1. Who we are

NovixMagnet is a brand and trading name operated by WinJobs LTD, a company registered in Israel, company number 515366607 (“NovixMagnet”, “we”, “us”, “our”).

Registered office: Hagefen 6, Kiriat Gat, Israel.

Privacy contact: info@novixmagnet.com.

This policy applies to our website at novixmagnet.com, to the NovixMagnet platform, and to every tool provided through it.

3. Data we collect about you

3.1 When you create an account: your name, business name, email address and phone number.

3.2 When you set up a tool: information about your business — services, prices, working hours, service area, location, photographs, logos and other Business Content you supply.

3.3 Access credentials and permissions you grant us to third-party platforms, such as management access to a Google Business Profile, a Facebook page or an Instagram profile. We use this access only to provide the tool you subscribed to.

3.4 Billing data: subscription and transaction records, amounts, dates and the last digits and type of the payment method. We do not store full payment card numbers — payment details are handled by our payment providers.

3.5 Communications: emails, WhatsApp messages and support requests between you and us, and our replies.

3.6 Usage data: logins, actions taken in your account area, and technical logs such as IP address, device and browser type, used for security, troubleshooting and service improvement.

4. Website visitors, cookies and tracking

4.1 You can browse novixmagnet.com without creating an account. We still collect limited technical data as described in 3.6.

4.2 Meta Pixel. Our website uses the Meta Pixel, a tracking technology provided by Meta Platforms. It records certain actions — for example visiting a page, clicking a call-to-action to create an account, or clicking a WhatsApp contact link — and shares them with Meta. This allows us to measure the effectiveness of our advertising and to show relevant ads on Facebook and Instagram. Meta may combine this information with data it already holds about you.

4.3 Where consent is required for such tracking — in particular for visitors in the European Economic Area and the United Kingdom — it is collected before the tracking runs, and you can withdraw it at any time.

TO BE CONFIRMED BEFORE PUBLICATION: whether a cookie consent banner is currently active on the site, and which additional analytics or tracking tools are in use (for example web analytics, search console integrations, or embedded map or video services). Each must be listed here by name and purpose.

4.4 Embedded content. Some pages embed video from YouTube and content from other platforms. Those providers may set their own cookies and receive your IP address when the content loads. Their own privacy policies apply to that.

4.5 You can control or delete cookies through your browser settings. Blocking some cookies may affect how parts of the site work.

5. Data we handle in each tool

5.1 Business Website

We host your website and the business content you supply. If your website includes a contact form or similar, enquiries submitted through it contain personal data of the people contacting you — for that data, you are the controller and we are the processor. Your business email inbox is hosted by us; we access its contents only where necessary to provide or restore the service, or where required by law.

5.2 Google Business Profile

We hold your business details and the access you grant us to the profile. Performance data in your weekly report is drawn from Google’s own data about your profile. Google is a separate controller for data it collects through the profile, under its own privacy policy.

5.3 Facebook Business Page and 5.4 Instagram Business Profile

We hold your business details and the access you grant us to the page or profile, and the performance data behind your weekly report. Meta is a separate controller for data it collects on those platforms.

Where you ask us to convert an existing personal Instagram account, our access to that account may make existing content and direct messages technically visible to us. We access the account only to the extent needed to perform the service. We do not read, use, export or disclose your private messages. If you would prefer we never have that access, ask us to create a new business profile instead.

5.5 Appointment Scheduling (NovixBooking)

We process the personal data of your customers who book with you: typically name, phone number and/or email address, the service requested, and the appointment time. We also process data needed to send confirmations and reminders by email and, where enabled, WhatsApp. You are the controller of this data. We use it only to operate your booking system and never for our own purposes.

5.6 CRM

We process the personal data of your leads and customers as you hold it in the CRM: contact details, status and notes, message and email history, price quotes, work orders, payment records and review requests. You are the controller of this data.

Where you connect your own payment provider, payments from your customers are made to you directly through that provider. We do not hold, transmit or process those funds, and the payment data associated with them is held by your provider under its own terms.

The CRM demonstration environment made available before you subscribe contains example data for demonstration purposes.

5.7 Search Visibility (Local SEO / Full Growth)

We process your business information and website content, and ranking and performance data about your website. Where the review engine is used, we process the contact details of your customers in order to send review requests on your behalf — again as processor, with you as controller.

5.8 Lead packages

We process the personal data of people who submit a request for a service — their name, contact details, service area and the details of their request — in order to deliver that request to a suitable business. See section 6.

6. Leads and consent records

6.1 A lead is a person who has submitted a request for a service and has consented to be contacted by a service provider by telephone, SMS and WhatsApp.

6.2 In relation to that person, we act as controller up to the point of delivery: we collect the request, record the consent, and pass the details to the single business we deliver it to. From delivery onward, the receiving business is the controller of that person’s data and is responsible for how it contacts, stores and uses it.

6.3 Consent records. We record evidence of the consent given, including the wording presented, the date and time, and technical identifiers associated with the submission. We retain these records for as long as needed to demonstrate compliance and to respond to any complaint or claim, and we make them available to the receiving business on reasonable request in connection with such a complaint or claim.

TO BE CONFIRMED BEFORE PUBLICATION: the exact retention period for consent records, and the precise fields recorded. A minimum of four years is recommended where leads are contacted in the United States.

6.4 A person whose request has been delivered can ask us to stop supplying their details to businesses at any time, at info@novixmagnet.com. Where their details have already been delivered, we will tell them which business received them so that they can exercise their rights against that business directly.

6.5 We do not sell lead data. Each request is delivered to a single business, as part of the service that business has subscribed to.

7. Why we use data, and on what basis

We use personal data for the following purposes. Where the GDPR applies, the corresponding legal basis is shown.

