Who we are
Natav is software that sorts a business's incoming calls and emails into that business's own monday.com boards. It is made by Alon Schneidman, operating as Natav, in Israel. Contact: support@natav.ai. Natav is offered to businesses only.
The short version
- Natav runs inside each customer's own accounts: their Cloudflare account, their Google or Microsoft mailbox, their monday.com account and their own Google AI key, on a billed project. What it processes stays there.
- We, the makers of Natav, do not receive or store our customers' emails, calls or monday data.
- Natav reads email read-only. It never sends, deletes or changes email.
1. Who is responsible for what
The business that installs Natav controls the data inside its installation (its controller, under Israeli law). Natav's software processes it on the business's behalf, and we, the makers, are at most a holder working under our agreement with that business. For the small amount of data we hold ourselves (section 7), we are the controller.
2. What a Natav installation processes, and where
Inside the business's own Cloudflare account and database (the region chosen at installation; for Israel, Cloudflare's Eastern Europe region):
- Emails it reads from the connected mailboxes: the message text, the sender, the subject, and the names and sizes of attachments, never the attachments themselves.
- Calls from the business's phone provider: numbers, times, the agent and outcome, the provider's transcript and summary, and a link to the recording your provider keeps. Natav never stores the recording.
- The decisions Natav made and the answers people gave it (which item a message went to, a correction, a "this is wrong"). These hold ids, labels and codes, no message content.
- What your team does on the chosen boards: Natav reads the chosen boards: their items, groups and the columns you mapped, and the text of updates your team writes on those items, to see what the team did with each message. It keeps the items and columns, sealed, for the retention period; it keeps no update text.
- Operating records: errors by fixed code, job counts, and monday change events by id.
How long. Message content and call records (and the AI answers about them) are kept 90 days by default; the business can set a different period in Natav's settings, after which they are deleted automatically. Decisions, corrections and answers (no content) are kept until Natav is removed. Operating records are kept one year. When the business removes Natav, everything is deleted 7 days after removal (a week to undo the removal), and never later than 10 days. Cloudflare's built-in database history keeps copies for up to 30 days after deletion, for recovery, and they are then gone.
Security. Content, originals and senders are encrypted (AES-256-GCM) with a key kept as a secret in the business's own Cloudflare account. Every connection is HTTPS.
3. The services Natav uses, and why
All of these are the business's own accounts, connected by the business:
| Service | Why |
|---|---|
| Cloudflare (Workers, D1 database) | Runs the business's installation and stores its data, in the business's account. |
| Google Gemini (Google's Generative Language API), on the business's own Google account and key, on a billed Google Cloud project, which Natav requires; the free tier isn't allowed | Decides where each message or call belongs. What is sent: the message text or call transcript, and the names of the boards and items needed to decide. Google handles it under its paid-service terms: it doesn't use it to improve its products, and keeps it for a limited time to detect misuse. |
| Gmail API (the business's own Google app) or Microsoft Graph (the business's own Microsoft app) | Reads the connected mailboxes, read-only. |
| monday.com API | Reads the chosen boards and the updates written on them, and writes the business's items and updates. |
| The business's phone provider | Sends call details and transcripts to the installation. |
Our own services, for section 7's data only: Google Workspace, for natav.ai's mail (Google says it keeps data in its data centers around the world, in Asia, Europe, North America and South America); and Cloudflare, Inc., of the United States, which hosts natav.ai (Cloudflare says it primarily stores information in the United States and the European Economic Area). There are no others.
4. What we, the makers, hold, and how we reach an installation
- Everything inside your installation can be read by your own account administrators. Natav does not read it. [to confirm]
- Natav holds no login, key or token to your installation. A small updater inside your own account fetches Natav's updates by itself; you can switch it off in your Cloudflare account at any time, and the installation then stops receiving updates. [to confirm]
- Natav's screen inside your monday runs through a monday app that Natav creates for you in its own monday account, as monday requires for an app installed by link. Natav keeps that app's secrets to check that requests come from your monday. They open nothing in your Cloudflare account or your mailboxes. [to confirm]
- Natav updates the software in your installation; updates come only from Natav. [to confirm]
- Natav may report operating numbers to us (whether an installation is running, versions, counts, errors by code). It never reports content.
- We contact the people who set Natav up about their installation (support, security, billing).
5. Natav setup (the Google sign-in an administrator may choose once)
This section describes, separately from everything else, the only Google user data the "Natav setup" app touches.
"Natav setup" helps a Google Workspace administrator connect a mailbox. If they choose it, they sign in with Google once, and Natav setup creates one empty Google Cloud project in their own organization and turns on the Gmail API in that project, so that the business's own Google app (which the administrator then creates there) can read the mailbox, read-only.
It asks Google for exactly two permissions: cloudplatformprojects (to create the project) and service.management (to turn on the Gmail API). It does not ask for the user's identity or email address.
- No email, files, contacts or profile. It requests no permission to read them and does not learn who signed in.
- The access Google grants lives only in the administrator's browser, inside Natav's setup window, for a few minutes. It is never sent to our servers or to the installation, never stored, and it is revoked at the end.
- The project it creates belongs to the business, in its organization. Its ID is kept in the business's own installation so the next steps can link to it. The business can delete the project at any time in Google Cloud.
- Sharing: none.
Natav's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.
6. This website
natav.ai uses no cookies, analytics or trackers, and loads nothing from other sites.
7. The data we, the makers, hold, and your rights
We hold only the contact details of the people who set Natav up for a business, our correspondence with them, and operating numbers per installation.
- Voluntary. Giving us these details is voluntary; without them we cannot set Natav up for you or answer you.
- Purpose. To set up, support and bill for Natav.
- Where, and who receives it. In our Google Workspace mailbox and our records (the providers in section 3's last line). We do not sell it or pass it to anyone else.
- The controller. Alon Schneidman, operating as Natav, support@natav.ai.
- Your rights. You may ask to see what we hold about you, to correct it, to delete it, or to receive a copy (export), by writing to support@natav.ai.
For data inside a business's Natav installation, the business decides: ask the business (your employer, or the company you contacted). The business sees it in Natav's activity page and deletes all of it by removing Natav (section 2). Message copies are deleted after 90 days in any case. If you write to us, we will point you to the business.
The law that applies: the law of Israel, including its Protection of Privacy Law.
8. Changes
We update this page when Natav changes and change the date at the top. A material change is announced to the businesses that use Natav.
Contact: support@natav.ai