Privacy policy

Journeez provides an autonomous AI dispatcher that helps businesses schedule, route and manage their field workers, service providers and field tasks, and that communicates with their customers, field personnel and administrators through an AI assistant. Because of how the Platform works, we handle personal information in two different capacities, and your rights and our responsibilities differ between them:

As a “controller”

For information about our own account holders (the managers and dispatchers who log in to Journeez), visitors to our Site, and people who contact us or request a demo, Journeez decides why and how the information is processed. This policy governs that processing.

As a “processor” (service provider)

When our business customers use the Platform to manage their own field personnel and their own end-customers, that data belongs to the business customer. Journeez processes it only on that customer’s behalf and under their instructions, as set out in our agreement with them. For that data the business customer is the controller — if you are one of their employees or customers, please see Section 12.

Journeez is the trading name of Journeez Technologies Ltd, based in Tel Aviv, Israel.

Information you provide to us

• Account information — when an account is created for you on the Platform, we collect your name, email address, username and a securely hashed password, and we record basic sign-in activity such as your last login and whether your email is verified.
• Demo and sales enquiries — when you submit our demo-request form or contact us, we collect your name, company, email address, phone number, your role (optional), the size of your field team, your industry and any message you send. Our “Contact” links open an email to our contact address.
• Communications — records of correspondence and support requests you send us.

Platform data we process for our business customers

When a business uses Journeez, its authorised users enter or import operational data so the Platform can schedule and dispatch work. This typically includes:

• Field personnel — names, phone numbers, email addresses, roles and skills, working hours and availability, home/base locations and coordinates, attendance and clock-in/clock-out records, and assignments.
• End-customers and job sites — names, contact details, addresses and geographic coordinates, and job or task details, notes and status.
• Operations data — schedules, routes and driving directions, and task progress and timestamps.
• AI assistant conversations — messages and interactions between our AI assistant and your end-customers, field personnel and administrators across connected channels (for example WhatsApp, Telegram or in-app), and any knowledge-base content you provide for the assistant to use.
• Integration data — records the customer chooses to sync from their own connected systems, such as an ERP or CRM (see below).

Information collected automatically

• On our Site — we and our analytics partner may set cookies and collect device and usage information; when you submit the demo form we also record the page you came from and your browser’s user-agent. See Section 5 (Cookies).
• On the Platform — we process technical information needed to run the Service securely, such as access tokens and session identifiers, and we keep security and operational logs (for example authentication events and authorization failures). We do not build advertising profiles from Platform use.

We use personal information to:

• provide, operate, maintain and secure the Services, including scheduling, routing, dispatch, and the AI assistant that communicates with your customers, field personnel and administrators on your behalf;
• create and administer accounts and authenticate users;
• respond to demo requests, sales enquiries and support, and send service-related messages such as password resets and task updates;
• geocode addresses and calculate routes and travel times (which requires sending addresses and coordinates to our mapping providers);
• improve and develop the Services, including troubleshooting and analytics;
• protect the Services, our users and the public against fraud, abuse and security risks; and
• comply with legal obligations and enforce our agreements.

Where the EU/UK General Data Protection Regulation applies to our processing as a controller, we rely on the following legal bases:

• performance of a contract (to provide the Services and respond to your requests);
• our legitimate interests (to run, secure, improve and market our business, balanced against your rights);
• your consent (for optional analytics cookies and marketing measurement, which you can withdraw at any time); and
• compliance with a legal obligation.

Where we act as a processor, our business customer is responsible for establishing the legal basis for the processing they instruct us to carry out.

Our Site uses a small number of cookies. When you first visit, a consent banner lets you choose between essential-only and accepting analytics cookies; your choice is stored in a first-party cookie (“JOURNEEZ_CONSENT”) for up to one year, and you can change it at any time via “Cookie settings” in the footer.

• Essential cookies — required to run the Site and remember your consent choice.
• Analytics and marketing measurement — with your consent, we use the Meta (Facebook) Pixel and Meta’s Conversions API to understand how our marketing performs. This may set Meta cookies (such as _fbp and, if you arrived from an ad, _fbc) and send Meta information about your visit and interactions, including a hashed version of your email and phone number if you submit the demo form, along with your IP address and browser user-agent. Meta processes this under its own policies.

You can also control cookies through your browser settings and opt out of interest-based advertising through Meta’s ad-settings and industry opt-out tools.

We share personal information only as described here. We do not sell it.

Service providers and subprocessors

We rely on trusted third parties to host and operate the Services. They may process personal information on our behalf, only for the purpose of providing their service to us and under appropriate confidentiality and data-protection terms. Our main categories of subprocessor are:

Cloud hosting and databases (DigitalOcean)

Hosts the Platform, the Site and our databases, where personal information is stored and processed.

Mapping and routing (Google Maps Platform and TomTom)

Geocode addresses and calculate routes; they receive addresses and coordinates.

Messaging channels (Meta/WhatsApp and Telegram)

Deliver messages between the Platform’s assistant and end-customers where a customer enables these channels; they receive phone numbers or identifiers and message content.

Email delivery (Google/Gmail SMTP)

Sends transactional email such as password resets and task updates.

Push notifications (OneSignal)

Delivers mobile push notifications to field-worker apps.

