Plusfive is operated by RNJM GROUP INC ("Plusfive", "we", "us"). Plusfive provides a platform for service businesses — salons, barbershops, clinics and studios — to manage bookings, customers, payments, messages and loyalty, through the website app.plusfive.io and the Plusfive mobile apps (together, the "Service").

This policy explains what personal information we process, why, who we share it with and the choices you have.

Business users — the business owner and their staff, who open a Plusfive account.

Customers of a business — people who book with a business, or whose details a business keeps in Plusfive. For this information the business decides what is collected and why; Plusfive processes it on the business's behalf. Questions about it should go to the business first; we will help them answer.

• Account information: name, e-mail, phone number, password (stored hashed), business name, type, address, opening hours, logo, cover and gallery photos, staff members and their roles.
• Customer information a business keeps or receives through its booking page: name, phone number, appointments and their history, services, notes, payments and refunds, ratings and reviews, loyalty points and, if the business collects it, a birthday or e-mail.
• Payment information: subscription payments are handled by Stripe and payments to businesses by Tranzila. Card numbers are entered with them; we keep only a token, the card's last digits and expiry, and the transaction details needed for receipts, cancellations and refunds.
• Messages: the content and delivery status of WhatsApp / text messages the Service sends for a business (reminders, confirmations, follow-ups) and the replies needed for them (for example an arrival confirmation or a rating).
• Device and usage information: a push-notification token for the app, basic technical logs (IP address, browser or device type, time of request) and counts of visits to a business page. We do not use third-party advertising or cross-app tracking.

• To provide the Service: booking, calendars, reminders and confirmations, receipts and invoices, customer cards, statistics and the loyalty club.
• To process payments, cancellations and refunds, and to keep the records the law requires.
• To send business users service messages and notifications they turned on.
• To keep the Service secure, prevent abuse and fix problems.
• To comply with law and enforce our terms.

We do not sell personal information.

Only with service providers that run parts of the Service for us, under agreements that limit their use of the data:

• Hosting and storage: Amazon Web Services (servers, database and files) and Cloudflare (website).
• Payments: Stripe and Tranzila.
• Messaging: WhatsApp providers and the automation tools that send the messages (such as ManyChat and n8n).
• Notifications and app delivery: Apple, Google and Expo.
• Maps and business listings: Google (business search and review links).

We may also disclose information when the law requires it, to protect rights and safety, or as part of a merger or acquisition (the new owner would be bound by this policy).

Some of these providers keep data outside Israel (for example in Australia, the United States or the European Union). We use providers that protect it to a standard comparable to Israeli law.

For as long as the business account is active. When an account is deleted we delete or anonymise its data within a reasonable time, except records we must keep by law (for example invoices and receipts, which Israeli tax law requires to be kept for 7 years) and backups that are overwritten in their normal cycle.

You may ask to see the personal information we hold about you, to correct it or to delete it, under the Israeli Privacy Protection Law and any other law that applies to you. Business users can edit their details in the app and delete their account from Settings. Customers of a business can ask the business, or contact us.

You can turn notifications off in the app or on your device at any time.

We protect information with encryption in transit (HTTPS), access controls, separation between businesses, hashed passwords and payment tokens instead of card numbers. No system is perfectly secure; if we learn of a breach that affects you we will act as the law requires.

The Service is meant for businesses and is not directed at children under 16.

We may update this policy. The date at the top shows the latest version; important changes will be announced in the Service.

Questions or requests about privacy: support@plusfive.io or +972-53-946-0041.