Privacy Policy

Who we are

This website is operated by Idan Yehuda (“we”, “us”), a web development and AI implementation consultancy based in Israel. Contact: ask@idanyehuda.com.

What this policy covers

It covers the public website at idanyehuda.com and the internal operations tools we run under the same domain (for example ControlPanel at cp.idanyehuda.com). Those internal tools are used only by us and by people we explicitly invite; they are not offered to the public.

Data we collect on the public website

• Contact form. Name, email address, phone number and the message you write, used only to answer you. Submissions are delivered to us as an email and a WhatsApp notification and kept for as long as the conversation is relevant.
• Analytics. We use Google Analytics 4 to understand which pages are visited. It sets cookies and processes IP addresses in anonymised form. You can opt out with the Google Analytics opt-out add-on.
• Server logs. Our hosting provider keeps standard access logs (IP address, user agent, time, requested page) for security and debugging, rotated on a short schedule.

Google account data (Google sign-in and Gmail)

Our internal tools use Google OAuth for two purposes, both limited to our own Google accounts and to accounts we explicitly allow:

• Sign-in. Google sign-in is used as the second factor for logging in to our internal tools. We receive the account’s email address and basic profile only to match it against our own allowlist. We do not store the Google profile.
• Gmail, read-only. With explicit consent per mailbox, our finance tool reads messages in our own mailboxes through the gmail.readonly scope to find receipts, invoices and payment confirmations and file them as bookkeeping candidates. It never sends, labels, moves or deletes mail. Only the message metadata and the extracted amounts and merchant names needed for bookkeeping are stored, on servers we control. The refresh token is stored encrypted and can be revoked at any time from the tool itself or from your Google account permissions page.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, and never shared with third parties except as required to operate the tool (our own hosting) or by law. No human reads the mail data except the account owner.

How long we keep data

Contact-form messages are kept while the enquiry is open and then archived or deleted. Bookkeeping records extracted from mail are kept for the period required by Israeli tax law. Analytics data follows Google Analytics’ retention setting (14 months). Google OAuth tokens are deleted the moment a mailbox is disconnected or access is revoked.

Your rights

You can ask us what data we hold about you, ask for it to be corrected or deleted, and withdraw consent at any time by writing to ask@idanyehuda.com. We answer within 30 days.

Changes

We update this page when our practices change and note the date at the top. Our Terms of Service apply alongside this policy.