Privacy Policy — BeCompany
Version 1.0 · Effective date: 25 October 2026
This policy explains what personal data we collect, why, who we share it with, where it is stored, and what your rights are.
1. Who we are
BE COMPANY LTD (בי קאמפני בע"מ), company no. 517368551, 5 Avraham Hillel St., Ramla 7222716, Israel ("BeCompany", "we"). We operate the BeCompany platform, the Be* apps (including BeSiness, BeSend, BeFolder, BeNav and others), and the websites becompany.net and besiness.net.
- Privacy enquiries: privacy@becompany.net
- Data Protection Officer: Netanel Hadar · privacy@becompany.net
2. Whose data this policy covers
- Users: people who register for or use our apps and websites.
- Customers, contacts, suppliers and employees of businesses that use the platform: businesses run their operations on the platform and enter data about the people they deal with. BeCompany owns the platform database, so this policy also covers that data. The business is responsible for having a lawful basis for the data it enters, and for giving you a notice at collection that refers to this policy. In the European Union, the business and BeCompany are joint controllers of that data.
- What this policy does not cover: data a business keeps outside the platform, and external services a business chooses to connect to its account (see section 7). Those are governed by the policy of the business or of that service.
3. What we collect
| Type | Examples | Source |
|---|---|---|
| Identity and account | name, email, phone, username, password (stored hashed) | you |
| Content | messages, files, documents and images you upload | you |
| Business data | customer details, orders, invoices, payments and correspondence a business manages on the platform | the business |
| Communications and telephony | phone numbers, call and message times, routing data (BeSend) | your use |
| Technical and usage | device and browser type, operating system, IP address, system logs, error data | automatic |
| Location | approximate location from your IP address. Precise location (GPS) is collected only if you allow it on your device (for example in BeNav) | your device |
| Data of special sensitivity | health and fitness data, financial data. Collected only with your explicit consent, and only in services that need it | you |
Do you have to provide it? There is no legal duty to provide data to us unless the point of collection says so (for example, details the tax rules require on an invoice). Without identity and account details we cannot provide the service, or part of it.
4. Why we use it
| Purpose | Basis |
|---|---|
| Providing the service, managing your account, support | performance of our contract with you |
| Security, fraud prevention, fixing errors | legitimate interest and legal obligation |
| Legal compliance (tax, bookkeeping, requests from authorities) | legal obligation |
| Improving the service | legitimate interest. We do not use non-essential measurement tools for this without your consent (section 6) |
| Marketing messages | prior consent only (section 9) |
| Data of special sensitivity | explicit consent |
We do not sell personal data, and we do not use it for targeted advertising.
5. Artificial intelligence
Some services include AI agents. Our models run on our own infrastructure. External AI providers are used only as an emergency fallback, and are switched off by default. When you are talking to an AI, we tell you so. We do not make decisions with legal or similarly significant effects on you based solely on automated processing.
6. Cookies and on-device storage
We use only the following:
| Component | Purpose | Duration |
|---|---|---|
| Login cookies (`accessToken`, `refreshToken`) | keep you signed in, securely. Essential | 1 day / 7 days |
| Language cookie (`NEXT_LOCALE`) | remembers the language you chose. Essential for your request | 1 year |
| Accessibility settings (browser local storage) | remember the accessibility settings you chose. Essential for your request | until you clear them |
| Error monitoring (Sentry) | when an error occurs on the website, technical details of the error, including your IP address, and a recording of the screen activity leading up to it are sent to the provider. All text, input fields and images are masked in the recording | a limited period at the provider |
Our websites and apps have no advertising, audience-measurement or cross-site tracking cookies or SDKs. If we add a non-essential component, we will ask for your consent before it runs. "Accept" and "Reject" will be equally prominent, you will be able to choose by category and change your choice at any time, and we will ask for your choice again within 6 months at the latest. We do not track you across websites, so a "Do Not Track" signal does not change how the service works. Where the law requires it, we honour the Global Privacy Control signal.
7. Who we share it with
- Our service providers (sub-processors) that process data for us, on our instructions, under contractual confidentiality and security obligations: cloud hosting, email delivery, telephony and messaging (including WhatsApp), payment processing, error monitoring, and the emergency AI fallback. A payment provider may also act as an independent party for fraud prevention and legal compliance. Current list: https://becompany.net/legal/subprocessors.
- External services a business chooses to connect (for example a bank, accounting software or a social network): data goes to them only on the business's instructions and under its responsibility. That service acts as the business's provider or as an independent party, under its own terms.
- The business you deal with, for your data that it is responsible for.
- Authorities, where the law requires it, or where it is needed to protect someone's rights or safety.
- A corporate transaction (merger or acquisition): the data passes to the successor, subject to this policy.
8. Where it is stored
Data is stored on Amazon Web Services servers in the us-east-1 region, United States. Some of our service providers also operate in the United States. International transfers follow the applicable law: in Israel, the Privacy Protection (Transfer of Data to Databases Abroad) Regulations; for data from the European Union, the EU–US Data Privacy Framework or Standard Contractual Clauses.
9. Marketing messages
We send you advertising (by email, SMS or notification) only if you agreed to it in advance. You can unsubscribe in any message, or by contacting us. In Israel, section 30A of the Communications Law applies.
10. How long we keep it
We keep data while your account is active, and after that only as long as needed for the purpose it was collected for, or as long as the law requires. For example, accounting records are kept under tax law, usually for 7 years. At the end of the period we delete the data or make it anonymous.
11. Security
We use technical and organisational measures suited to how sensitive the data is. These include encryption in transit (HTTPS), encryption of stored data in our databases and file storage, access control and permissions, separation between different businesses' data, logging and monitoring. No system is completely secure. If a security incident occurs, we report it to the authority and to the people affected as the law requires.
12. Children
The services are not intended for children under 13, or, in the European Union, under the age of digital consent in their country. We do not knowingly collect data about such children without a parent's or guardian's consent. If we learn that we have, we delete it.
13. Your rights
Subject to the applicable law, you may:
- access the data about you and get a copy;
- ask us to correct data that is wrong, incomplete or out of date;
- ask us to delete your data and your account;
- withdraw consent you gave. This does not affect processing done before you withdrew it;
- object to processing, ask us to restrict it, and receive your data in a portable format (in the European Union);
- unsubscribe from marketing.
Contact: privacy@becompany.net. If your request concerns data a business entered, you may also contact the business, which will pass it to us. We answer within the period the law sets, and we may ask you to verify your identity. Complaints: in Israel, to the Privacy Protection Authority at the Ministry of Justice. In the European Union and the United Kingdom, to the supervisory authority in your country.
14. Changes to this policy
The version and effective date appear at the top of this policy. We will announce material changes in advance on the website or in the app, and by email where appropriate. Earlier versions are kept and are available on request.
15. Contact
BE COMPANY LTD · 5 Avraham Hillel St., Ramla 7222716, Israel · privacy@becompany.net