Privacy Policy

OptiPay is committed to protecting your privacy. This policy explains how we collect, use, store and protect your personal information when you use our services.

Information you provide: Name, email address and phone number upon registration. Receipts and financial documents that you upload. Payment details for subscription billing.

Information collected automatically: IP address, browser type and operating system. Usage data on the website and in the app. Cookies and similar tracking technologies.

Information from third parties: Email data from Gmail or Outlook (receipts only, with your consent). Information from payment providers.

We use your information in order to: provide, maintain and improve the service; automatically process and categorize receipts; answer your questions about your documents and account, and carry out actions you ask for, through the OptiPay Assistant on WhatsApp and in the app (see section 14); send service-related notifications; comply with legal and regulatory requirements; and detect and prevent fraud.

We do not sell your personal information. We may share information with: service providers acting on our behalf and only on our instructions (hosting and infrastructure: Vercel, Supabase, Hetzner, Upstash; error monitoring: Sentry; payment processing: Stripe; email delivery: Google Workspace; WhatsApp messaging: Meta; reading documents and powering the OptiPay Assistant's answers: the AI providers Google (Gemini) and OpenAI; fetching bills from Israeli authority and utility websites: Google Cloud, on a server in Tel Aviv; usage analytics: Google and PostHog); law enforcement authorities where required by law; and third parties with your explicit consent.

AI providers receive only the information a given request needs, and do not use it to train their models. The full, current list, including where each provider processes data, is on our security page.

We implement advanced security measures, including: encryption of data in transit (TLS 1.3) and at rest (AES-256); two-factor authentication (2FA); periodic security audits; and restricting access to information on a need-to-know basis.

We retain your information for as long as your account is active. After an account is deleted, the information will be deleted within 30 days, except for information we are required to retain by law. Conversations with the OptiPay Assistant are kept for up to 12 months so you can return to them, and are then deleted. Support requests are kept for up to 12 months after they are closed. You can ask us to delete them at any time.

In accordance with the GDPR and the Israeli Privacy Protection Law, you have the right to: access your personal information; correct inaccurate information; delete your information (the "right to be forgotten"); restrict the processing of your information; port your information to another service; and object to the processing of information for marketing purposes.

We use cookies that are necessary for the service to function, preference cookies to remember your settings, and analytics and measurement cookies to improve the service. For analytics we use Google Tag Manager, which is used to deploy measurement and analytics tags, including Google Analytics. Data collected by Google Analytics, such as IP address, device and browser type, and site-usage events, is processed by Google LLC in accordance with Google's Privacy Policy.

In Israel, and in other countries where the law permits it, analytics cookies are active from your first visit. You can turn them off at any time with the "Essential only" button in the cookie banner, or by clearing this site's cookies in your browser (the banner then appears again). Google Ads advertising and remarketing cookies are stored only if you accept them. In the European Economic Area (EEA), the United Kingdom and Switzerland, no non-essential cookie is stored before you accept the banner. You can also opt out of Google Analytics tracking using Google's official opt-out browser add-on, and manage all cookie preferences through your browser settings.

Advertising measurement. When you reach the site by clicking a Google ad, the address carries a click identifier that Google appends to it (gclid, gbraid or wbraid). We store it in a cookie named op_gclid for 90 days. If you then sign up, we send that identifier from our servers to our Google Ads account so we can tell that the sign-up came from that ad. The identifier itself contains no name, email address or account details, and does not let Google identify you through us; Google's use of it is governed by your consent decision, which is transmitted alongside it.

Campaign attribution. Alongside the click identifier we store, in a cookie named op_attr and also for 90 days, the campaign parameters present in the address you arrived through (such as utm_source and utm_campaign), any other advertising platform's click identifier it carried (for example fbclid), the page you landed on and the referring site. Its only purpose is to tell us which campaigns lead to sign-ups, and if you register it is stored alongside your sign-up. Unlike the Google click identifier, none of this is sent to any third party, it is read only by us.

When these cookies are stored depends on the country you are browsing from. In Israel, and in other countries where the law permits it, they are stored on arrival. In the European Economic Area (EEA), the United Kingdom and Switzerland they are stored only after you accept the cookie banner, and if you do not accept, they are not stored at all. Where we cannot determine which country you are in, we apply the stricter rule and do not store them.

Your information may be stored on servers outside Israel. We ensure that any international transfer is carried out in accordance with the requirements of the GDPR, including the use of Standard Contractual Clauses.

We may update this policy from time to time. Material changes will be published on the website and sent by notice to registered users at least 30 days before they take effect.

For privacy-related questions, you can contact our Data Protection Officer: privacy@optipay.co.il

OptiPay uses the Gmail API in accordance with the Google API Services User Data Policy, including the Limited Use requirements.