• To provide the tools you subscribe to — performance of a contract.
• To take payment and manage your subscription — performance of a contract, and legal obligation for tax and accounting records.
• To communicate with you about your account and support requests — performance of a contract.
• To keep the platform secure, prevent abuse and troubleshoot faults — legitimate interests.
• To improve our services and understand how they are used — legitimate interests.
• To measure and target our own advertising, including through the Meta Pixel — consent, where required.
• To send you marketing about our own services — consent, or legitimate interests where permitted for existing customers. You can opt out at any time.
• To deliver leads and evidence their consent — consent of the individual, and legitimate interests in maintaining records of that consent.
• To comply with legal obligations and to establish, exercise or defend legal claims — legal obligation and legitimate interests.

8. Who we share data with

8.1 We do not sell personal data.

8.2 We share data with the following categories of recipient, only as needed:

• Payment providers — Tranzila and PayPal, to take payment and manage subscriptions.
• Third-party platforms you have asked us to manage — Google and Meta (Facebook and Instagram). Each is a separate controller under its own privacy policy.
• Meta Platforms, in connection with the Meta Pixel described in section 4.2.
• Hosting and infrastructure providers, who host the platform, your website and our backups.
• Communication providers, who deliver email and messaging on our behalf, including booking confirmations, reminders and review requests.
• Professional advisers — accountants and lawyers — where necessary.
• Authorities, where we are required by law to disclose.
• A buyer or successor, if our business is sold or reorganised, subject to this policy continuing to apply.

TO BE CONFIRMED BEFORE PUBLICATION: the named subprocessors behind each category above — specifically the hosting provider, the email and messaging providers, the backup provider, and the provider on which the CRM runs. Named subprocessors are required for a Data Processing Agreement and should be listed here.

8.3 Every provider we use is required to protect the data and to use it only for the purpose we engaged them for.

9. International transfers

9.1 We are based in Israel and serve businesses in more than ten countries, so data may be transferred across borders.

9.2 Israel benefits from a European Commission adequacy decision, which means personal data may be transferred from the European Economic Area to Israel without additional safeguards.

9.3 Where a provider we use processes data outside Israel or the European Economic Area, we rely on an adequacy decision covering that country, or on Standard Contractual Clauses or an equivalent lawful transfer mechanism.

TO BE CONFIRMED BEFORE PUBLICATION: where the platform, the hosted websites, the CRM and the backups are physically stored. If everything is hosted in Israel or the EEA, this section can be simplified considerably; if any of it is hosted in the United States, the transfer mechanism must be stated.

10. How long we keep data

• Account and tool data — for as long as your subscription is active, and for 30 days after cancellation, as set out in the Refund & Cancellation Policy. After that it may be permanently deleted.
• Your customers’ data held in a tool — for the same period, unless you ask us to delete it sooner.
• Billing and tax records — for the period required by Israeli tax law, which is longer than 30 days and applies regardless of cancellation.
• Lead consent records — as described in section 6.3.
• Support communications — for as long as needed to handle the matter and for a reasonable period afterwards.
• Security and technical logs — for a limited period appropriate to their purpose.

11. Security

11.1 We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and restricting access to personal data to those who need it to do their work.

11.2 Full payment card details are handled by our payment providers and are not stored on our systems.

11.3 No system is completely secure. If a breach occurs that is likely to result in a risk to people’s rights, we will notify the relevant authority and, where required, the individuals affected, within the timeframes the law requires.

11.4 You are responsible for keeping your account credentials confidential and for the access you grant to people within your business.

12. Your rights

12.1 Depending on where you are, you may have the right to: access the personal data we hold about you; correct it; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent where we rely on consent.

12.2 Under Israeli privacy law you have the right to inspect the data held about you and to request its correction or deletion.

12.3 Under the GDPR, if you are in the European Economic Area or the United Kingdom, you have the rights listed in 12.1 and the right to lodge a complaint with your supervisory authority.

12.4 To exercise any of these rights, contact info@novixmagnet.com. We may need to verify your identity. We will respond within the period required by law.

12.5 Where we act as processor — that is, for data about your customers — requests should be directed to the business that holds the data, not to us. If someone contacts us about data we hold on your behalf, we will refer them to you and tell you about it.

13. If you are someone’s customer

13.1 You may have reached this page because a business you contacted uses NovixMagnet — for example you booked an appointment, submitted a request for a service, or received a review request.

13.2 In most of those cases the business you dealt with is responsible for your data, and we simply operate the system it uses. Contact that business directly to access, correct or delete your data.

13.3 If you submitted a request for a service through us and it was delivered to a business, section 6 applies. You can contact us at info@novixmagnet.com to ask us to stop supplying your details, and we will tell you which business received them.

13.4 If a business contacts you and you do not want to be contacted again, tell that business to stop. It is required to honour that request immediately, and you can also tell us.

14. Children

The platform is provided to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18 in connection with an account. If you believe we hold such data, contact us and we will delete it.

15. Automated decision-making

Tools are set up automatically from the answers you provide, and leads are matched to businesses based on trade and service area. We do not make decisions producing legal or similarly significant effects about you based solely on automated processing. Decisions about your subscription, suspension or termination involve human review.

16. Changes to this policy

16.1 We may update this policy. The current version is always published on this page with its effective date.

16.2 Where a change materially affects how we use your data, we will notify you by email before it takes effect.

17. Contact and complaints

Privacy questions and requests: info@novixmagnet.com, or write to WinJobs LTD, Hagefen 6, Kiriat Gat, Israel.

If you are not satisfied with our response, you may complain to the Israeli Privacy Protection Authority, or — if you are in the European Economic Area or the United Kingdom — to your local supervisory authority.

Related documents: Terms of Use · Refund & Cancellation Policy.