AI processing (OpenRouter and OpenAI)

Power our assistant and integration-setup features; relevant text (such as a conversation, task context or a document you provide) is sent to the model to generate a response or embedding. We do not permit these providers to use that content to train their own models beyond what is necessary to provide the service.

Secure network egress (Kamatera)

Routes certain integration traffic (for example to an Israeli ERP) through a controlled gateway.

Integrations you connect

If a business customer connects its own system — such as Priority, monday.com or another ERP/CRM, including through our generic connector — data flows between that system and Journeez at the customer’s direction and under that system’s own terms.

Site leads

Information you submit through our demo form is stored in our systems and shared with our internal lead-qualification service so our team can follow up with you.

Legal, safety and business transfers

• We may disclose information if required by law, regulation, legal process or governmental request, or to protect the rights, safety and security of Journeez, our users or the public.
• If Journeez is involved in a merger, acquisition, financing or sale of assets, information may be transferred as part of that transaction, subject to this policy.

Journeez is based in Israel and uses cloud infrastructure that may store or process information in Israel, the European Union and the United States. Israel is recognised by the European Commission as providing an adequate level of data protection. Where personal information is transferred from the EEA, UK or other regions to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. You may contact us for more information about these safeguards.

We keep personal information for as long as needed to provide the Services and for the purposes described in this policy, and thereafter only as long as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. Platform data that we process for a business customer is retained in line with our agreement with that customer; when an account or record is deleted, the associated data is removed from our active systems, and residual copies in backups are overwritten in the ordinary backup cycle.

Journeez maintains an information-security program with organisational and technical controls designed to protect personal information, informed by the Israeli Protection of Privacy Regulations (Data Security), 5777-2017. These include:

• encryption of traffic in transit using TLS/HTTPS, and encryption of data at rest using our infrastructure providers’ capabilities;
• storing account passwords using industry-standard one-way hashing, and managing secrets and API keys with dedicated tooling rather than in source code;
• strict tenant isolation, so each organisation’s data is separated and access is validated server-side against the authenticated user’s organisation and permissions;
• least-privilege access to production systems, multi-factor authentication for administrative access, and prompt revocation of access when roles change;
• logging and monitoring of authentication and authorization events, and regular backups with defined restoration procedures; and
• a defined security-incident process, including assessment, containment, remediation and notification to affected customers and authorities where required by law or contract.

No method of transmission or storage is completely secure, so while we work hard to protect your information we cannot guarantee absolute security.

Rights available to everyone

Depending on your location and role, you may have the right to access the personal information we hold about you, to correct or update it, to request its deletion, to object to or restrict certain processing, to withdraw consent, and to receive a copy in a portable format.

European Economic Area and United Kingdom (GDPR)

If you are in the EEA or UK, you have the rights above and the right to lodge a complaint with your local data-protection authority. Our legal bases are described in Section 4.

California (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to access and delete it, to correct it, and to be free from discrimination for exercising your rights. The categories of personal information we collect and the parties we share it with are described in Sections 2 and 6. We do not sell personal information. We do use the Meta advertising tools described in Section 5, which may be considered “sharing” for cross-context behavioural advertising under California law; you can opt out at any time through our cookie banner and your browser’s opt-out signals. You may use an authorised agent to submit a request on your behalf, and we may need to verify your identity.

Israel (Protection of Privacy Law)

If you are in Israel, you have the right under the Protection of Privacy Law, 5741-1981 to inspect the personal information we hold about you and to request that inaccurate information be corrected or deleted, and you may lodge a complaint with the Israeli Privacy Protection Authority. Journeez processes personal information in accordance with that law, the Protection of Privacy Regulations (Data Security), 5777-2017, and Amendment 13 to the law.

How to exercise your rights

To make a request, contact us using the details in Section 15. We will respond within the timeframes required by applicable law and may need to verify your identity first. If your personal information sits in the Platform because you are an employee or customer of one of our business customers, please see Section 12.

The Platform is an autonomous AI dispatcher: it uses automated optimization to plan schedules and routes and to decide how work is assigned, and its AI assistant can hold conversations with your end-customers, field personnel and administrators and take routine dispatch actions — for example acknowledging a request, updating a task or notifying a worker. When it does this it acts on our business customer’s behalf and under their configuration; the business customer, not Journeez, decides how the Platform is configured and used and retains human oversight over decisions that significantly affect its personnel or customers. We do not use these automated processes to make decisions that produce legal or similarly significant effects about you without the business customer’s involvement. If you are subject to such processing through a business that uses Journeez, you can ask that business for information about it or to review a decision, and we will support them as described in Section 12.

If you are a field worker, service provider or end-customer of a business that uses Journeez, that business — not Journeez — is the controller of your information and decides how it is used. Journeez processes it on their behalf. Please direct requests to access, correct or delete your information to that business; we will support them in responding, as required by our agreement and applicable law.

Our Site and Platform may link to, or interoperate with, third-party websites and services that we do not control. This policy does not apply to those third parties, and we encourage you to review their privacy notices.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Services after an update means you accept the revised policy.

If you have questions about this policy or how we handle personal information, or you wish to exercise your rights, contact us at:

Journeez Technologies Ltd · Tel Aviv, Israel