Privacy
Privacy Policy
This policy explains how Yanay Law Office and Adv. Yehonatan Yanay collect, use, process, disclose, retain and delete personal information submitted through yanay-law.co.il and the services linked to it. It applies to the main website, inquiry forms, inquiries concerning an arbitrator appointment and the preparation room for a paid consultation. Separate websites and products linked from the site, including the notary platform and CASABROVA, are governed by their own privacy policies.
Last updated: 27 September 2026
1. Controller and contact details
The controller of the information is Adv. Yehonatan Yanay, through Yanay Law Office.
Privacy inquiries may be submitted by email to info@yanay-law.co.il or by telephone on +972-3-330-1776.
2. Information collected
The information collected depends on how the site is used:
General contact form
Name, contact details, company or organisation, role, type of matter, relevant country or region, party names for conflict review, urgency and a short description of the matter.
Inquiry concerning an arbitrator appointment
The sender's details and capacity, the names of the parties and their counsel, the proposed appointment method, arbitration framework, relevant timing and a short neutral description of the subject matter. An arbitration agreement or clause and a neutrally worded appointment or referral letter may be attached.
Booking a paid consultation
Name and contact details, meeting time, transaction details, payment status and information needed for an accounting document. Payment-card details are submitted directly to the payment provider and are not intended to be stored by the website or the firm.
Preparation room
Information the client chooses to provide in the chat, uploaded documents, questions and answers, the account of events and outputs created for meeting preparation, such as a summary, chronology, document list and points requiring clarification. The material may contain sensitive personal information and information about other people.
Technical information
The site may automatically collect an IP address, browser and device type, access times, pages viewed, referring page and security and error logs. This information is used for operation, security and troubleshooting.
3. Purposes of processing
The purposes depend on the route selected by the person submitting the information:
General inquiry
Information is used to understand and respond to the inquiry, review initial fit and perform a conflict review.
Inquiry concerning an arbitrator appointment
Information is used to review conflicts, independence and availability, understand the proposed appointment framework and respond to the inquiry.
Booking a paid consultation
Information is used to schedule the meeting, review conflicts, process payment, issue accounting documents and administer the engagement relating to the meeting.
Preparation room
Information is used to organise the documents and facts provided by the client, build a chronology, identify points requiring clarification, prepare questions and enable Adv. Yanay to begin the meeting already familiar with the principal features of the dispute and the material provided.
Matter accepted by the firm
If Adv. Yanay accepts the matter, information is used to provide legal services, maintain the client file and comply with legal, professional, accounting and ethical obligations. Once the matter has been accepted, the handling of information is also governed by the terms set out in the engagement agreement with the client.
Site operation and measurement
Technical and usage information is used to operate and secure the site, prevent misuse, resolve faults and analyse traffic and use in aggregate through Plausible. This may include understanding acquisition sources, pages used, navigation paths and actions taken on the site, according to the configuration enabled and without creating a personal advertising profile.
Information will not be used for an incompatible purpose unless the person has consented or the use is permitted or required by law.
4. Whether information must be provided
There is no legal obligation to provide information through the site. Providing information is voluntary.
Failure to provide required form details may prevent the firm from understanding or responding to the inquiry. Failure to provide party names may prevent a conflict review. Failure to provide payment information will prevent completion of the paid booking.
Use of the AI-assisted preparation room is optional. A person who does not consent to transfer of the information to the provider identified before use may hold the meeting without using the preparation room, but a substantial part of the meeting may then be used to study the facts and documents before legal advice can be addressed.
5. Information about other people
A person submitting information about someone else should provide only information that is relevant and necessary and ensure that they are entitled to provide it. Material obtained unlawfully or unrelated to the inquiry or meeting preparation should not be uploaded.
6. Recipients
Access is limited to what is necessary for the purpose for which the information was provided.
- Adv. Yehonatan Yanay and authorised office personnel assisting him.
- Vercel for hosting and operating the website and service.
- Supabase for securely storing booking and service-state data in a database located in the Frankfurt region.
- Google Workspace, Gmail, Google Calendar and Google Drive for email, scheduling, appointment management and transferring material into the file of a matter accepted by the firm.
- Google Cloud, including Cloud Storage, Cloud Run and Vertex AI, for secure file intake, scanning, text extraction and organisation of preparation material. The model and processing configuration to be used will be disclosed before consent to processing.
- Zoom when the purchaser chooses an online meeting.
- Morning (Green Invoice) and grow for payment processing, transaction confirmation and accounting documents. Payment-card details are submitted directly on the payment provider's hosted page and are not stored on the firm's website.
- Plausible Analytics for aggregate website measurement, without sending form content, documents, payment details or preparation-room information to it.
