Privacy Policy

Who we are, and our role

Lightor is a website platform for small businesses, operated by EZ Webs. A business owner signs up, a site is built for them at a dedicated address under lightor.app, and their customers book appointments or leave inquiries through it. This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have.

What we collect

From business owners (account holders)

• Account details - name, email, phone and preferred language. We verify the phone number at signup with a one-time code sent to it by SMS or WhatsApp. Email signups store a hashed password (bcrypt); Google or Facebook signups store no password at all, only the provider's account identifier.
• Business site content - business name, description, address, working hours, breaks and holidays, services and prices, and uploaded images (stored on Amazon S3).
• Subscription state - billing status and subscription identifiers from Paddle, or, for a subscription and booking packs bought in the app, the purchase identifiers and dates from the App Store or Google Play through RevenueCat. Card details never reach our servers - all payment processing happens at Paddle, Apple or Google.
• Your customer list - the customers who have booked with you, their booking history, any notes you add, and a blocked flag if you block someone.
• Your inquiries - the inquiries left through the contact form on your site, and the status you set on each.
• Notification preferences - which kinds of alert you asked to receive.
• Lighty conversations - the questions you write to the AI assistant in the dashboard and its answers, so the conversation is there when you come back.

From businesses' customers (people booking appointments or leaving inquiries)

• Booking details - name, phone number, appointment time, chosen service and the answers to the business's own questions (an address, for example), used to manage the appointment and send confirmations and reminders by SMS or WhatsApp. If the business owner has connected a calendar, the booking and its answers also appear there.
• Contact-form inquiries - name, phone number, the message, the answers to the business's own questions, and, for an inquiry about a product, which product. An inquiry is stored in the business's account and shown to the business owner in the dashboard, and the owner is told about it the way they chose - app notification, email, SMS or WhatsApp. An inquiry from a number the business has blocked is not stored.
• When the business owner uses Lighty - the owner's AI assistant may process a customer's name, appointment times and services, the inquiry text and the answers to the business's questions, in order to answer the owner's questions and to prepare changes the owner confirms, such as cancelling or moving an appointment. Such a change sends the customer the same message as when the owner makes it themselves. Phone numbers and email addresses are not sent to it, unless the owner wrote them in the conversation themselves, and neither are answers to an address question. See Artificial intelligence and Lighty.

From visitors to businesses' sites

• Questions to Lighty on a site - on sites where the assistant is on, a visitor can ask Lighty about the business. The question and the rest of the current conversation are sent to Google Gemini to write an answer. We do not store the conversation - it lives only in the browser until the page is closed, and we record only a usage count (numbers, not content).
• Reporting a problem with a site - a visitor can report a fault on a site to us through Lighty. We store the report, contact details if the visitor chose to add them, the page address, the interface language and the browser type. The report reaches the Lightor team only - the admin panel and by email - so we can fix the fault, and is not passed to the business owner. For reports, we are the controller of the data.

From the mobile app

• Push token - an identifier the device receives from Apple or Google, together with the platform, app version and interface language. It is used only to send you notifications about your appointments and inquiries. It contains no phone number and no location. Signing out or removing the app invalidates it.

Technical data generated automatically

• Server logs - IP address, browser type and request time, kept for security and troubleshooting.
• Audit records - sensitive account actions such as signing in or deleting an account are recorded so abuse can be investigated.
• Usage counters - counts of actions such as generating a site with AI or sending messages, used to enforce plan limits and account for costs. These are numbers, not content.

Why we use it

We never sell personal information and never use it for advertising. We do not profile you and make no automated decisions with legal effects.

Who we share it with

Data goes only to the infrastructure providers that run the service, and only as far as needed:

We will also disclose data where the law or a court order requires it. Some providers operate servers outside Israel, so data may be transferred abroad as part of delivering the service.

How long we keep it

• Account and content - for as long as the account is active. Appointments and inquiries are deleted after two years, even on an active account. Deleting the account deletes the site, the appointments, the inquiries, the products and the images. A business owner can also delete a single inquiry from the dashboard.
• Free-period fingerprint - when an account receives the free period, a one-way encrypted fingerprint of its phone number, its email and its Google account id (if any) is kept. The details themselves cannot be recovered from it. It is kept after the account is deleted, solely so that the same details do not receive another free period.
• One new account a week - when an account is opened or deleted, a one-way encrypted fingerprint of its phone number, its email and its Google, Apple or Facebook account id (if any) is kept for a week, solely so that the same details do not open more than one new account a week. After a week it is deleted automatically.
• Session cookie - up to 60 minutes, or up to 180 days if you chose to stay signed in.
• Visitor cookie - up to one hour.
• Push token - until you sign out, remove the app, or Apple or Google invalidates it.
• Lighty conversations - up to 30 days, then deleted automatically. "New chat" deletes the conversation at once.
• Visitors' conversations with Lighty on a site - not stored by us.
• Reports of problems with sites - up to 12 months, then deleted automatically.
• Logs and usage counters - kept for a limited period needed for security and billing.

