Privacy policy

Last updated: 19 October 2026

This policy explains what personal information Cellari collects, why, who receives it, how long we keep it, and what you can ask us to do with it. We wrote it in plain language. If something is unclear, write to us at [email protected].

1. Who we are

Cellari is a system for managing wine production: batches, vessels, harvest intake, measurements, lab tests, blends, bottling and traceability.

Cellari is operated by an exempt dealer (עוסק פטור) registered in Israel (“Cellari”, “we”, “us”). Contact: [email protected].

If Cellari’s business moves to a company we set up later, that company takes our place under this policy. We will tell you when that happens.

This policy covers:

• the website at www.cellari.app, including the free winemaking calculators;
• the Cellari app at dashboard.cellari.app and the server behind it;
• emails we send, and support requests you send us through the app, by email, by phone or on WhatsApp.

2. Two roles: your account, and your winery’s records

We handle personal information in two different roles. The difference matters for who decides what happens to it.

• Information about you as a user (your account, how you use the app, your messages to us). Here we decide why and how it is used. In the words of the Israeli Privacy Protection Law, we are the “database controller” (בעל שליטה במאגר מידע).
• The records your winery keeps in Cellari (batches, notes, attachments, grower and customer details your team types in). Here the winery decides what goes in and why. We store and process those records only to run the service for the winery. In the law’s words we are a “holder” (מחזיק) processing the information for the winery, under the commitments in section 5A of the terms of use. If such a record contains a person’s details and that person wants to see, correct or delete them, they should contact the winery. If such a person writes to us instead, we will refer them to the winery, give them the winery’s contact details, and tell the winery about the request (section 13A of the Privacy Protection Law). We will also help the winery handle it.

3. What we collect

We do not ask for information of special sensitivity (מידע בעל רגישות מיוחדת), such as health details, and the service was not built to hold it. Please do not put such details in notes or attachments.

4. Do you have to give us this information?

No law requires you to give us any of this information. It depends on your choice. But we cannot open an account or run the service without the basic account details (name and email) and the winery details. Fields marked as optional really are optional. Leaving them empty only switches off the feature that uses them.

5. Why we use it

• To run the service: sign you in, show your winery’s records to the right people, save your work, and keep a history of every change. Cellari keeps a log of each action for as long as the winery’s account is open. Nobody can edit or delete it during that time, which is part of how traceability works.
• To communicate with you: service emails (invitations, alerts you switch on, changes to your plan or to these terms) and replies to your support requests.
• For billing, once paid plans are billed through the app.
• To keep the service secure and working: detect errors, abuse and security problems, and fix them.
• To improve Cellari: understand which features are used, where people get stuck and how long work takes to enter. We do this with summary statistics (section 7), not by reading your records.
• To meet legal obligations, for example tax and accounting records.
• Marketing, only as section 10 describes.

We do not sell personal information, and we do not use it for advertising.

6. Who receives information

We use outside services to run Cellari. Each one receives only what it needs for its job.

• Services that work for us (processors) are bound by a written commitment to us to protect the information and use it only for the job we gave them.
• Some services receive information directly from your browser or phone and act under their own privacy policies: Meta (WhatsApp), Google Fonts, Esri, and Google when you sign in with a Google account.

We may also share information:

• inside your winery: other members of your winery see the records and activity that their role allows;
• when the law requires it, for example a court order, or to protect the rights or safety of people or of the service;
• if Cellari’s business is transferred to a company we set up or to a buyer. The new owner must keep to this policy.

Transfer of information outside Israel

Some of these services keep information outside Israel. We transfer information abroad only as the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, allow. Most of the information is kept in the European Union (our servers and database run in the Netherlands), whose law protects personal information at least as well as Israeli law. For services that work for us in other countries, we rely on the service’s written commitment to follow the conditions Israeli law sets for keeping and using the information, to protect it, and not to pass it on to anyone else.

7. Statistics, analytics and what is stored on your device

On the website, we count visits with PostHog in a mode that stores nothing in your browser: no cookies and no local storage. The site never sends what you type into a calculator. Of the page address, it sends only the part before the ?, plus any campaign tags (utm values). Of the page you came from, it sends only the site’s domain and a category such as “search” or “social”.

