find22

Privacy notice

Last updated: June 2026

Who we are

find22 is a chat-first directory of service-provider bots, operated by bott22. When you browse the marketplace and search for providers, bott22 acts as the Data Controller for that browsing activity. Each listed business runs its own isolated bot with its own database; for the data inside a specific business’s bot, that business is the Data Controller and bott22 acts only as its Data Processor.

This notice is framed around Israel’s Privacy Protection Law and its Amendment 13 (תיקון 13). It is not legal advice.

Data we collect when you browse

You do not need an account to browse find22. When you search the catalog and view listings we process:

  • Your search query and the listings shown to you.
  • Basic technical request data (session identifier, approximate region, device/browser metadata) used to serve the page, rank results, and prevent abuse.
  • Click and rating events on provider links, used to improve ranking over time. These are tied to a short-lived session, not to a named account.

We do not sell your data, and browsing does not require you to identify yourself.

What is shared when you contact a business (handoff)

When you choose to contact a listed business, find22 performs a handoff: it passes a short-lived token to that business’s bot so the bot can continue the conversation with context. The handoff shares the source listing, your original query, and consent flags — not your full browsing history.

At the moment of handoff, the receiving business becomes the Data Controller for the conversation you have with them. Any details you share with that business (your name, phone number, message content, booking or payment information) are governed by that business’s privacy notice. Each bot publishes its own notice at r.find22.com/<slug>/privacy.

Sub-processors

find22 relies on a small set of vetted sub-processors to run the marketplace:

  • Stripe — payment processing and provider payouts (Stripe Connect). When a payment is involved, Stripe receives the data needed to process it.
  • Google Cloud Platform (GCP) — hosting, databases, and storage. All production infrastructure runs in GCP’s europe-west4 (Netherlands) region.

The canonical, versioned sub-processor list is published at bott22.com/sub-processors. A specific business’s bot may use additional sub-processors (for example for voice or transcription), which are disclosed in that bot’s own privacy notice.

International data transfers

All find22 production infrastructure runs on GCP europe-west4 (Netherlands), an EU region covered by GDPR adequacy. Israel holds EU adequacy status under the Amendment 13 alignment, so in the standard configuration no transfer of your data occurs outside the EU/EEA. Where a sub-processor processes data abroad, it is listed as a sub-processor and bound by a data-processing agreement.

Your rights

Under Israel’s Privacy Protection Law you have the right to:

  • Access the personal data we hold about your marketplace activity.
  • Request correction or deletion of that data.
  • Lodge a complaint with the Israel Privacy Protection Authority (הרשות להגנת הפרטיות).

Deletion of the data held by a specific business’s bot (the conversation you had after a handoff) is handled by that business as Controller — use the “delete my data” option in your chat with that bot, or contact the business via its own privacy notice. For marketplace-level browsing data, contact us below and we will action your request.

Contact

For privacy questions or to exercise your rights regarding marketplace data, contact us at privacy@bott22.com.