Policies

The full terms

Last updated: 3 November 2026

1. General

DeskKit is created and independently operated by Devorah Zadock, an exempt dealer (עוסק פטור). Use of the site is governed by Israeli law.

2. The digital products

DeskKit offers tools for creating documents and websites. Documents (resumes, quotes, invoices, decks and spreadsheets) are downloaded as files, and websites are published live through DeskKit, without downloading the site's files. We try to keep every tool's description accurate and up to date, and in the site builder the preview shows exactly what will be published.

3. License to use

The templates, builders and content on this site belong to DeskKit. Using the tools and templates grants you a personal and business-use license for the output you create, but not ownership of the underlying code or design for resale or redistribution as your own product.

4. Prices and payments

Most tools are free: editing and downloading resumes, decks, spreadsheets, quotes and invoices, and building and publishing a website. There are one-time paid extras (section 8) and one recurring monthly plan: Automate (section 14). The CRM is free to use. The price is always shown before you pay, and payment is processed via Gumroad.

5. Prohibited use

By using the site, you agree not to:

• Copy, reverse-engineer, or redistribute the templates' or builders' code/design as a standalone product.
• Use the tools to create misleading, illegal, or abusive content.
• Make automated or bulk use of the service (bots, scraping) in a way that harms its availability to other users.
• Attempt to bypass the site's sign-in or security mechanisms.

Breaching this section may lead to the account being restricted or suspended. A suspension happens only after a review and with a documented reason, and we'll try to let you know by email and give you a chance to respond — unless immediate action is needed to prevent harm, a security breach, or a violation of the law. Once the issue is resolved the account can be reinstated, and in any case you can contact us to get your data or ask for it to be deleted.

6. Service availability

We try to keep the site and tools continuously available, but we don't guarantee uninterrupted or fault-free availability. There may be maintenance windows, updates, or outages at our infrastructure providers (such as Supabase or Cloudflare) that are not fully within our control.

7. Liability

We try to keep the site running properly, but it isn't guaranteed to be free of faults; use of the site is at the user's own risk, and we are not liable for indirect damages arising from its use.

8. One-time paid extras

There are three one-time extras, with no subscription: removing the "Made with DeskKit" label from all resumes in your account (₪29), removing the label from all quotes and invoices in your account (₪49), and removing the "Built with DeskKit" badge from one website (₪199 per site). The extra is saved on your account and takes effect right after payment.

9. Cancellations and refunds

Under Israel's Consumer Protection Law, 1981, a transaction for digital content already delivered to the consumer cannot be canceled once delivered. This applies to the one-time paid extras. We stand behind what we sell: if something doesn't work or doesn't match its description, write to us and we'll fix it. The Automate plan is different: you can cancel it at any time with the "Cancel plan" button in the app, and cancelling with the button within 14 days of the first payment refunds that payment in full, automatically (section 14).

10. Deleting your account

You can request deletion of your account and all information stored on it at any time, via My account. Full detail on the deletion process appears in the privacy section below.

11. Changes to the service

We may change, add, or remove features, or discontinue a particular tool on the site at any time, based on development and maintenance needs. We may not always be able to give advance notice of minor changes, but we'll try to announce significant ones.

12. Changes to these terms

We may update these terms from time to time. Continued use of the site after an update constitutes acceptance of the updated terms. We recommend checking this page occasionally.

13. Intellectual property

All templates, builders, designs and content on the site are the intellectual property of DeskKit. Their use is permitted only as set out in the license section above.

14. DeskKit Automate — business automations

Automate lets you run automatic workflows for leads, quotes, invoices and clients, including emails to your clients sent in your business's name. You are responsible for the content of those messages and for having the right to contact the people who receive them: service messages about an enquiry, quote or invoice the client asked for are generally allowed; marketing messages (for example a referral request, reaching out again after a while, promotions) may count as advertising under Israel's Communications Law (section 30A) and similar laws elsewhere (such as CAN-SPAM, the GDPR and the ePrivacy rules), and require the recipient's prior consent. That is why such automations are off by default, and every email to a client includes an unsubscribe link — anyone who unsubscribes gets no more automatic emails from your business.

DeskKit does not guarantee that every email is delivered (spam filters, wrong addresses or email-provider limits). Marking an invoice "paid" is your own mark — DeskKit is not connected to any bank and does not verify payments. A quote approved through its link reflects the client's click and is not a digital signature. Use is subject to monthly limits according to your account type, and DeskKit may pause sending temporarily to keep the service healthy and protect the reputation of its sending addresses.

