מדיניות פרטיות

Tony is a service for car dealers: it answers a dealer’s customers on WhatsApp, Messenger, Instagram and TikTok, prepares and publishes the ads the dealer approves, and manages the inventory. This policy explains what information we process, why, who it is shared with, how long it is kept and how to delete it.

1. Who we are

Tony is operated by AutoGolan Ltd., company number 516719135, 1 HaGefen St., Katzrin, Israel (“we”). If the service moves to another company that operates it, we will say so in advance on this page and by email to dealers. Privacy questions: privacy@trytony.co.il.

2. Who controls which data

• A dealer’s customers’ data (people who contact a dealer through Tony): the dealer controls the database, and we hold it for the dealer. We process the data only on the dealer’s behalf, under its settings and instructions and under the data processing annex between us.
• Data about dealers and their team, and about visitors to this site: we are the controller.

3. What we process

Dealers and their team

• Name, email, and phone number if entered.
• Password (stored only as a hash, never as text) or passkey, and one-time codes we send by email.
• Business details: name, address, logo, phone numbers, website.
• Inventory: cars, photos, prices and descriptions.
• The accounts the dealer connects (Facebook Page, Instagram, WhatsApp Business, TikTok, and for dealers who connect a price guide, Yad2 and Levi Itzhak) and the access keys they grant. The keys are stored encrypted.
• Account activity (who changed what and when), conversations with our support, and when you joined the business and which version of the terms you accepted.

A dealer’s customers

• Name and profile picture as shown on WhatsApp, Messenger, Instagram or TikTok.
• Phone number, or the platform identifier.
• The messages, photos, videos and voice notes they send, and the replies sent to them.
• Comments they write on the dealer’s posts.
• The details they enter in the contact form on the dealer’s site.
• The car they are looking for, and whether they agreed to be contacted when one arrives.
• Notes the dealer writes about them.

Visitors to this site

• What you type in the demo chat. If you type a phone number there, we save it with the last few messages as an enquiry, so we can get back to you.
• The name and phone number you enter in the contact form.
• A Cloudflare Turnstile check that you are not a bot. For this, Cloudflare receives your IP address and details about your browser.
• Technical error reports, without personal content. In the dealers’ app, also anonymous speed measurements.

There are no advertising or tracking cookies on the site or in the app. The app uses one sign-in cookie, and the site stores one key in your browser for the demo chat.

4. Why we use it

• To answer customers on the dealer’s behalf, and hand the dealer the ones ready to move forward.
• To prepare and publish the ads and campaigns the dealer approves.
• To send the dealer notifications and emails about the account.
• To fill in car details by plate number from the Ministry of Transport’s open vehicle registry (data.gov.il), and show market prices to dealers who connected a price guide.
• To get back to people who left their details on this site and tell them about Tony.
• Security: preventing abuse, spam and unauthorised access.
• Support, and fixing and improving the service.

We do not sell data, do not use a dealer’s customers’ data for our own marketing, and do not train AI models on it.

5. You don’t have to give us data

No law requires you to give us information; it is up to you. Without account details you cannot use the service, and without a phone number in the form we cannot get back to you. A dealer’s customer does not have to give any details, and it is the dealer, as the controller, who tells them how their data is used.

6. AI

Replies to customers and ads are written by AI models, based on what the dealer entered. By default Tony sends replies to customers without the dealer approving each one, and the dealer can take over a conversation at any time or turn automatic replies off. Ads go out only after the dealer approves them. When a customer asks whether they are talking to a person, Tony says it is an automated assistant. Tony makes no decision on its own that has a legal effect on a person: price, financing and closing a deal are settled with the dealer.

The models run at OpenAI and Google. Under their business terms, they do not train models on the data sent to them. At OpenAI we turned off response storage, and OpenAI may keep requests for up to 30 days to detect abuse. Google may cache them for up to 24 hours.

