Privacy Policy

1. Information We Collect

We collect the following information in order to provide the Quickly service:

• Business details: business name, business/company registration number, address, email, phone
• Customer details: name, phone, email (as entered by you)
• Invoice data: amounts, service descriptions, dates
• WhatsApp messages: the content of messages sent to the smart assistant for processing
• Receipt images: for scanning and recording expenses

2. Use of Information

The information is used solely for the purpose of:

• Producing tax invoices (חשבונית מס), price quotes and receipts
• Obtaining allocation numbers from the Israeli Tax Authority (SHAAM)
• Sending payment reminders and reports
• Improving the service and the artificial intelligence

3. Storage and Security

All information is stored on secure servers with encryption in transit (TLS) and at rest (AES-256). Access to the information is limited and monitored.

Data processing locations:

• Supabase (AWS eu-central-1, Frankfurt, Germany) - the primary database. The European Union provides an adequate level of data protection under Amendment 13 to the Israeli Privacy Protection Law.
• Backblaze B2 (US West) - encrypted backups. The backups are encrypted with AES-256 encryption and Backblaze has no access to their contents.
• Vercel (Edge Network) - the application server and business logic.

4. Sharing of Information

We do not sell or share personal information with third parties, except for:

• The Israeli Tax Authority (SHAAM) - for the purpose of obtaining allocation numbers
• Service providers (Anthropic, Google, OpenAI, Resend, Green API) - for the purpose of operating the service
• Your accountant - if you have configured an accountant email

5. Use of Google Data (Limited Use Disclosure)

Quickly connects to Gmail (and to Outlook for Microsoft accounts) in order to scan invoices and receipts received by email and automatically enter them into your expense system. The scope requested is gmail.readonly (read-only). Quickly never sends, deletes or modifies messages in your mailbox.

Our use of information received from Google APIs complies with the Google API Services User Data Policy including the Limited Use requirements:

• Limited use for a specific purpose: Gmail content is used solely to identify invoices and receipts and to create expense records in the system. There is no other use.
• No transfer to third parties: Gmail content is not transferred to a third party, except: (a) cloud infrastructure providers required to operate the service (Supabase for tagged + encrypted storage; Google Gemini / Anthropic Claude / OpenAI for OCR and text processing of invoices only, with no long-term retention on their side); (b) as required by law.
• No advertising use: Quickly does not use Gmail content for advertising, profiling, or sale to advertisers.
• No use for AI model training: Gmail content is not used to train or improve general artificial intelligence models. OCR processing is done via API in inference mode only.
• Minimal human access: Human employees at Quickly do not access Gmail content unless: (a) we have received explicit consent from the user for support purposes; (b) for security or fraud investigation; (c) to comply with the law; (d) the data is fully aggregated and anonymized.
• Limited retention: The body content of scanned emails (textual body + attachments) is not retained after the invoice has been produced in the system. Only metadata (the message ID, sender, subject, date) is retained to prevent duplicate scanning.

You can disconnect your Gmail account at any time from the dashboard under Settings. Upon disconnection, Quickly calls oauth2.googleapis.com/revoke to remove the authorization on Google's side as well, not only in our database.

6. User Rights

In accordance with the Privacy Protection Law, 5741-1981 (including Amendment 13 which took effect in August 2025), you have the following rights:

• The right to review the information held about you
• The right to request correction of incorrect or outdated information
• The right to request deletion of the information (subject to legal retention obligations, e.g. the Tax Authority's record-keeping requirement)
• The right to receive a copy of your information in a structured format (accessible through the dashboard or by contacting the Privacy Officer)
• The right to withdraw consent to receiving marketing communications or processing for analytics

To make a request regarding these rights, you can contact our Privacy Officer directly by email at privacy@quicklyinv.co.il. We will endeavour to respond within 30 days.

7. Cookies and Tracking

We use Cookies and Local Storage for authentication, analytics and user preferences. For full information see our Cookies Policy.

8. Privacy Protection Officer and Contact

For questions about privacy, requests to exercise rights and reporting of privacy incidents, you can contact our Privacy Officer:

• Dedicated email: privacy@quicklyinv.co.il
• General support: support@quicklyinv.co.il
• WhatsApp: through our bot

In the event of a data leak or security incident that may affect your data, we will act in accordance with our privacy incident response procedure and, where necessary, report to the Registrar of Databases and the relevant data subjects within the timeframe prescribed by law.