LEGAL
Privacy Policy
This Privacy Policy explains how Julwiz ("Julwiz", "we", "us") collects, uses, shares and protects personal information. It applies to the website www.julwiz.app and to Julwiz Studio, including emails, notifications and payment pages connected to them (together, the "Service"). It should be read together with our Terms of Service.
We process personal information in accordance with the Israeli Protection of Privacy Law, 5741-1981 and the regulations under it. Where the EU or UK General Data Protection Regulation ("GDPR") applies to you, we also process it in accordance with the GDPR.
1. Who Is Responsible
Julwiz is the controller of the personal information described in this policy. For any privacy question or request, contact us at [email protected] or through www.julwiz.app/contact.
2. Information We Collect
2.1 Information you give us
| Category | Examples |
|---|---|
| Account information | Name, email address, role in the account (owner or member). |
| Business information | Business name, business type, company or tax registration number, invoicing email address. |
| Waitlist and contact requests | Name, email address, professional role, and the content of messages you send us. |
| Design work | Parameters and choices for the designs you create, and your download history. The history includes a thumbnail image and a stored copy of each paid file. |
| Uploaded content | Reference images and 3D models attached to design requests, messages exchanged with our team, and stone scans you upload. Uploaded files are stored in your account until you delete them. A file sent with a design request is also kept with that request. |
| Support and correspondence | Emails and messages you send us, including cancellation and refund requests. |
2.2 Information collected automatically
| Category | Examples |
|---|---|
| Sign-in and security | Sign-in and session records, the devices and browsers used to sign in (browser type, operating system), IP address, and timestamps. |
| Usage and analytics | Pages and screens viewed, features used, designs opened, clicks, device and browser information, approximate location derived from IP address, and referring pages. |
| Session replay | Inside the Studio, recordings of how the interface is used: page layout, mouse movement, clicks, scrolling and the 3D preview. Text typed into input fields is masked and not recorded. |
| Email and notification interactions | Whether a notification or newsletter was delivered, opened or clicked. If you enable push notifications, the browser's push subscription details. |
| Cookies | See section 8. |
2.3 Information from third parties
| Category | Examples |
|---|---|
| Payment information | Our payment-service provider, PayPlus, processes your card details on its own secure payment page. We never receive or store your full card number or security code. We receive a payment token for renewals, limited card details (such as card type and last digits), and the result and amount of each transaction. |
| Business registry | When you enter a company number, we may look up the business's registered name in the public Israeli corporations registry (data.gov.il) to help fill in your details. |
3. How We Use Information
| Purpose | Legal basis (where GDPR applies) |
|---|---|
| Creating and administering accounts, signing you in, and providing the Service, its designs, downloads, renders and videos. | Performance of our contract with you |
| Processing payments and renewals, issuing invoices and receipts, handling failed payments, cancellations and refunds. | Contract; legal obligation (tax and accounting) |
| Sending service messages: sign-in links, payment and invoice notices, account and policy changes. | Contract; legitimate interest |
| Responding to design requests, support requests and other messages. | Contract; legitimate interest |
| Understanding how the Service is used, diagnosing problems, and improving designs, features and performance. This uses analytics and session replay. | Legitimate interest in operating and improving the Service |
| Sending newsletters and product news by email, in-app or by push. You can opt out at any time. | Legitimate interest or consent, as applicable |
| Securing the Service and preventing fraud, abuse, automated access and misuse of credits. | Legitimate interest; legal obligation |
| Complying with law and enforcing our Terms. | Legal obligation; legitimate interest |
We do not sell personal information. We do not use your uploaded files or design data to train artificial-intelligence models, and we do not allow our service providers to do so.
4. How We Share Information
We share personal information only as described below.
