carried out.

We never sell your data. We share information only as needed to run the Service, with the following service providers and independent platforms:

Service providers (processors) acting on our instructions:

Independent platforms that process data under their own privacy policies:

When you communicate with the bot via WhatsApp or Telegram, those platforms independently process message data on their side as part of providing their messaging services, under their own terms and privacy policies.

We may also disclose information if required by law, or in connection with a business transfer (merger, acquisition, or sale of assets), in which case we will notify you.

We are based in Israel. Israel has been recognized by the European Commission as providing an adequate level of data protection, which permits transfers of personal data from the EEA to Israel without additional safeguards.

Where our service providers (such as Microsoft Azure, Vercel, or Meta) process data outside Israel or the EEA — including potentially in the United States — they do so under recognized transfer mechanisms such as the EU-U.S. Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can review each provider's own privacy documentation for details.

We designed the website to work without tracking you, so we do not show a cookie-consent banner — there is nothing to consent to:

• Umami (analytics). We use Umami, a privacy-focused analytics tool, to understand aggregate website traffic (e.g., page views, referrers, device type, country). Umami does not use cookies and does not collect personally identifiable information — it cannot identify you individually or track you across other websites.
• Cloudflare Turnstile (security). We use Cloudflare Turnstile to prevent spam and abuse on website forms. Turnstile verifies that you are human using limited technical signals, without tracking cookies and without building an advertising profile.
• Sentry (error monitoring). If a page malfunctions, technical details of the error are logged so we can fix it. We have configured Sentry not to collect personal identifiers and not to record your session.
• Functional cookies only. The website may set strictly necessary cookies (e.g., to keep you logged in or remember your language). These do not require consent under EU law.

We retain your information for as long as you have an active subscription or an active search with the Service. In addition:

• Account data and search preferences are deleted or anonymized within 36 months after your last activity on the Service (activity restarts this period), or promptly upon your deletion request.
• Bot conversation history is retained for up to 36 months after your last activity, then deleted or anonymized.
• Technical logs and error data are retained for up to 90 days.
• Payment and billing records are retained for 7 years, as required by Israeli tax and accounting law. (Your card details are held by Paddle, not by us.)

You can request deletion of your data at any time (see Section 9); we will honor it except where retention is legally required as described above.

If you are in the EEA, UK, or Switzerland (and depending on where you live otherwise), you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Restrict or object to certain processing, including the right to object at any time to any use of your data for direct marketing
• Receive a copy of your data in a portable format
• Withdraw consent at any time

To exercise any of these rights, email contact@agent-jeremy.com. We will respond within one month; if a request is complex, we may extend this by up to two further months, and we will tell you if so.

If you believe we have not handled your data lawfully, you have the right to lodge a complaint with your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); in the UK, the ICO; or the supervisory authority of your place of residence.

The Service is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We take reasonable technical and organizational measures to protect your information, including encryption in transit and access controls. However, no method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We do not currently respond to browser "Do Not Track" signals, as no common industry standard for these signals has been established. As described in Section 7, our website does not track you in any event.

We may update this Privacy Policy from time to time. We'll update the "Last updated" date above, and for material changes, we'll notify you through the Service before they take effect.

For any questions about this Privacy Policy or your data, email us at contact@agent-jeremy.com.