In the app, PostHog copies a small set of summary tables from our database every few hours. They contain internal IDs, dates, counts, plan and status, which actions were used and whether they worked. They do not contain names, email addresses, winery names, notes, measurement values, prices or file contents. We use them to answer questions such as “how many wineries were active this week” and “which action fails most often”. The internal IDs are a code that only we can link back to a winery or a user.

In-app usage events: when you use the app, it records which screens you open (for example “batches list” or “a batch page”, never which batch), when an action is sent and accepted (for example “record measurement” or “transfer”, without any values), how saves made without internet turn out, when the scanner is opened, which buttons, menus and tabs you use, and which panels you open, how they were closed (for example saved, or closed without saving) and roughly how long they stayed open. Buttons and panels are recorded only by their fixed names in the app (for example “save button” or “add measurement panel”), never by what they show or which record is on screen. Each event carries your internal user ID, your winery’s internal ID, your role in the winery, the app language and the app version. It never carries names, emails, notes, amounts, record IDs or page addresses. Events go through our own relay (a small Cloudflare service on our own address), which removes your IP address and anything not on a fixed list, before they reach PostHog. Nothing is stored on your device for this. If you do not want your use to be counted, write to us and we will leave you or your winery out.

PostHog processes this data in the European Union under a data processing agreement with us.

What the app keeps on your device: the app uses only the cookies it needs to keep you signed in. It also keeps a copy of your winery’s data on your device, so the app works without internet. Anyone who uses the same device and browser profile may see that data. When you sign out, the app deletes this copy from the device. Actions you saved without internet stay on the device until they sync, so on a shared device, check that everything has synced before you sign out.

8. AI features

Some features use artificial intelligence (AI): “Fill using AI” in forms, and the AI importer that reads spreadsheets, PDFs and photos. These run only when you press the button or start an AI import. The content you choose is sent to the AI provider (section 6), and the result comes back to you as a suggestion. Nothing is added to your records until you check it and save it. Files you upload for an AI import are kept for 7 days (section 9). The provider may keep the content for a limited time, as its business terms allow, to detect abuse, and then deletes it.

We use the providers’ paid business services. Under their terms, the content we send is not used to train their models.

9. How long we keep information

We may keep information longer when the law requires it, or for an existing legal claim.

10. Marketing emails

We send marketing or newsletter emails only to people who agreed to receive them, or as section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982, otherwise allows. Every such email has an unsubscribe link, and you can also write to us. Unsubscribing does not stop service emails that you need in order to use your account.

11. Security

We protect information with measures that fit its sensitivity, following the Privacy Protection (Data Security) Regulations, 5777-2017. These include:

• encrypted connections;
• a database rule that keeps each winery’s records apart from every other winery’s;
• access for the fewest people possible;
• a log of actions that cannot be changed while the account is open;
• backups.

No system is completely safe. If a serious security incident happens, we will report it to the Privacy Protection Authority as the Data Security Regulations require. If it affects records we keep for a winery, we will tell that winery without delay. We will tell affected people when the Authority instructs us to, or sooner if they need to act to protect themselves.

12. Your rights

Under the Privacy Protection Law, 5741-1981, you may:

• see the information we hold about you (section 13 of the law);
• ask us to correct or delete information that is wrong, incomplete, unclear or out of date (section 14);
• ask to be removed from any marketing list (section 17F).

If we refuse a request to see or correct information, you may go to the Magistrates’ Court (section 15 of the law).

Beyond what the law requires, you may also ask us to close your account and delete the information about you, except what we must keep by law (section 9 of this policy). Records in your winery’s history that show you did an action stay with the winery, which controls them.

To make a request, write to [email protected] from the email address on your account, or tell us how to confirm that it is you. We let you see the information within 21 days of receiving your request, and answer a request to correct or delete information within 30 days. If you are not satisfied with our answer, you may complain to the Privacy Protection Authority (הרשות להגנת הפרטיות) at the Ministry of Justice.

For records your winery keeps about other people, see section 2: the request goes to the winery.

13. Age

Cellari is a service for businesses. It is not meant for anyone under 18, and we do not knowingly collect information about children.

14. Changes to this policy, and language

We may update this policy. If a change matters, we will tell account holders by email or in the app at least 30 days before it takes effect. The date at the top shows the latest version.

This policy is published in Hebrew and English. If they differ, the Hebrew version applies.

15. Contact

Questions or requests about privacy: [email protected] · phone and WhatsApp +972-55-256-3801.