Privacy policy

Who we are

TIGRIS is the business of David Layani (exempt dealer, עוסק פטור 211422183), in Netanya, Israel. It operates the site tigrispro.com and is responsible for the information it collects (the database controller). For any privacy question: contact@tigrispro.com, or on WhatsApp and by phone at +972 58 530 8200.

This document explains in plain words what information the site collects, why, who sees it, where it is kept, for how long, and what your rights are.

1. What you give us

• The forms (contact, project plan, site check): your name, your phone and/or e-mail, how to get back to you, your message, your answers and, for the site check, the address of the site checked. Your name and a way to reach you are needed to answer you (for the project plan: phone and e-mail); the rest is optional.
• The member area: to open an account, your first name, e-mail and a password, or your Google account (Google then sends us your name, e-mail and photo). Then, whatever you choose to add (name, phone, company, date of birth, photo), the files you upload, and your projects, appointments and invoices. Everything you add to your profile is optional.
• TIGRIS, the site's assistant: the messages you write to it (see part 5).
• Proposals and signatures: when we prepare a proposal for you, we keep what you told us on the phone or on a video call (your needs, your budget, how you heard about us), the summary of your project and, if you gave us your site's address, the result of its check. If you sign the proposal, we keep your name, the signature you drew, the time, the IP address and the type of device, with a digital fingerprint of the signed document: it is the proof of our agreement.

No law requires you to give us this information. Without it, we simply cannot answer you or open an account for you.

2. What is measured automatically

The site counts its own visits, without Google Analytics and without advertising. Recorded: the pages viewed, clicks on the contact buttons, where you came from (for example Google or Instagram), the type of device, the browser and system, the country estimated from the time zone, the time spent and the loading speed.

Each visit gets a random number, forgotten when the tab closes. Another random number is kept on your device for up to 13 months, to know if you come back, unless you refuse it in the cookie banner (it is then deleted). As long as you don't write to us, these numbers don't say who you are.

If you send us a request through a form, it is linked to the visit it comes from (unless you refused it in the cookie banner): the pages viewed during that visit, where you came from, your type of device and your estimated country. This helps us understand what brings in requests. Only David sees it.

To prevent abuse, the device's IP address is kept for a very short time: one hour for visit measurement, one day for the forms. It is never stored with the measurements. One exception: when you sign a proposal, the IP address is kept with the signature, as proof (see part 1).

When you open your proposal for the first time, David gets an alert.

The site also keeps on your device your settings (language, day or night, sound, accessibility settings), your choice in the cookie banner and, if you signed in, your session. If you talk to the assistant, the conversation stays in your browser until the end of the visit. The host keeps the usual technical logs (such as IP address and browser) for security and operation, and one technical cookie that serves the right version of the site. When our projects are on screen, your browser prepares in advance the opening of the client site shown (it contacts its server), so it opens faster if you click.

3. What we use the information for

• Answering your requests and preparing a quote.
• Building, managing and following up your projects, including the member area and invoices.
• Sending service e-mails: the acknowledgement of your request, your account e-mails (confirmation, sign-in, security) and the welcome message.
• Preparing your proposal, sending it and letting you sign it; reminding you once if it is still waiting (never after a no); arranging our video meeting.
• Proving what we agreed on (the signature).
• Improving the site and understanding what works.
• Protecting the site and preventing abuse (for example by limiting the number of submissions).

4. Who sees your information

Only David, the site's sole administrator, sees the requests, the accounts and the statistics. A member only sees their own area. Your profile photo is stored at a public web address that is hard to guess: someone who gets that address can see the photo. The site's monthly report (figures only, no names) opens through a private link.

5. TIGRIS, the assistant (artificial intelligence)

TIGRIS is an assistant based on artificial intelligence. To answer you, your messages are sent to Anthropic (United States), which processes them under its own terms. We don't keep the conversations: they stay in your browser, for the duration of your visit only. The assistant knows nothing about you outside the conversation and draws no conclusions about you.

TIGRIS can make mistakes. Don't share sensitive information with it (bank card, ID, password, health).

6. E-mails

The site sends no advertising. It only sends service e-mails: the acknowledgement of your request, your account e-mails (confirmation, sign-in link, security) and the welcome message. And if you ask us for a proposal: the proposal itself, a single reminder if it is still waiting, the invitation to our video meeting and its reminder the day before, the signed copy and the confirmation of your deposit. To stop the reminder, just reply "stop". If we ever offer a newsletter, it will only be with your express consent, in a separate unticked box, and every mailing will have an unsubscribe link.

7. Where the information is kept

We sell no information. It only goes to the providers that run the site:

• Supabase (an American company): the database and files, on servers in Ireland.
• Lovable (Sweden), with Cloudflare (a global network): hosting of the site, its technical logs and the technical cookie.
• Resend (an American company): sending the site's e-mails, from Ireland.
• Hostinger: the contact@tigrispro.com mailbox, where your replies arrive.
• Google (United States): sign-in with Google, if you choose it, and the Gmail inbox where David receives the details of each request.
• Anthropic (United States): the TIGRIS assistant, when it is in service.
• WhatsApp (Meta): only if you write to us on WhatsApp.
• Zoom (United States): our video meetings, if we set one.
• Morning (Israel): the receipts for your payments.

Some providers are outside Israel: in the European Union (Ireland, Sweden), recognised as offering adequate protection, and in the United States. Each only receives what it needs for the service it provides.

8. How long

• Requests and client files: as long as we work together, then as long as the law requires (invoices, for example).
• Your member area account: until you ask for it to be deleted.
• Visit measurements: 25 months at most, then they are deleted.
• The random number kept on your device: 13 months at most.
• The IP address kept against abuse: one hour (measurements) and one day (forms).
• Signed proposals and their proof of signature: for the length of the contract, then 7 years (the limitation period in Israel).
• Unsigned proposals: with the request they belong to.
• Conversations with TIGRIS: we don't keep them.

9. Your rights

Under the Israeli Privacy Protection Law, you can see the information kept about you, ask for it to be corrected or deleted, withdraw your consent and ask not to be contacted. You can also refuse the return number in the cookie banner. Write to us at contact@tigrispro.com: we answer in writing within 30 days at most, and if we refuse, we explain why. You can also contact the Israeli Privacy Protection Authority.

If you are in the European Union, the GDPR also gives you the right to restrict the use of your information, to object to it, to receive it in a readable file (portability), and to complain to the authority in your country (in France, the CNIL). What allows us to use your information: answering your request and managing your account (steps before a contract, then the contract); visit measurement and security (our legitimate interest, which you can refuse); your consent, when we ask for it.

10. Security

Access to information is limited by permissions, the connection to the site is encrypted, and we check security regularly. If a security incident affected your information, we would act under the Israeli information security regulations and notify you when necessary. No system is completely invulnerable, however.

11. Minors

The site is intended for businesses and adults. The member area is for people aged 18 and over. If you are under 18, ask a parent to contact us.

12. Updates

We update this policy when the site changes. The date at the top of the page shows the latest update.