Privacy Policy
עודכן לאחרונה: 22 September 2026·גרסה 2026-09-22.2
1. Overview
This Privacy Policy ("the Policy") explains how Prorab ("the company", "we") collects, uses, stores, and shares personal information in connection with the Prorab platform — contractor / construction-business management software in Israel.
The Service is available as the store apps Prorab (il.prorab.kablan) and Prorab Workers (il.prorab.workers), the web client at https://app.prorab.co.il (not offered as an installable PWA), and https://prorab.co.il ("the Service").
This Policy complements our Terms of Service. Use of the Service constitutes acceptance of this Policy, subject to applicable Israeli law.
2. Data controller
Controller of personal information: Prorab.
Privacy email: dev@prorab.co.il
Website: https://prorab.co.il | Web client: https://app.prorab.co.il
3. Information we collect
We may collect the following types of information:
- Contractor account details: name, email, hashed password (if applicable), OAuth identifiers (Google / Sign in with Apple). A contractor phone number is not required for the account.
- Field worker details: phone (E.164) for Workers app authentication, name, UI language, and invite code issued by the contractor; optional email if set.
- Business data: projects, workers, tasks, field notes, photos, invoices, transactions, and documents you upload.
- In-app AI agent data: text, images, and audio sent to chat, transcripts, and technical logs. WhatsApp Cloud API is not a product channel.
- Subscription / payment data: App Store / Google Play and RevenueCat identifiers, and/or Cardcom transaction identifiers for web purchases — we do not store full credit-card numbers.
- Device data: push notification tokens (when enabled), error logs, and camera / gallery / microphone permissions when you grant them.
- Accessibility preferences and UI language stored in the account or on the device.
4. Purposes of processing
We process personal information for the following purposes:
- Providing the Service, managing accounts, and authentication (email / Google / Apple for contractors; SMS or invite code for workers).
- Processing subscriptions via app stores and RevenueCat, and/or Cardcom on the web when enabled, and meeting accounting obligations.
- Operating the in-app AI agent (transcription, OCR, expense / task actions with your confirmation).
- Push notifications for workers and contractors, and human support (Telegram / email).
- Security, fraud prevention, technical support, and service improvement.
- Compliance with law, including the Israeli Privacy Protection Law, 5741–1981.
5. Legal basis
Processing is based, as applicable, on performance of a contract, consent, legitimate interest (security and service improvement), and legal obligation (retention of payment records).
6. Service providers and sharing
We share information with providers who process it on our behalf. The product channel is not Meta WhatsApp Cloud API:
- Apple / Google — in-app subscription purchases and store billing management.
- RevenueCat — store subscription mediation, webhooks, and subscription identifiers.
- Cardcom — payment processing and standing orders for web subscriptions when that rail is enabled.
- OpenAI (or similar AI providers) — speech-to-text (Whisper), OCR, and the AI agent. Audio sent for transcription is processed by this vendor.
- SMS providers — OTP codes for worker phone verification.
- Cloud providers — storage, databases, and files (including short-lived voice copies for transcription retry).
- Tech support: https://t.me/prorab_support_il_bot (@prorab_support_il_bot) — ticket → human reply. Or email dev@prorab.co.il.
7. Retention
We retain information while the account is active and for as long as needed for the purposes above. After account deletion — most data is deleted; payment records may be retained up to 7 years as required by law.
Raw Live / agent voice clips stored for transcription retry are deleted automatically after about 7 days. Transcripts may remain in chat history until cleared or the account is deleted.
Self-serve deletion: in-app Settings, or https://app.prorab.co.il/legal/data-deletion.
8. Your rights
Subject to law, you have rights to access, correct, delete, restrict processing, and object — subject to exceptions in law.
- Access and correction: via account settings or support.
- Deletion: via the app or by email (see the Data Deletion Policy).
- Contact: dev@prorab.co.il — we will respond within 30 days where possible.
9. Information security
We implement reasonable measures: HTTPS, tenant data isolation, JWT / SecureStore authentication, and backups. No system is perfectly secure.
10. Children
The Service is intended for businesses and adults. We do not knowingly collect information from children under 18.
11. Changes to this Policy
We may update this Policy. The update date will appear at the top of the document.
12. Contact
Privacy questions: dev@prorab.co.il
Tech support (Telegram): https://t.me/prorab_support_il_bot
Website: https://prorab.co.il | Web client: https://app.prorab.co.il