OptiPay's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail data access: OptiPay accesses Gmail data solely to detect and extract receipts and business transaction documents for expense categorization, to show you an estimate of how many documents and emails fall in the period not scanned yet (see "Counting mail that has not been scanned yet" below), and to answer your questions about the documents captured from your mailbox through the OptiPay Assistant (section 14). The assistant receives only the details of the documents relevant to your question (such as supplier, amount, date, document type, and the subject and sender of the email it came from), never the mailbox itself. To identify which messages are receipts, message metadata and content are scanned transiently during processing; messages that are not receipts are classified in memory and discarded. Their content is never persisted.

Counting mail that has not been scanned yet: To show you an estimate of how many documents and emails fall outside the period we have scanned, OptiPay may ask Gmail to count, within a set date range, messages sent from the addresses of suppliers already in your account, and messages that look like a receipt or an invoice (a message with an attachment, or with a word such as "invoice" or "receipt" in the subject). Gmail runs the search, and the count uses message identifiers only, never opening message content. Only the resulting numbers and the estimate worked out from them are kept; the message identifiers, content and other details of the counted messages are not stored.

Use limitations: We do not sell, share, or transfer Gmail data to third parties, use it for targeted advertising, or use it to develop, improve, or train generalized or non-personalized AI/ML models, and we do not permit third parties to do so. Gmail data is used only for the purpose for which access was granted. Humans do not read Gmail data except (a) with your explicit consent, such as when you open a support request and allow our team to look at a specific document, (b) for security or abuse investigation, or (c) where required by applicable law.

Revoking access: You can revoke OptiPay's access to Gmail at any time from the Connections page in your account settings, or from your Google Account security settings at myaccount.google.com/permissions. Revoking access immediately revokes the OAuth token and stops all future syncs.

OptiPay uses the Microsoft Graph API (the Mail.Read permission) in accordance with the Microsoft APIs Terms of Use and the Microsoft Privacy Statement, applying the same limited-use principles that govern Gmail data.

Outlook data access: OptiPay accesses your Outlook mailbox solely to detect and extract receipts and business transaction documents for expense categorization, and to answer your questions about the documents captured from your mailbox through the OptiPay Assistant (section 14), which receives only the details relevant to your question. To identify which messages are receipts, message metadata and content are scanned transiently during processing; messages that are not receipts are classified in memory and discarded. Their content is never persisted.

Use limitations: We do not sell, share, or transfer Outlook data to third parties, use it for targeted advertising, or use it to develop, improve, or train AI/ML models, and we do not permit third parties to do so. The data is used only for the purpose for which access was granted.

Revoking access: You can revoke OptiPay's access to Outlook at any time from the Connections page in your account settings, or from your Microsoft account security settings at account.microsoft.com. Revoking access immediately revokes the OAuth token and stops all future syncs.

Effective date: this section, and the assistant additions to sections 3, 12 and 13, take effect on October 29, 2026.

The OptiPay Assistant is an AI system that answers from the data in your account and carries out actions you ask for, on WhatsApp and in the app. Before any change to your data (deleting, editing, excluding, sending to an outside recipient) it asks you to confirm. Its answers are information, not investment, pension or tax advice.

What it processes: the messages you send it, and the document and account details its answer needs. That information goes to AI providers acting on our behalf (section 4) for that request only, and they do not use it to train models.

Proactive WhatsApp messages: messages you did not ask for (a monthly statement, an alert when document collection stops, a VAT report reminder) are sent only if you agreed to them. To stop them, write STOP; to resume, write START.

A person on the other side: to talk to a person, email support@optipay.co.il. The OptiPay team does not read your conversations with the assistant unless you opened a support request and allowed it, for security or abuse investigation, or where the law requires it.

Effective date: this section takes effect on October 19, 2026.

An OptiPay account can connect several WhatsApp numbers, including those of employees or other people who work with the business. A number is added by the person who manages the account or by someone on its team. It connects only after the phone's owner sends the message in the link from that phone, and the link does not work from any other phone.

What is kept: the phone number, the name the account gave it, when messages were sent, and the messages and documents sent from it. The documents are kept in the business's account and recorded under the team member the number belongs to. They are processed like any other document in the service (sections 3 and 4), including being passed to AI providers to read them. The messages go through Meta, the provider of WhatsApp.

Who sees it: the people in the business's account, according to their access. The business decides whether the number only sends documents or also asks the OptiPay Assistant, and with which access. The first message the number gets after connecting says which account it joined and what it can do.

Removing the number: the phone's owner can remove the number at any time by sending the message "unlink" (or "נתק מספר"). The person who manages the account can also remove it on the team page. After removal the number no longer sends documents to the account. Documents already sent are part of the business's records and stay in its account. To stop only proactive messages, write STOP.

Requests: the phone's owner can contact us with any question or request about the information sent from their number at privacy@optipay.co.il. A request about the business's documents is handled together with the business, which is responsible for the documents in its account.