Privacy Policy

Last updated: October 24, 2026

This policy describes how Tal Maor, an exempt dealer (osek patur), operating under the trade name wivon, handles personal data for wivon (wivon.ai). Tal Maor is the controller of the information described here and can be contacted at support@wivon.ai.

What we collect

• Account data: your email address, user identifier, and authentication data, managed through Supabase. If you use Google sign-in, Google and Supabase provide us with your account identifier and email address.
• Project content: briefs, chat messages, generated text, image prompts, generated images, and project numbers, stored so your projects persist between sessions.
• Practice profile: the practice name and logo you choose to add, printed on your exported documents.
• Purchase and usage data: top-up amounts, Lemon Squeezy order identifiers (and PayPal ones for earlier top-ups) and their status, refunds, your credit balance, the model usage and cost of each generation, and the version of the terms you accepted when paying. Lemon Squeezy handles your payment and billing details; we never receive or store your card or bank details.
• Product events: a record of actions in wivon, such as creating a project, locking the project DNA, generating a document, exporting, or topping up, with the time. We use it to run and improve the service. It is kept in our own database; we use no third-party analytics.
• Technical data: IP address, request time and route, device or browser information made available by network requests, and security and error logs.
• Communications: messages and information you send when asking for support, a refund, or a privacy request.

Is providing information required?

You are not legally required to provide personal data; providing it is voluntary. An email address and authentication data are necessary to create an account, project content is necessary to generate and save a project, and transaction information is necessary to buy and administer credit. If you do not provide the relevant data, we cannot provide that part of the service.

How and why we use it

We use information to create and secure accounts; provide and save projects; send project content to our AI provider to generate text and images; meter usage and administer credit; process support, privacy, and refund requests; understand how the service is used; prevent fraud and abuse; diagnose faults; comply with law; and establish or defend legal claims. Depending on the applicable law, we rely on performance of our contract, steps you request before entering a contract, our legitimate interests in operating, improving, and securing wivon, compliance with legal obligations, and consent where consent is required. We do not sell personal data, use project content for advertising, or use your content to train AI models.

Recipients and processing outside Israel

We disclose only the information reasonably needed to:

• Supabase: sign-in and authentication (Frankfurt, Germany).
• Google: sign-in, if you choose it.
• OpenAI: generating text and images from your project content (United States).
• Lemon Squeezy (Link, LLC, United States): selling credit as our reseller and merchant of record, which covers payment, tax, receipts, refunds, and disputes. It is an independent controller of the payment and billing data it collects. We send it your user identifier so a payment reaches your account.
• PayPal: refunds and disputes of top-ups bought through PayPal. PayPal is an independent controller of the payment data it collects.
• Backblaze B2: storing generated images, logos, and encrypted backups (European Union).
• DigitalOcean: hosting the server and database (Frankfurt, Germany).

These providers and their subprocessors may process data in countries whose privacy laws differ from yours. We use provider agreements and other lawful transfer grounds intended to protect information as required by applicable law. Courts, regulators, or law enforcement may also receive information where legally required.

Cookies and local storage

We and our authentication provider use browser storage needed to keep you signed in and secure your session. Lemon Squeezy may use storage in its checkout window. wivon does not use advertising cookies or cross-site advertising trackers.

Retention and deletion

Account and project data are kept while your account is active. You can delete individual projects, or your whole account from the account menu. Deleting your account immediately removes your projects, their images, your practice profile and logo, and your sign-in. Product events are kept without anything that identifies you.

Purchase and usage records are financial records: we keep them, under your bare user identifier, for seven years, as Israeli tax law requires. Encrypted backups of the database and images expire on a rolling cycle, so a deleted account's data is gone from them within about 35 days. Server logs are rotated and kept for a limited period. Lemon Squeezy, PayPal and other independent controllers apply their own retention policies.

Security

We use reasonable technical and organizational safeguards designed for the nature of the information and service, including encrypted backups. No internet or storage system is completely secure, so we cannot guarantee absolute security. If a breach occurs, we will investigate and provide notices where required by law.

Your rights

You may ask to inspect or receive a copy of personal data about you and to correct inaccurate, incomplete, unclear, or outdated information. Depending on applicable law, you may also ask for deletion, restriction, portability, or object to processing, and may withdraw consent without affecting earlier lawful processing. We may need to verify your identity and may retain information where law permits or requires it. You may also complain to the Israel Privacy Protection Authority or the competent regulator where you live.

Children

wivon is for people aged 18 or older. We do not knowingly offer accounts to children. Contact us if you believe a child has provided personal data.

Policy changes

We may update this policy as the service or law changes. We will post the revised date and give reasonable notice of material changes where required.

Contact

Tal Maor (wivon): support@wivon.ai