Sub-processors

Last updated: 23 September 2026

This English text is provided for convenience. The binding version is the Hebrew one: הגרסה העברית

Activated Digital Ltd uses a limited number of external service providers — hereinafter “Sub-processors” — in order to operate irua.app. Each such provider is granted access to information only to the extent required for its role, and is subject to a contractual undertaking to keep the information confidential, to protect it and not to use it for any other purpose.

Full transparency: This is the complete list. If we add a new provider that is granted access to personal information, we update the list before the change takes effect, and notify active account holders of it by email.

1. Payment processing

Processing of paid tickets is carried out directly with the payment processor, without the credit card details passing through or being stored on irua.app’s servers. We receive back only the transaction result, a unique identifier and the last 4 digits of the card.

Payment processing providers — role, location and the information transferred
Provider	Role	Location	Information transferred
Upay	Credit card processing, payment management	Israel	Credit card details only — transmitted directly from the purchaser’s browser to the provider’s servers, without passing through us. Only an approval/decline, a transaction identifier and the last 4 digits come back to us.

2. WhatsApp sending provider

WhatsApp messages are sent through a single provider only, detailed below. The provider receives the recipient’s details solely for the purpose of actually delivering the message, and not for any other purpose.

WhatsApp message sending provider — status, location and the information transferred
Provider	Status	Location	Information transferred
WAGate — Meta WhatsApp Business	The sole sending provider	Israel	Recipient’s phone, message body, sender name

The organizer may connect its own business WhatsApp number in the settings screen; in the absence of such a connection, messages are sent through the service’s default number.

3. Operational communication with the subscriber

Operational communication providers — role, location and the information transferred
Provider	Role	Location	Information transferred
Activated Digital’s internal SMTP server	Sending operational emails — password reset, invoice, reports	Israel	The subscriber’s email address, the email body

4. Measurement and advertising on the marketing site

The providers in this section differ from every other entry in the list in three ways: they are not required to operate the service, they run only on the public marketing site and on the sign-up and login pages, and they are loaded only after you have given explicit consent — consent you can withdraw at any time. They have no access to the guest data you upload to the system.

Measurement and advertising providers — role, location and information transferred
Provider	Role	Location	Information transferred
Google Ireland Ltd. Google Tag Manager, Google Analytics 4, Google Ads	Measuring site traffic and where it comes from, and measuring campaign conversions	EU / USA	IP address, browser identifier, pages viewed, referral source
Meta Platforms Ireland Ltd. Meta Pixel	Conversion measurement for Facebook and Instagram campaigns, and audience building	Ireland / USA	Browser identifier, pages viewed, conversion events

These tools do not run inside the system itself — that is, in the areas behind login where guest data is managed. See also section 11 of the Privacy Policy.

5. What is not on the list

For the avoidance of doubt, the following is a list of things we do not use:

Any tracking or advertising tools inside the system itself — the dashboard, the guest lists, and every area behind login. The tools listed in section 4 are limited to the public marketing site and the entry pages.
Selling or renting personal information to any third party, under any circumstances.
Passing the guest data you upload to advertising platforms or to audience building.
Commercial AI providers for processing the subscriber’s content.
Third-party “Chat widget” services.

6. Changes to the list

This list may be updated when we add, remove or replace a provider. A material change — chiefly the addition of a new provider that is granted access to personal information — will be notified to active subscribers by email, at least 15 days before the change takes effect.

7. Questions and objection

A subscriber who does not agree to the addition of a future provider may contact us before the effective date and enquire about alternatives, and in cases where an alternative is not possible — request to terminate the engagement and receive a proportional refund for the unused portion of the service period.

For enquiries on this matter: info@activated.digital.