This policy explains what information D2PLAN (www.d2plan.com) collects, why, who receives it, how long it is kept and what rights you have. It follows the Israeli Protection of Privacy Law (including Amendment 13) and, for users in the European Union, the GDPR.
1. Who is responsible
The controller of information about users is תמר גולדשמיד זירת האדריכלות (company no. 304936503, הרב בנימין צביאלי 1, ירושלים). Privacy contact: office@d2plan.com.
For information a studio enters about its clients, employees and suppliers, the studio is the controller, and we store and process it on the studio's behalf only, under the Data Processing Agreement. If you are a client of a studio and want to see, correct or delete information about you, please contact the studio first. We will help the studio handle the request.
2. What we collect
- Account details: name, e-mail, phone, the studio's name and business details, the account language.
- Sign-in and devices: sign-in codes (stored only as a hash and deleted after a day), the list of connected devices (browser and system type, sign-in time and last use), and a hash of the IP address used to limit attempts. When signing in with Google or Microsoft: the account identifier there and its e-mail.
- Content: projects, plans and models, images, documents, contracts, quotes, calendar events, tasks, messages, and the client details the studio enters.
- Billing: the plan, invoices and payment status. Card details are held by the payment provider (iCount, or Paddle outside Israel), not by us.
- Technical information: IP address, browser type, error logs and security events.
- Contacts: fault reports, suggestions and support requests.
3. Do you have to provide it
There is no legal obligation to provide the information. Without account details an account cannot be opened, and without some project details some tools will not work. Providing information is voluntary.
4. What it is used for (and the GDPR legal basis)
- Providing the service you ordered: sign-in, design, client and project management, sending e-mail on the studio's behalf (performance of the contract).
- Keeping the service secure and preventing abuse: attempt limits, device recognition, security logs (legitimate interest).
- Billing, invoices and accounting (legal obligation).
- Support, handling faults, and improving the service based on aggregated usage data (legitimate interest).
- Marketing e-mail — only to those who explicitly agreed, and consent can be withdrawn at any time (consent). See Marketing Messages.
We do not sell information, do not use it for personalised advertising, and do not use your content to train AI models.
5. Google and Microsoft calendar and mailbox
A connection is made only when you ask for it, in the account settings, and asks only for what is needed:
- Calendar: reading and writing events in the calendar you choose, and the list of calendars so you can choose. CRM events are written to the calendar, and changes in the calendar come back to the CRM. We store the events in the CRM and the link between each event and its copy in the calendar.
- Mailbox: sending only (gmail.send or Mail.Send). E-mail the service sends on the studio's behalf goes out from the mailbox. We do not read the mailbox — not its messages and not its contacts.
- The lasting permission (refresh token) is stored encrypted. You can disconnect at any time; the permission is then revoked and the links deleted. Events already copied stay in both calendars.
Information received from Google is used only to provide these features to the user. It is not used for advertising, not sold, not transferred to others unless this is needed for the service, for security or by law, and not read by a person except with consent, for security or by law. Nor is it used to train AI models.
D2PLAN's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Who receives it
- Subprocessors that run parts of the service for us — servers, database, storage, e-mail sending, AI and payments. The full list, and what each receives and where, is in Subprocessors.
- A studio's clients — only what the studio chooses to share with them (in the personal area, by link or by e-mail).
- Authorities — only when the law requires it.
- If the business is merged or sold, the information passes to whoever continues the service, on the same terms.
7. Transfers abroad
Some providers store or process information outside Israel, mainly in the United States and the European Union. Transfers follow the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations and, for users in the EU, standard contractual clauses (SCCs) or an adequacy decision.
8. How long it is kept
- Account information and content — as long as the account is active.
- After an account is deleted — the information is deleted from the service immediately, and from backups within 30 days, as they rotate.
- Invoices and billing records — seven years, under tax law.
- Security logs — up to 90 days. Sign-in codes, failed password tries and links to choose a password — one day. Devices whose session ended — 30 days. A password (as a hash only) — until it is removed or the account is deleted.
9. Your rights
- To see the information about you and to correct it (sections 13 and 14 of the Israeli Privacy Law).
- To delete your account and data, and to receive a copy of it as a file — both directly from the account settings.
- For users in the EU, also: to restrict processing, to object to processing based on legitimate interest, and to withdraw consent at any time.
- To complain to the Israeli Privacy Protection Authority, or to the supervisory authority in your EU country.
Contact: office@d2plan.com. We will answer within 30 days.
10. Security
All traffic is encrypted, and providers encrypt stored data too. Permissions for connected services are stored encrypted, and sign-in codes only as a hash. You can sign out any device. Administrators sign in in two steps. A studio's employees get only the permissions they were given. Data is backed up every night, and restoring from backup is tested regularly. To report a security problem: Reporting Security Issues.
11. Sensitive information and children
- The service does not ask about religion, health or other sensitive matters. Design choices such as a kosher kitchen, Sabbath lighting or a synagogue design are kept in the project only for the design, and are not used for marketing or profiling.
- The service is not intended for anyone under 18. When clients describe their family in a questionnaire (for example, the children's ages), ask only for what the design needs.
12. Cookies
The site uses only the cookies it needs to work, such as keeping you signed in. There are no advertising cookies and no third-party tracking. Details are in the Cookie Policy.
13. Changes
Material changes to this policy are announced by e-mail and in the service before they apply. The current version is always on this page.