7. Who we share it with

Only with providers the service needs in order to work, and only as much as needed:

• Google Cloud - Servers, database and files (Israel (Tel Aviv region)).
• OpenAI - Writing replies to customers (United States).
• Google (Gemini on Vertex AI) - Writing ads, sorting and answering comments on posts, conversation summaries and reading photos (Outside Israel, in a region Google chooses).
• Meta - Receiving and sending WhatsApp, Messenger and Instagram messages, and publishing on Facebook and Instagram (United States and other countries).
• TikTok - Messages and publishing, for dealers who connected a TikTok account (Outside Israel).
• Gmail (Google) - Sending our emails to dealers (Outside Israel).
• Google Maps - Finding the business address (Outside Israel).
• Yad2 and Levi Itzhak - Market prices, for dealers who connected a price guide. Car details are sent, not customer details (Israel).
• Vercel - Hosting this site, the app and the dealers' sites. Requests pass through its servers (Germany (Frankfurt)).
• Cloudflare - Routing the domain and the bot check on forms (Cloudflare's global network).
• Sentry - Technical error reports, without message content (Germany).
• Apple, Google, Mozilla and Expo - Sending notifications to the dealer's phone. A notification includes the customer's name and the start of the message, unless the user turned previews off (United States).

Checking a new password against Have I Been Pwned sends only the first 5 characters of its hash, never the password or anything that identifies you. We disclose data to authorities only when the law requires it.

8. Transfers outside Israel

The database and files are stored in Google Cloud’s Tel Aviv region. Some of the providers in section 7 process data outside Israel, in Europe and the United States, as listed there. We transfer data to them under the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001: to Europe, whose law protects personal data; and to the other providers under written agreements in which they committed to protect the data, use it only to provide their service to us, and pass it on only to sub-processors bound in the same way.

9. How long it is kept

• Messages: 30 days in the app, then in an encrypted archive. The archive is deleted automatically after 24 months.
• Conversations (the customer’s name, phone, profile picture and summary): as long as the dealer keeps them and the account exists. When the dealer deletes a conversation, its messages, photos, voice notes and profile picture are deleted. Messages already in the archive are deleted there by the automatic deletion.
• Requests for a car a customer is looking for: deleted 12 months after the customer last asked.
• Enquiries from this site (the demo chat and the contact form): deleted after 12 months.
• Server logs and technical data from Meta: up to 30 days.
• Acceptance of the terms and account activity: as long as the business exists.
• An account left without a business (for example when a dealer removes you from the team): deleted after 30 days.
• Backups: copies in backups are deleted within 90 days.

When a business is deleted, all its data, files and archive are deleted. Messages archived before November 2026 are kept in files shared by several businesses, and are deleted by the automatic deletion after 24 months.

10. Security

• All traffic is encrypted (TLS), and stored data is encrypted too.
• Access keys to the dealer’s accounts are encrypted again, with a key managed in Google Cloud KMS.
• Passwords are stored only as a hash.
• Access to data is limited to team members who need it and are bound by confidentiality, and it is logged. Each business sees only its own data.
• If a security incident affects data, we will tell the dealers whose data was affected and the Privacy Protection Authority without delay, as the law requires, and help the dealer tell its customers where needed.

11. Your rights

Under the Israeli Protection of Privacy Law, 5741-1981, you can ask to see the information about you, and ask us to correct or delete information that is not correct, complete, clear or up to date. We do not send direct marketing; if a dealer sends you marketing messages, you can ask it to stop and remove you from its list.

• If you contacted a dealer: the dealer controls the data, so contacting it is fastest. You can also write to us - we will pass the request to the dealer and help it handle it.
• If you are a dealer or a visitor to this site: write to us.

Address: privacy@trytony.co.il. We answer within 30 days. How to delete data, step by step: data deletion instructions. You can also complain to the Israeli Privacy Protection Authority.

12. Children

Tony is a business tool. It is not meant for children, and we do not knowingly collect data about them.

13. Changes

We will update this policy on this page with a new date. We will tell dealers about a material change by email before it takes effect.

14. Contact

AutoGolan Ltd., 1 HaGefen St., Katzrin, Israel. Privacy: privacy@trytony.co.il. Everything else: hello@trytony.co.il.