Monthly Automate plan: Automate is a recurring monthly subscription — Basic at ₪49 (the 5 sales automations) or Pro at ₪99 (every automation) a month, and the current price is always shown before you pay. Payment is handled by Gumroad, which also issues the receipt. The first 7 days are a free trial with no charge. About two days before it ends we email you a reminder with the price, the date of the first charge and a link to cancel; if you don't cancel, the plan starts and renews every month on the same date until you cancel. You can cancel at any time, at no cost and the same way you signed up (online): with the "Cancel plan" button in the app, through the manage-membership link in Gumroad's email, or by writing to us on the contact page. Cancelling stops all future charges at once — you won't be charged again, and your automations keep working until the end of the period already paid. If you cancel within 14 days of the first payment, it's refunded in full automatically, no reason needed, through the "Cancel plan" button in the app (once per account). We won't raise the price for existing subscribers without at least 30 days' notice by email, and you can cancel before the change takes effect. Your data (clients, tasks and notes) stays yours after cancelling, and you can export it to Excel at any time. For the Automate plan, this section prevails over any other provision of these terms about cancellations and refunds.

15. Websites built with DeskKit and the lead form

The content of a website you build — texts, images and contact details — is your responsibility, as is your site's privacy notice to its visitors. If you turn on the "Get in touch" form on your site, the details a visitor leaves are stored in your DeskKit account and are used only by you, to get back to them. Use them only to handle the enquiry, unless the visitor agreed to hear more from you.

16. Contact

A question, a problem with a product, or anything else — get in touch and we'll get back to you soon.

How we handle your information

What data is collected, and why

Using the tools (resumes, site building, price quotes, invoices) requires signing in with an email and password or a Google account, so your work is saved and accessible from another device too. Your email address, and content you actively save in the tools (resumes, business details for quotes, site projects) are stored for this purpose, and your email address is also used for our emails to you — see "Emails from DeskKit" below. We also keep basic account and usage data — customer number, sign-up date, last sign-in and activity, account type, and when items were created or saved in the tools — to run the service, provide support and prevent abuse. Contact details you leave in the contact form are used only to get back to you. If you send feedback or a rating while signed in, it is saved together with your account's email address, so we can understand the context and get back to you if needed. When a new account is opened, we also record the general source you came from — a category only (for example Google, WhatsApp, a link on a site built with DeskKit, or direct), never the full address, IP or location. It is used only for internal statistics about where new users come from, and is not shared or used for advertising. Your account also keeps your email language (Hebrew or English), so emails reach you in the right language; you can change it in "My account". If you ticked "DeskKit may show what I wrote" with a 5-star rating, what you wrote (and the name you chose to show, if any) may appear on the site after we approve it, with no email or other details; you can ask us to remove it at any time through the contact page.

Where it's stored — Supabase

Your data is stored with Supabase, an infrastructure provider that stores the data encrypted. Access to it is restricted, as described under "Who can access your data" below. This includes your account and the content saved in the tools. To protect against data loss, an encrypted backup copy of the data and of uploaded images is kept every night with Cloudflare (R2). Backups are kept for up to 6 months and then deleted automatically; data from a deleted account may remain in the encrypted backups until they are deleted at the end of that period.

Signing in with Google

Signing in with a Google account is an option alongside email and password — not required. Google is a third-party provider with its own privacy policy.

Other third-party providers

• Gumroad — processes payments for one-time extras and for the Automate plan.
• Resend — sends DeskKit's emails: the welcome email, account notices, updates to those subscribed, emails your automations send in your name, and notifications to us when a message or feedback arrives. Brevo may be used as an alternative email provider for the same purpose.
• Cloudflare — hosts the site and serves its pages to your browser, including sites built with DeskKit. On the DeskKit site itself (not on customers' sites) Cloudflare also collects anonymous visit statistics — no cookies and no tracking of people across sites.
• OpenAI — processes text in AI-powered tools (details in the section below).
• Cloudflare Turnstile — an automatic, invisible check on forms (sign-up, log-in, contact and feedback) that tells people from bots, to block spam and abuse. Not used for advertising.
• Vercel — when you connect your own domain to a site, the domain is registered and verified through Vercel.

Each of them has its own privacy policy.