- Other professional or technology providers acting for the firm under restricted access, confidentiality and security requirements.
- A competent authority, court or other person where disclosure is required by law or necessary to protect a legal right.
The firm does not sell personal information or disclose it to advertisers for targeted advertising.
7. Preparation room and Vertex AI
After the meeting is scheduled and paid for, the client receives a personal link to a preparation room. Documents may be uploaded and the sequence of events explained in a chat. The system assists with organising material, building a chronology, identifying missing points and preparing questions for the meeting.
Files are first received in private Google Cloud storage, scanned and processed for text extraction by an isolated internal service, and only then may permitted material be sent for processing through Google Cloud Vertex AI. Client and relationship lists used for conflict review are not sent to the model.
Before the first processing operation, the client will be shown Google Cloud as the provider, Vertex AI as the product, the model and processing configuration to be used, the categories of information, purpose, known retention periods, processing location and possible transfer outside Israel. The client must tick a consent box and press a confirmation button. Entering the room, selecting files and running the preliminary count do not constitute consent and do not by themselves send material to the model.
Processing will be enabled only in an approved business configuration that does not use client information for training without permission. The model identity, service terms and retention settings will be rechecked before activation and recorded with the booking's consent record.
The system does not make legal decisions, decide whether the firm accepts a matter or replace Adv. Yanay's judgment. Its outputs are used for preparation and are reviewed before professional use.
8. Conflict review
The information needed for conflict review is checked against separately maintained client and relationship lists. Those lists are not provided to any AI provider.
The chat and document package remains unavailable to Adv. Yanay until the review has been completed. If a conflict is identified, the payment will be refunded in full and the package will be deleted before it is made available to him. If no conflict is identified, the organised package will be released to Adv. Yanay for meeting preparation.
9. Retention and deletion
- A general inquiry or arbitrator inquiry that does not lead to an engagement will be retained for up to 12 months for handling, records and review of a repeated inquiry, and will then be deleted or minimised unless a legal or professional reason requires continued retention.
- Information concerning a matter accepted by the firm will be retained in the client file in accordance with the firm's professional, legal and accounting obligations and the engagement agreement with the client.
- Preparation-room materials stored in systems controlled by the firm will be deleted 30 days after the meeting.
- If a conflict is identified, the preparation package will be deleted earlier, before it is made available to Adv. Yanay.
- Transaction records, invoices and supporting documents will be retained for the periods required by law.
- External providers may retain information in accordance with their role, service configuration, applicable law and agreements.
10. Information security
The firm will use reasonable security measures appropriate to the nature of the information and the risks involved in processing it. These include encryption in transit, personal time-limited links, restricted access, separation of conflict-review information from the preparation package and deletion under the applicable schedule.
No system is completely immune from intrusion, error or malfunction. A suspected security incident may be reported immediately to info@yanay-law.co.il.
11. International transfers
Infrastructure and service providers used in this flow, including Google Cloud, Google Workspace, Vercel, Supabase, Zoom, Morning and grow, may process or store information outside Israel. Such transfers will be made for service delivery and subject to applicable law, contractual terms and the safeguards of the relevant provider.
12. Cookies and usage data
The site is not intended to use advertising cookies or create a personal advertising profile. It may use essential technical storage for security, maintaining session state and operating private rooms.
The site will use Plausible Analytics to measure website traffic and user behaviour in aggregate. Depending on the configuration enabled, measurement may include visits and pageviews, referral sources and campaigns, entry and exit pages, visit duration, navigation paths, country, device and browser type, and actions or events defined on the site. Content entered in forms or the chat, uploaded documents and payment details will not be sent to Plausible. Plausible does not use cookies or persistent identifiers for its standard measurement mechanism. If another analytics tool or any non-essential cookie is introduced, this policy and the consent mechanism will be updated before it is enabled.
13. Rights concerning personal information
Subject to applicable law, a person may request access to personal information about them held in a database and request the correction or deletion of information that is inaccurate, incomplete, unclear or out of date. Requests may be sent to info@yanay-law.co.il and should include sufficient information to verify the requester and locate the information.
Requests may be subject to identity verification, legal privilege, confidentiality duties, professional obligations and other limitations under applicable law.
14. Links and separate services
The site links to separate websites and products. This policy does not govern how those independent services process information. Their privacy policies should be reviewed before use.
15. Changes to this policy
The firm may update this policy following changes to services, providers, technology or law. The date of the latest update will appear at the top. A material change will be communicated appropriately before it takes effect where required.
16. Contact
Privacy questions and requests may be addressed to Adv. Yehonatan Yanay, Yanay Law Office, by email at info@yanay-law.co.il or by telephone on +972-3-330-1776.