Privacy Policy

1. Who we are

This privacy policy explains how TamTov ("TamTov", "we", "us", "our") collects, uses and protects information when you visit tamtov.com (the "Site") or submit a request through it. TamTov is not yet incorporated as a company; this policy will be updated with our registered entity details once incorporation is complete.

TamTov builds an AI execution and coaching system for multi-location quick-service restaurant (QSR) and food-service chains. This Site is a marketing site: it describes the product and lets prospective customers request a demo. It does not itself run the TamTov product. If you are an employee at a location that uses TamTov's in-store system, a separate notice governs how that system processes information about you — this policy covers the website only.

2. Information we collect

Information you give us directly

When you fill out the "Book a demo" form on this Site, we collect:

• Full name
• Job role (optional)
• Work email address
• Company name
• Number of locations your company operates (selected from a range)
• Any message you choose to add (optional)

The form includes a hidden "honeypot" field used only to detect automated spam submissions. It is not visible to human visitors and is not used to collect information about you.

Information collected automatically

3. How we use your information

We use the information submitted through the demo request form to:

• Respond to your inquiry and schedule or run a product demonstration
• Evaluate whether TamTov is a good fit for your organization
• Follow up with relevant information about TamTov, if you have not opted out
• Maintain records of business inquiries for our own internal purposes
• Meet legal, accounting, or security obligations where required

We do not sell personal information, and we do not use it for unrelated advertising purposes. The form note on our contact section states we only use your details to contact you about TamTov, with no newsletters and no spam — that commitment should be reflected accurately here once our actual outreach practices are confirmed with counsel and the go-to-market team.

4. Legal basis for processing (EU/EEA and UK visitors)

If you are located in the European Economic Area or the United Kingdom, the General Data Protection Regulation (GDPR) requires us to identify the legal basis on which we process your information. We rely on:

• Legitimate interests — to respond to your inquiry and pursue a business relationship you initiated by contacting us, where this does not override your rights and interests.
• Consent — where we ask for it explicitly, for example before sending marketing communications beyond directly responding to your inquiry.
• Legal obligation — where we must retain or disclose information to comply with the law.

[COUNSEL: confirm the legitimate-interest assessment and whether separate marketing consent is required for follow-up emails to EU contacts.]

5. Who we share information with

We do not sell your information. We may share it with:

• Service providers who help us run this Site and process form submissions, such as our hosting and form-handling provider (Netlify). These providers act on our instructions and are only permitted to use information as needed to provide their service to us.
• Professional advisors such as lawyers or accountants, where necessary.
• Authorities, where required by law, regulation, or valid legal process.
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to the same protections described here.

[COUNSEL: list every subprocessor by name once the deployment/CRM stack is finalized — see README.md, which notes leads may later be connected to a CRM or spreadsheet via Zapier/Make.]

6. International data transfers

TamTov is based in Israel. The European Commission has recognized Israel as providing an adequate level of data protection for the purposes of transfers from the EU/EEA, which supports transfers of personal information from EU/EEA visitors to us in Israel. Where we use service providers located outside Israel or the EU/EEA (for example, US-based hosting infrastructure), we intend to rely on appropriate safeguards such as standard contractual clauses or an equivalent transfer mechanism.

[COUNSEL: confirm current transfer mechanism relied upon for each subprocessor, e.g. Netlify's data processing terms.]

7. How long we keep information

We keep information submitted through the demo request form for as long as reasonably necessary to respond to your inquiry, pursue a resulting business relationship, and meet our legal and record-keeping obligations. [COUNSEL / OPS: define a concrete retention period, e.g. "for the duration of an active sales conversation, plus 24 months of inactivity, after which it is deleted or anonymized."]

8. Your privacy rights

If you are in the EU/EEA or UK

Under the GDPR and UK GDPR, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request erasure of your information
• Restrict or object to certain processing
• Receive your information in a portable format
• Lodge a complaint with your local data protection authority

If you are in the United States or elsewhere

Depending on your location, you may have similar rights under applicable state or national law. [COUNSEL: add state-specific disclosures if targeting California, Colorado, or other states with comprehensive privacy laws.]

To exercise any of these rights, contact us at privacy@tamtov.com. We will respond within the time required by applicable law.

9. Cookies

See our separate Cookie Policy for details on cookies and similar technologies used on this Site, including third-party cookies that may be set if you choose to play the embedded video.

10. Children's privacy

This Site is directed at business professionals evaluating TamTov for their organizations and is not intended for children. We do not knowingly collect information from children.

11. Security

We use reasonable technical and organizational measures to protect the information submitted through this Site, including transport encryption (HTTPS) and security headers on our hosting configuration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this policy from time to time. We will update the "last reviewed" date at the top of this page when we do. Material changes will be reflected here before they take effect.

13. Contact us

For general questions, contact info@tamtov.com. For privacy questions or to exercise your data protection rights, contact privacy@tamtov.com.