Emails from DeskKit

When you open an account we send you a welcome email, and service notices about the account itself (such as email confirmation, password reset, or a change to the address of a site you published). Email updates (ideas that save work, new tools, and news about DeskKit's services, such as automations) go only to people who asked for them: by ticking the box on the sign-up page (it is not ticked in advance), on the card shown in the workspace, or with the switch in "My account". If you didn't ask, you won't get updates. We keep the time you gave consent and the way you gave it. Marketing emails are marked with the word "פרסומת" (advertisement) at the start of the subject. Every update has a link to unsubscribe, and you can also unsubscribe in "My account". It takes effect immediately. Your email address is never given to anyone else for advertising.

Cookies and local storage

The site itself does not use tracking/advertising cookies. A local working copy (such as a resume or a site you're still editing) is also saved in the browser's local storage (localStorage), alongside the account save — so editing stays fast and you don't accidentally lose work while it's syncing to the cloud. Until you sign up, the source category (where you came from, see "What data is collected, and why") is also kept only in the browser's local storage — no cookies. Google/Gumroad's own services may set their own cookies during the sign-in/payment process, per their own policies.

Deleting your information

You can request deletion of your account and all information stored on it at any time, via My account. Your information is deleted from our active systems; a copy may briefly remain in our infrastructure provider's (Supabase) automatic backups until it is replaced in their regular backup cycle — this is outside our direct control, and we cannot guarantee immediate, absolute deletion from every backup copy.

You can also ask to review the information stored about you or to correct inaccurate information, via the contact page or by the email address shown at the bottom of the page.

Logs and technical data

Like any web service, our infrastructure providers (mainly Supabase) may keep standard technical logs — such as IP address, browser type, and access times — for security, abuse prevention, and service maintenance, per their own privacy policies. We do not otherwise actively collect or use this data.

Who can access your data

Access to your data is restricted: you yourself, via your account; the site's owner; and staff members she has explicitly authorized for support and administration — each in a defined role (owner, admin, support), and only to the information and actions that role requires. The admin area shows account details only: email, name (if provided), customer number, sign-up and activity dates, account status and type, and a list of the items you saved (type, status and dates) — not the content of the documents themselves, such as resume content or the details of quotes and invoices. Every view of a customer's details and every admin action (for example a suspension, a password-reset email, a deletion or an export) is recorded in an admin log that cannot be edited: who did what, and when, plus the reason for sensitive actions. The log is kept for up to 24 months for security and oversight. Exporting customer lists and direct technical access to the database are reserved for the site's owner, for administration, maintenance and fixing problems. No third party receives access to your data beyond the providers listed above, each strictly for its own role.

Using your content for AI or advertising

We do not use content you create (resumes, sites, price quotes, etc.) for advertising, sale to third parties, or training our own AI models. In tools that use AI (such as the ATS checker or phrasing suggestions), the content you enter is sent to OpenAI solely to generate the response — as of this writing, OpenAI does not use data sent through its API to train its models, under its API privacy policy (a different policy than its public chat product).

Data about your clients (Automate and client management)

When you use client management or automations, you store details about your clients in DeskKit — name, phone, email, the message they left, deal amounts, tasks and notes. For that data you are the controller (the database owner) and DeskKit only processes it on your behalf and on your instructions: it is kept in your account only, used for nothing else, never sold, and never used by DeskKit for advertising. Automation activity logs (what was sent and when) are kept for up to 90 days and then deleted automatically; deleting a client or your account deletes the data at once, and copies in the encrypted backup are deleted within 6 months.

Emails sent on your behalf, and unsubscribing

Emails your automations send to your clients go out through our email provider (Resend, or Brevo as an alternative provider), in your business's name, and replies come straight to you. Every such email includes an unsubscribe link: whoever clicks it gets no more automatic emails from your business, and the opt-out is kept in your account. For recipients: if you received such an email and want your data deleted or corrected, contact the business that sent it. It is responsible for that data.

The lead form on websites built with DeskKit

On a site whose owner turned on the "Get in touch" form, what you enter in the form (name, phone, email and message) is sent to the site owner and stored in their DeskKit account so they can get back to you. To prevent spam, the form uses Cloudflare Turnstile's invisible check.

Users outside Israel (including the EU)

We process your data to provide the service you asked for (performance of a contract), to keep the service secure and prevent abuse (legitimate interests), and for marketing emails only with your consent, which you can withdraw at any time. You have the right to access your data, correct it, delete it, receive it in a common format, object to certain processing, and complain to the data-protection authority in your country. Our providers (Supabase, Cloudflare, Resend, Google, OpenAI, Gumroad) may store data on servers outside your country, including in the US and the EU, under the safeguards they provide (such as Standard Contractual Clauses). For any privacy request — use the contact page.