Privacy policy

This policy explains what personal information we collect on yta.co.il, why we need it, who receives it, how long we keep it and what your rights are. It applies to advertisers, to channel owners who use the site and to anyone who visits it. It follows the Israeli Protection of Privacy Law, 5741-1981, including Amendment No. 13, in force since August 2025, and the regulations made under it.

The site currently runs as a demo. Everything you enter, including signup, orders, briefs, logos and attachments, is kept only in your browser's local storage (localStorage) and is not sent to us or anyone else. Payment in the demo is simulated, and no emails are sent. In the full version of the service, information will be handled as described below.

1. Who is responsible for your information

The database owner and the party responsible for how the information is used is Shivuknet – Artur Kalandarov, 67 Zalman Shazar St., Tel Aviv, which operates YTA ("we"). For any privacy question or request, contact us by email at [email protected].

2. What we collect

2.1 Advertisers

• At signup: business name, contact person, phone, email, website (optional), business category and password. We keep the password only in one-way encrypted form (a hash) and cannot see it.
• When you accepted the terms of use and the advertiser terms, and whether and when you ticked the separate marketing-consent box.
• With an order: the channel, ad placement, package, preferred date, brief (what you advertise, the offer to viewers, target audience, call to action, description link, ad language and notes), your logo, and the price breakdown you paid.
• During production: script comments, timeline change requests and files you attached, approvals and the order history.
• Payment: you enter your payment details directly with the payment provider (a licensed payment provider). We never see or store the card number; we receive only a confirmation and a reference number. Invoices are issued by iCount.
• The public result: your business name, logo and link appear in the ad and in the video description, which are published on YouTube for all viewers. That is the purpose of the service.

2.2 Channel owners

• Name, email, password (kept as a hash), channel details, and the details needed to pay you, such as your bank account and transfer references.
• Channel data received through the YouTube API Services, as described in section 5.

2.3 Everyone who visits the site

• If you arrived from a link in a video description (for example yta.co.il/zeev), the link adds a parameter showing which channel you came from. It is kept in the browser's temporary storage (sessionStorage) and deleted when you close the tab.
• Technical data: like any web server, our hosting provider processes data such as IP address and browser type for security and operations.

3. Why we use it

• To open and run your account, and to review every advertiser before production starts, including enforcing the ban on political ads.
• To write the script, produce the ad, place it in videos, send you view reports and meet the guaranteed minimum views of your package.
• To collect payment, issue invoices, pay channel owners their share and meet our legal obligations, for example under tax law.
• To send you service messages about your order (script ready, draft, going live, reports and invoices).
• To send you marketing updates and offers, only if you gave separate consent for that.
• To protect the site against abuse.

We do not sell your information and do not use it for personalised advertising.

4. Legal basis, consent and marketing messages

You are under no legal obligation to give us your details; doing so is your choice. Without the signup, brief and payment details we can't open an account for you or carry out the order. The "website" field and the marketing-consent box are optional. We use the information to perform our agreement with you, on the basis of the consent you gave at signup, and to meet our legal obligations.

Marketing: we will send you advertising messages by email or WhatsApp only if you ticked the separate consent box at signup, as required by section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982. The box is not pre-ticked, and you can open an account without ticking it. You can withdraw your consent at any time: through the unsubscribe link in a message, by replying "unsubscribe", or by contacting us. Service messages about an existing order are not advertising.

5. YouTube API Services

The site uses Google's YouTube API Services to show real data about the channels in the catalog and to prepare view reports for advertisers. The data comes from channels we manage, with their owners' authorisation. Advertisers do not connect a Google account to the site. Use of the data is subject to the YouTube Terms of Service, and information processed by Google is subject to the Google Privacy Policy.

• What we access: channel details, the list of videos and their view counters, and aggregate YouTube Analytics data such as views, watch time, subscribers and general audience breakdowns. This is data about the channel and its videos, not about individual viewers.
• Why: to price integrations on real views, show the channel in the catalog and measure the guaranteed minimum views.
• Who we share it with: the aggregate data is shown to registered advertisers in the catalog and in reports. We do not share it with anyone else, except the service providers in section 6.
• Storage and deletion: we refresh the data under Google's rules. If a channel owner revokes access or leaves the catalog, we delete that channel's API data within 7 days, except what we need to show an advertiser that we met the guaranteed minimum or what the law requires us to keep.
• Channel owners can revoke access to their Google account at any time on the Google account security settings page.
• The site does not store cookies on your device for the purposes of the YouTube API Services.

6. Who receives your information

• Cloudflare: hosting for the site, the server, the database and files (logos and attachments).
• a licensed payment provider: payment processing. iCount: issuing invoices and sending them to you.
• Resend: sending service emails.
• Google: the YouTube API Services, as described in section 5.
• The owner of the channel where your ad will run: receives your business name and the order details needed to approve the advertiser and place the ad, not your contact or payment details.
• Our accountant and the tax authorities, as far as legal reporting requires.

We will not pass your information to anyone else unless the law or an order of a competent authority requires us to.

7. Transfers abroad

Some providers operate outside Israel, so your information may be stored or processed on servers abroad, for example in the United States or the European Union. We transfer information abroad only in line with the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and only to providers that have committed to keep the information safe and protect it to an appropriate standard.

8. How long we keep it

• Account and order details: while the account is active, and after it is closed we keep them for 7 years for tax records.
• Invoices and payment records: as long as the law requires, for example for tax.
• The ad itself, with your business name and logo, stays in the video for as long as the video is published on YouTube. That is how the service works, as set out in the advertiser terms.
• The parameter showing which channel you came from: until you close the tab.

9. How we protect it

The site runs over an encrypted connection (HTTPS), passwords are stored as hashes, and access to information is limited to us and to the providers that need it to deliver the service. We take reasonable security measures, as required by the Protection of Privacy (Data Security) Regulations, 5777-2017. No online service is completely immune, and if a security incident occurs we will act as the law requires, including notifying the Privacy Protection Authority and you where the law requires it.

10. Your rights

• To see the information we hold about you.
• To ask us to correct information that is wrong, incomplete, unclear or out of date.
• To ask us to delete your information, where there is no legal duty to keep it.
• To ask us to stop sending you marketing messages and to remove you from our mailing list, at any time.

To exercise these rights, contact us by email at [email protected]. We may ask for a few details to confirm the request comes from you. We will reply within 30 days. If you think your information has not been handled properly, you have the right to file a complaint with Israel's Privacy Protection Authority: Privacy Protection Authority website.

11. Cookies and browser storage

The site uses no analytics or advertising cookies and embeds no third-party tracking tools: there is no Google Analytics, Google Tag Manager or social media pixel. Fonts load from our own server. What the site does keep in your browser is needed for it to work:

• A sign-in cookie: after you sign in, a secure (HttpOnly) cookie keeps you signed in. It is deleted when you sign out or when it expires.
• An order draft: while you fill in an order, the details you have entered are kept in the browser's local storage (localStorage) so they are not lost if you reload the page. They are deleted after payment.
• The parameter showing which channel you came from, in the browser's temporary storage (sessionStorage).
• Our hosting provider may use strictly necessary technical cookies for security.

All of these are necessary to run the site and are not used for tracking, so the site has no cookie banner. If we ever add non-essential cookies, we will update this policy and ask for your consent in advance.

12. Children

The service is meant for businesses and channel owners, not for minors. If we learn that a minor has given us their details, we will delete them.

13. Changes to this policy

We may update this policy from time to time. The current version will always be on this page, with the date it was last updated. If we make a material change to how we use information you have already given us, we will let you know in advance.