4.1. Service providers. We use carefully selected providers that process information on our behalf, under contractual confidentiality and data-protection obligations, and only to provide their services to us:
| Provider category | What they do | Information involved |
|---|---|---|
| Payment processing (PayPlus) | Card payments, renewals, refunds | Payment and transaction details, name and email |
| Invoicing and accounting | Issuing tax invoices, receipts and credit invoices | Business details, invoicing email, payment amounts |
| Cloud hosting and storage | Hosting the website and the Studio, databases, file storage, content delivery, security and bot protection | All information processed by the Service |
| Email delivery | Sending sign-in links, service emails and newsletters | Name, email address, message content |
| Product analytics | Usage analytics and session replay | Usage data, device and browser information, account identifiers |
| AI image generation | Producing AI-rendered photos of your designs when you request them | The rendered image of the design and the rendering instructions. No account details are sent. |
4.2. Within your account. Members of a business account can see the account's plan, credit balance, credit history, and the account's files: its downloads and the files uploaded to it, including stone scans and files sent with design requests. They can see which member used credits. The account Owner can manage members.
4.3. Legal and protection. We may disclose information to comply with law, a court order or a request from a competent authority. We may also disclose it where necessary to establish, exercise or defend legal claims, or to protect the rights, property or safety of Julwiz, our users or others.
4.4. Business transfers. If the Service is transferred, for example in a merger, acquisition or sale of assets, information may be transferred as part of that transaction. This Privacy Policy, or a policy at least as protective, will continue to apply to it.
5. International Transfers
Some of our service providers operate or store information outside Israel, including in the European Union and the United States, and may process it wherever they operate. When information is transferred outside Israel, we do so in accordance with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001. Where the GDPR applies, we use appropriate safeguards such as adequacy decisions or standard contractual clauses.
6. Retention
We keep personal information for as long as needed to provide the Service and for the purposes described in this policy. We also keep it as long as required or permitted by law, including tax, accounting and legal obligations, and as needed to resolve disputes and enforce our agreements. When information is no longer needed, we delete or anonymise it.
7. Security
We protect personal information with appropriate technical and organisational measures. These include:
- encryption in transit (HTTPS);
- access controls limited to personnel who need the information;
- signed, server-verified sessions;
- verification of payment notifications with the payment provider;
- payment pages hosted by a PCI-DSS-compliant payment provider.
No method of transmission or storage is completely secure. If a security incident affects your personal information, we will notify you and the authorities as required by law.
8. Cookies and Similar Technologies
We use a small number of cookies and similar technologies:
| Type | Purpose | Duration |
|---|---|---|
| Essential: session | Keeps you signed in to the Studio and protects the session. | Up to 6 months after the session is last renewed |
| Essential: security | Bot protection on website forms (Cloudflare Turnstile). | Short-lived |
| Analytics | An anonymous visitor identifier and a session identifier on the website. In the Studio, analytics and session-replay storage. These help us understand and improve the Service. | Visitor identifier up to 1 year; session identifier up to 24 hours |
You can block or delete cookies in your browser settings. Blocking essential cookies will prevent you from signing in to the Studio. We do not use advertising or cross-site tracking cookies.
9. Marketing Communications
We may send newsletters and product news by email, in-app and by push notification. You can opt out of newsletter emails at any time through the unsubscribe link in each email or in the Studio's notification settings. You can turn off push notifications in the Studio's notification settings or in your browser or device settings. Service messages, such as sign-in links, payment notices and policy changes, will still be sent while you have an account.
10. Your Rights
10.1. Under Israeli law, you may request to review personal information about you held in our database. If the information is inaccurate, incomplete, unclear or not up to date, you may ask us to correct or delete it. You may also ask to be removed from direct-marketing lists at any time.
10.2. Where the GDPR applies to you, you also have the following rights, subject to the conditions and exceptions in the GDPR:
- access, rectification and erasure;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interest;
- withdrawal of consent at any time, without affecting earlier processing.
10.3. How to exercise your rights. To exercise any of these rights, contact [email protected] from the email address associated with your account. We may need to verify your identity before acting on a request, and we will respond within the time required by law. Some information must be kept to comply with legal obligations, such as invoices and payment records.
10.4. Complaints. If you believe your privacy rights have been infringed, please contact us first so we can try to resolve the matter. You may also lodge a complaint with the Israeli Privacy Protection Authority or, where the GDPR applies, with your local data-protection supervisory authority.
11. Children
The Service is intended for businesses and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new version at www.julwiz.app/privacy with its version number and date. For material changes, we will notify account Owners by email or in the Service before the changes take effect.
13. Contact
For questions, requests or complaints about privacy:
- Email: [email protected]
- Contact form: www.julwiz.app/contact