B"H
Privacy Policy
Effective Date: [06/20/2026] Who we are: Eran Natanzon (DBA Tailor Tech), Exempt Dealer (Osek Patur) No. 038257499 ("Shaliach24"), operating the website https://shliach24.com. Contact / privacy questions: [support@shliach24.com]
Shaliach24 is a multi-tenant system. Responsibility depends on the type of information:
Account, billing, and platform usage data of Chabad Houses — Shaliach24 is the Data Controller.
Contacts, donor records, and content uploaded or created by a Chabad House — The Chabad House is the Data Controller, and Shaliach24 acts solely as a Data Processor, processing these data only for the purpose of providing the service according to the Chabad House's instructions. If you are a contact or donor and wish to exercise rights over data a Chabad House holds about you, please contact that Chabad House; we will assist the Chabad House as the processor on its behalf.
From donors (public donation pages): name, email, phone (if provided), donation amount, frequency, and donation history, along with limited payment metadata (transaction/charge ID — not your card number).
From Chabad Houses / users: name, email, phone, login credentials (passwords are stored Hashed, never in plaintext), language preference, subscription/billing status, and a payment method Token (not the full card number).
Contacts a Chabad House uploads/manages: names, contact details (phone/email/address), notes, important dates, family information, interests, donation records and pledges, and tasks — as entered by the Chabad House.
Technical data: IP address, browser/device information, viewed pages, and log/session data, collected automatically to operate and secure the service.
Provision of Information – Mandatory or Voluntary: You are under no legal obligation to provide these data to us or to the Chabad House, and their provision is done of your own free will and with your consent. However, without providing the mandatory data (such as payment method or email address), it will not be possible to make a donation or open a subscription account.
Credit card details are entered into, and processed by, PCI-DSS compliant clearing providers (Stripe, Kesher, Grow and Cardcom for donations; Cardcom for subscription billing). Shaliach24's servers do not receive or store full credit card numbers or CVV codes. We only store non-sensitive references (e.g., a charge ID or a reusable payment Token).
Provision, operation, and maintenance of the Platform and its features.
Processing donations and subscription payments, and recording them.
Contacting you (service messages, receipts, reminders, support) via email, and for Chabad Houses that opt-in, via the WhatsApp assistant.
Preventing fraud and abuse, and securing the service (e.g., rate-limiting, protection against bots, login lockout).
Improving the Platform.
AI-based features: To help Chabad Houses draft messages for upcoming occasions (birthdays, anniversaries, yahrzeits), we send our AI providers only the contact's first and last name, the occasion type and date, and the text of the message template. AI is also used to tidy up contact files a Chabad House chooses to upload, and to translate the interface. Our AI providers are OpenAI and Google Gemini. We never send them payment data, passwords, or any data obtained from Google APIs (see section 6).
Compliance with legal obligations (accounting, tax, legal requirements).
The legal basis (where applicable): performance of a contract, your consent, our legitimate interests, and compliance with the law. The Chabad House is responsible for the legal basis for processing data and contacting the individuals whose data it uploads.
We share data only as necessary to operate the service, with providers obligated to protect it. These providers are located partly outside of Israel, including in the United States (see section 7):
We do not sell personal data, and we do not use third-party advertising trackers. We may disclose data if required to do so by law or to protect the rights, safety, or security of the Platform.
Connecting a Google Calendar is optional. A Chabad House that turns the feature on authorises Shaliach24 through Google's standard OAuth consent screen, and we request only the scopes the feature needs:
https://www.googleapis.com/auth/calendar.events — to create, read, update and delete the calendar events this service synchronises.
This is the only Google scope we request. We synchronise the account's primary calendar, and we do not ask for permission to read your other calendars or their events.
Limited Use: Shaliach24's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google user data is never sent to any artificial-intelligence or machine-learning provider. It is never used to develop, improve, or train generalised AI or ML models, whether our own or a third party's. The AI features described in section 4 operate only on data entered into Shaliach24 by the Chabad House, and have no access to data obtained from Google APIs.
We do not sell Google user data, and we do not transfer it for advertising, credit assessment, or lending purposes. No human reads it, except: with your explicit consent; where necessary for security purposes such as investigating abuse; to comply with applicable law; or where the data has been aggregated and anonymised.
Google user data is used solely to provide the calendar-synchronisation feature to the Chabad House that connected the account, and is stored only for as long as the connection remains active. You may disconnect at any time from within Shaliach24, or revoke access at myaccount.google.com/permissions. Disconnecting deletes the stored access and refresh tokens, so we can no longer reach your Google account, and synchronisation stops. Events already copied into the Chabad House's own calendar inside Shaliach24 remain in its account until the Chabad House deletes them, and events in your Google Calendar are untouched. To have the copies erased, contact the Chabad House, or us at [support@shliach24.com].
Because our hosting and several providers are located outside of Israel (mainly in the US), your data is transferred to and stored in these countries. We rely on appropriate safeguards and the compliance frameworks of the providers themselves.
We retain personal data as long as necessary to provide the service and for legitimate business and legal purposes (e.g., accounting/tax records, which Israeli law may require keeping for [7] years). Contact and donor data of a Chabad House are retained as long as the Chabad House's account is active, and for [30] days after termination (to allow data export), after which they will be deleted unless the law requires longer retention.
Under the Israeli Privacy Protection Law (and where applicable, GDPR/UK-GDPR for international donors), you may have the following rights: to access the data we hold about you, to correct inaccurate data, to request deletion, to object to or restrict certain processing, and to request a copy of your data. To exercise these rights, contact [support@shliach24.com].
For data controlled by the Chabad House (its contacts/donors), please contact that Chabad House; as the data processor on behalf of the Chabad House, Shaliach24 will assist the Chabad House in responding.
Direct Mailing: If a Chabad House uses the data for "direct mailing" (contacting based on belonging to a population group or a specific characteristic), you have the right to demand that information relating to you be deleted from its Israeli mailing database. The Platform provides Chabad Houses with the tools to perform this deletion.
You may also file a complaint with the Israeli Privacy Protection Authority.
We protect data using measures that include: encrypted traffic (HTTPS/TLS with HSTS), encryption of sensitive access credentials at rest, Hashed passwords, role-based and per-tenant access controls, login lockout against brute-force attacks, rate limiting and bot protection on public forms, and restricted administrative access. No method is perfectly secure, but we work to protect your data and respond to incidents.
Data Breach: In the event of a severe security incident raising concerns of a data leak from the Platform's databases, Shaliach24 will report this to the Chabad House (the Database Controller) without delay, so that it can fulfill its reporting obligations to the Privacy Protection Authority or the affected individuals, as required by law.
We use essential cookies only — for secure login sessions and security (including Cloudflare Turnstile bot protection). We do not use advertising or cross-site tracking cookies. Usage analytics are first-party: page views by signed-in users are recorded on our own servers to operate and improve the Platform, and are not shared with any third-party analytics or advertising provider.
The Platform is intended for adults (Chabad Houses and adult donors). It is not directed at children, and we do not knowingly collect children's data on our own behalf. However, since Chabad Houses manage communities, they may enter information into the system about children in the community (e.g., for tasks or Bar/Bat Mitzvah reminders). It is hereby clarified that if a Chabad House chooses to upload personal data of minors (under the age of 18), the exclusive responsibility for obtaining the consent of parents or legal guardians lies solely with the Chabad House.
We may update this policy. Material changes will be notified (e.g., via email or within the application), and the "Effective date" above will be updated.
Privacy-related questions or requests: [support@shliach24.com], Eran Natanzon (Tailor Tech), Holon, Israel.