מדיניות הפרטיות של Nettoo

Who we are and why we collect data

Nettoo is a bookkeeping service for small businesses in Israel. The only purpose for which we collect data is to keep your business's records: collecting its financial documents, reading them, deriving records and a summary of the VAT printed on them, and handing your accountant what they need. Providing data is voluntary; without a connected mailbox or an upload, Nettoo holds nothing beyond the email address you sign in with.

What Nettoo reads from your mailbox, and what it does not

When you connect a Gmail mailbox, Nettoo asks Google for read-only access (gmail.readonly). When you connect an Outlook mailbox, it asks Microsoft for read-only access to mail (Mail.Read) and for the mailbox's address (User.Read). In both cases it cannot send, delete, label or modify mail, and does not ask to.

Nettoo searches the mailbox only for messages with attachments or with words such as "invoice", "receipt", חשבונית or קבלה, from the date you chose. Only messages the search finds are examined. A message that carried no document leaves only its message id with us, so it is not examined twice. If the message carries an invoice or receipt, its id, sender, subject and date are stored, along with the attachment, or the message body when the invoice is the body itself. The body of a message that is not an invoice is never stored, and your correspondence is not read.

No person at Nettoo reads content from your mailbox unless you explicitly ask for that as part of support. The data serves only your own business's records: never advertising, never sale or transfer to data brokers, never creditworthiness, never the training of general models.

Nettoo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who processes the data, and where

Documents, records and the database are stored on Amazon Web Services in the Tel Aviv region (il-central-1). Documents are read by a language model from Anthropic (Claude) or Google (Gemini), which receives the file for that reading only and does not train on it. The models run on the providers' servers outside Israel, and what is sent to them is not kept there beyond what processing needs. WhatsApp messages, once that channel is enabled, pass through Meta. Each such provider is bound by a data processing agreement.

Questions to Nettoo on WhatsApp

From a phone you linked, you can ask Nettoo about your business. The answer is worded by the same language model, which receives your question and the figures from your records needed to answer it, and does not train on them. What you asked and what was answered is kept sealed for thirty days, so that a follow-up question is understood, and is then deleted. You can also ask by voice note: the recording is passed to Google's Gemini model for transcription only, is not kept by us, and only the words spoken in it join the conversation. Standing instructions you asked to be remembered ("keep it short") are kept until you delete them. You can delete the conversation and the instructions at any time on the "My account" screen. Nettoo never messages you first, except as an agent you built yourself.

Agents

An agent is a standing instruction you gave Nettoo in your own words, with a name you chose for it and a time at which it runs. At that time the same language model receives the instruction and the figures from your records that it needs, and words a report; it does not train on them. An agent only reads: it changes no record and sends nothing to anyone but you, except a request to a supplier for an invoice that you approved (see "Sending mail from your Gmail"). The report is sent to you on WhatsApp, to the phone you linked, under the agent's name, and joins your conversation with Nettoo. If you have not written to Nettoo in the last day, you first get a short message that a report is waiting, and the report is sent when you reply. The instruction is kept sealed until you remove the agent, and reports are kept sealed for thirty days. You can pause or remove an agent at any time.

Google Calendar

If you choose to connect your Google Calendar, Nettoo is given permission for calendar events only, and for the account's address so it can show which calendar is connected. This permission is separate from the mailbox's and is requested only when you ask for it. Nettoo reads events to answer your questions about your calendar and for an agent you set up for that purpose, and adds a new event only after you have explicitly approved it; it does not change or delete existing events. Event names and times are passed to the model that words the answer, for that answer only, and are not kept by us beyond the conversation and the reports, which are kept for thirty days. If you invited people to an event, Google sends them the invitation. You can remove the connection at any time in your Google account settings. Nettoo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sending mail from your Gmail

When a supplier's regular invoice did not arrive, Nettoo can ask them for it by mail, only after you have approved the request. The mail goes out from your own Gmail address, so you are asked to give Nettoo permission to send email on your behalf, and the account's address to show which address it goes from. This permission is separate from the mailbox's and is requested only when you ask for it; if you also connected your calendar, both are part of the same connection to your Google account. It allows sending only: Nettoo reads nothing of your mailbox through it. Only invoice requests, and one reminder after each, are sent through it, in Nettoo's fixed wording, to the address that supplier's documents came from, and no more than ten a day. The mail is kept in your Sent folder like any mail you sent. We keep the supplier's name, the month, the address it went to and when, and no content beyond the fixed wording. You can remove the permission at any time in your Google account settings or on the Team screen. Nettoo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long data is kept

Documents and records are kept as long as the account exists, because the business must keep them for seven years and Nettoo is where it keeps them. Raw reading outputs are kept twelve months for quality checks. Access logs are kept twenty-four months as the Data Security Regulations require. Disconnecting a mailbox deletes the tokens here and, for a Gmail mailbox, revokes the grant at Google. Microsoft does not let an app revoke its own grant, so after disconnecting an Outlook mailbox, remove Nettoo in your Microsoft account as well (account.microsoft.com/privacy, or myapps.microsoft.com for a work account). In either case documents and records stay, and a separate action deletes the documents from that mailbox that never became a confirmed record. Deleting the account offers a full export, and thirty days later everything is deleted, files included.

Your rights

Under the Protection of Privacy Law (Amendment 13): data is provided voluntarily; the purpose is keeping your business's records; recipients are the accountant you choose to send to and the processors above; you may access, correct and delete your data. Contact: privacy@nettoo.ai.