Your rights

You can see your data, correct it, obtain a copy, delete your account, or object to a particular use. Several of these are available directly in the dashboard - editing your details, turning notifications off, and deleting the account outright. For anything else, email us and we will respond within a reasonable time. If the data was given while booking with, or leaving an inquiry for, a particular business, we will also point you to that business, which decides what happens to it.

The service is not intended for children under 16, and we do not knowingly collect their data.

Security

All traffic is encrypted (HTTPS), passwords are stored hashed (bcrypt), and dashboard sessions rely on HttpOnly cookies that browser scripts cannot read. Server access is restricted and calendar tokens are encrypted at rest. No system is perfectly secure, and if a significant security incident occurs we will notify those affected.

Cookies

• Session cookie - an HttpOnly cookie identifying the account holder in the dashboard.
• Visitor cookie - a short-lived identifier issued by Cloudflare Turnstile so an appointment can be booked, an inquiry left, or Lighty asked on a site, without an account.
• Payment cookies (Paddle) - on the checkout screen, our payment provider Paddle sets cookies needed to complete the transaction and prevent fraud.
• We set no advertising or marketing tracking cookies.

Google user data

What we access

• Google Sign-In - the openid, email and profile scopes only: your email address, your name, your profile picture if you have one, and your Google account identifier.
• Google Calendar - only if a business owner explicitly connects their calendar: permission to create and update events that Lightor itself created, so their appointments appear in their own calendar.

How we use it

• The email, name and account identifier are used solely to create a Lightor account and to recognise you when you sign in again.
• The calendar permission is used solely to write Lightor appointments into your calendar and to update them when one is moved or cancelled.

How we store it

• The email, name and account identifier are stored on your user record in our database. No password is stored when you sign in with Google.
• Calendar tokens are encrypted at rest and used only for that synchronisation. Disconnecting the calendar deletes them.

Who we share it with

We do not share Google user data with any third party, other than the infrastructure providers listed above that run the service on our behalf (storage and database), and except where the law requires it.

Limited Use

Deletion

Deleting your Lightor account from the dashboard also deletes the Google data held against it. You can disconnect the calendar on its own, or revoke Lightor's access entirely from your Google account permissions page.

Artificial intelligence and Lighty

Lightor uses Google's Gemini service for the following tools, and only when a business owner uses them. On an account on the free plan, editing the site with AI and Lighty usually run on Anthropic's Claude service instead, and the same information is sent to it. Building a site and pictures always use Google Gemini.

• Building a site - your business description, your answers to follow-up questions and a logo if you attach one are sent to produce a design and content suggestion.
• Editing the site with AI - your request is sent together with the site's content (business details, texts and services), and with an image you attach or the current logo. When you add a new section to the site, its draft is written from your business details only.
• Lighty, the dashboard's AI assistant - your question is sent together with the data needed to answer it, which our server reads from your own business account only: appointments, services, customer names, inquiries and statistics. Pictures you attach to a message are sent with it, and a product made from them gets them. Lighty can also prepare changes you ask for: days off, opening hours, booking rules, appointments, leads and customers, services and products, your own alerts, and the business details (name, address and social links). It also drafts an answer to a lead: you send it from your own phone, by WhatsApp or SMS, and Lightor does not send it. Every change is shown to you first on a card, and happens only when you confirm it. When a change sends a customer a message, such as cancelling an appointment, the card says so first. Lighty never deletes anything for good, and does not change the subscription, payment or sign-in details. It can make mistakes, so read the card before confirming.
• Editing a picture with AI - when you ask to edit a picture in the site editor, the picture and your instruction are sent to Google Gemini to make the edited version. If people appear in it, make sure you have the right to use the picture.

On the sites of businesses whose plan includes it, Lighty also answers visitors:

• Lighty on a business's site - the visitor's question is sent together with information the site already shows, and nothing else: the business name, its texts, services and prices, opening hours, address and public contact details, its FAQ, and the free times the site's booking calendar shows any visitor. No data about customers or inquiries is sent: of the appointments, only which times are already taken, with no names or details. Nor is the private description the owner wrote for building the site. Lighty does not book, change or cancel appointments, and its answers can be wrong.

We do not use the data sent to these tools to train models.

Facebook (Meta) data

Contact and changes

For privacy questions: [email protected]. Material updates will be published on this page with a new date.