Privacy Policy
Last updated: 2026-08-04
1. Who we are and scope
This policy applies to your use of the Janut website and service, which we operate for visitors, buyers, and sellers. Janut operates the site's database; an individual store only gets access to the information it needs (such as details of a buyer who bought from it) to provide the service and respond to buyers.
2. Information we collect
From buyers: email address and name (both required, to deliver the product), and order details. From early-access requests: name, phone number, and a short description. From sellers: account and store details (name, bio, images), and a support email address. Payment-provider connection details (such as an API password) are encrypted at rest and never accessible to us in plain text. We also collect anonymous usage data (pages viewed, sales) for basic seller-facing analytics, without personal identification. Separately, we use product analytics (PostHog) to understand how buyers and sellers use Janut and improve the service. Once you sign in or make a purchase, this ties usage to your identified account, unlike the anonymous seller-facing analytics above.
3. Cookies and identifiers
We use a session cookie to keep you signed in, a language-preference cookie, and an anonymous visitor-identifier cookie (not personally identifying) to count unique visits for seller-facing analytics; these run regardless of the choice below since the site needs them to work. Beyond that, an analytics identifier set by our product-analytics provider (PostHog) is only set if you opt in via the consent choice shown on the site; declining, or not choosing, means it's never set. That choice itself is saved locally in your browser, not as a cookie. The service currently uses no third-party advertising cookies.
4. How we use it
We use this information to run the service: authenticating you, delivering purchased products, processing payments, providing basic analytics to sellers, understanding and improving the service through product analytics, sending operational emails (purchase confirmations, sign-in codes), and responding to support and early-access requests.
5. Sharing with third-party providers
To operate the service, we share only the relevant information with: Cardcom (payment processing), Mux (video hosting and streaming), Supabase (database, file storage, and authentication), Resend (operational email delivery), and PostHog (product analytics, used by us to understand and improve Janut). These providers are required to use the data only to provide their service to us. Some of these providers process data on infrastructure located outside Israel, including the United States (this applies to PostHog). We only work with providers offering appropriate contractual data-protection safeguards for that transfer.
6. Data retention
We keep your information for as long as your account or purchase history is active, and as required by law (for example, invoices and records for tax purposes). Access links to purchased content stay active over time so buyers can return to what they bought.
7. Security
Sensitive payment credentials are encrypted at rest (AES-256), database access is restricted at the row level so a seller can only see data belonging to their own store, all traffic is encrypted (HTTPS), and sensitive endpoints are protected against abuse.
8. Your rights
Under the Privacy Protection Law, 5741-1981 (as amended), you can request to review the personal information we hold about you, correct inaccurate information, or request its deletion, subject to any retention duty that applies to us by law (for example, for bookkeeping purposes). Our database does not currently cross the threshold requiring registration or appointing a data protection officer under Amendment 13 to the law; we'll update this policy if and when that changes. For any request, contact us using the details below.
9. Changes and contact
We may update this policy from time to time. Questions about this policy? Reach out via the support page.