Privacy Policy

Effective: 15/05/2026

NadlanCRM is a service operated by MenuWays Ltd., a private company registered in Israel (HP 514231802), registered address: 1 Snonit st., Caesarea 3079127, Israel. References to "we", "us" or "the Company" mean MenuWays Ltd.. References to "the Service" or "NadlanCRM" mean the SaaS product available at https://www.nadlancrm.co.il.

This policy describes how MenuWays Ltd. collects, uses, retains, and discloses personal data through NadlanCRM, including data we receive from Meta Platforms, Inc. through the Meta Marketing API.

Meta (Facebook) Integration

When a NadlanCRM customer ("the Agent") connects their Meta Business account to NadlanCRM, MenuWays Ltd. receives and processes the following data from Meta.

Data we collect:

• Leads collected through Meta Lead Ads forms created by the Agent (full name, phone, email, and any custom field the Agent added to the form).
• Identifiers and names of Facebook Pages owned by the Agent.
• Ad account identifiers owned by the Agent.
• Access tokens issued by Meta on the Agent's behalf.

How we use the data:

• We forward leads in real time to the Agent's NadlanCRM environment.
• We retain leads in the Agent's NadlanCRM for the duration of the subscription.
• We do not use this data for any purpose other than forwarding it to the Agent who placed the ad.

Storage and security:

• All data is encrypted at rest on infrastructure located in Israel and/or the EU.
• Access tokens are stored encrypted at industry standard.
• We do not share Meta data with any third party other than the Agent.

Retention:

• Lead data is retained for as long as the Agent's account is active, plus 30 days after cancellation.
• The Agent may delete any lead from NadlanCRM at any time.

Your rights:

• If you submitted a Lead Ad form, you may request deletion of your personal data at any time. See https://www.nadlancrm.co.il/data-deletion.

Disconnection:

An Agent may disconnect Meta from NadlanCRM at any time via account settings. We immediately revoke stored access tokens.

Legal basis:

• Israeli Privacy Protection Law, 5741-1981
• EU GDPR where applicable
• Meta Platform Terms

AI Processing (Anthropic)

NadlanCRM offers optional features that process text using a large language model operated by Anthropic PBC (United States). These features are off by default. An office enables them explicitly and can switch them off at any time.

What is sent, and when:

• Content the Agent writes or requests — property descriptions, translations, comparative market analysis, client summaries, drafts of emails and messages, and the in-product assistant. Sent when the Agent uses the feature.
• Incoming email from unknown senders — sender address and name, subject and message body, sent only for messages that pass a relevance filter applied first in our own systems, in order to identify enquiries that should become leads.
• Conversation content, where the office enables conversation action extraction — WhatsApp conversations held on the office’s own business number, and email correspondence with contacts already recorded in the CRM. Used to identify meetings, tasks and follow-ups that were agreed, and to present them to the Agent for approval.

What is not sent:

• Full client, property or transaction records. Only the text being processed, and the names needed to attribute it.
• Payment details, identity document numbers or authentication credentials.
• Content from an office that has not enabled these features, or from an Agent who has opted out.

Processing terms:

• Anthropic processes the text to return a result and does not use it to train its models, under the commercial terms in force between MenuWays Ltd. and Anthropic.
• Processing takes place on infrastructure in the United States, which is a transfer of personal data outside Israel and the EU.
• No automated decision produces a legal or similarly significant effect. Every suggestion is presented to the Agent, who accepts, edits or rejects it; nothing reaches a calendar, a task list or a client profile without that approval.

Controls:

• The office manager enables or disables AI features for the whole office.
• Conversation action extraction is enabled separately, per office, and the office chooses which channels are read.
• An individual Agent may opt out, after which their conversations are not sent at all.

Retention:

• Conversation content and the suggestions derived from it are stored in the office’s NadlanCRM environment for as long as the account is active, and are deleted with it.
• Anthropic’s retention of submitted text is governed by its own terms and is not controlled by MenuWays Ltd.
• An Agent may delete any conversation, message or suggestion from NadlanCRM at any time.

Data controller:

MenuWays Ltd. (HP 514231802)
1 Snonit st., Caesarea 3079127, Israel
Contact: [email protected]