Privacy Policy
Last updated: 31 July 2026
This Privacy Policy explains how Megatam ("Megatam", "we", "us") collects, uses, shares and protects personal data. It covers:
- our website at megatam.net, and our contact and support services;
- MegaOne, our content management platform at one.megatam.net;
- LumDIY, our self-hosted smart home hub and its Google Home integration. LumDIY has its own, more detailed privacy policy at lumdiy.com/privacy, which governs that product. Section 2 below summarises it; where the two differ, the LumDIY policy prevails for LumDIY.
It is written to meet the requirements of the EU General Data Protection Regulation (GDPR), the UK GDPR, and the Google Home Developer Policies.
1. Who we are
Megatam is the data controller responsible for the personal data described in this policy. You can reach us at:
- Email: [email protected]
- Phone: +972 76-540-4939
- Facebook: facebook.com/theMegatam
If you have any question about this policy or about how we handle your data, email [email protected] and we will respond within 30 days.
2. What personal data we collect
We only collect data you give us directly, plus a limited amount of technical data collected automatically.
Data you give us
- Contact form (available on every page of this site): your name, and your email address and/or phone number, together with the country code associated with the phone number you enter. At least one of email or phone is required so that we can reply to you.
- Free-form content: anything else you choose to tell us in your message, by email, by phone, or through the Facebook chat widget.
- Support tickets: if you use our technical support page, your ticket is submitted to our
separate support system hosted at
teamwork.megatam.com, which collects the details you enter there.
Data from LumDIY and its Google Home integration
LumDIY is a self-hosted hub: your device names, device states and the commands you issue are stored on your own hub, not on our servers. What we hold centrally is limited to:
- Account details: the email address you use to sign in.
- Hub identifier: your hub's serial number and the connection metadata for its encrypted tunnel, which is what makes remote access possible.
- Session and linking tokens: issued when you sign in or link Google Home. They expire automatically, and when you sign out or unlink.
- Operational logs: timestamps and error codes used to diagnose faults.
When you link Google Home, we relay smart home requests to your hub and report device state changes to Google's HomeGraph so that Google can show you the current state of your devices. Device information passes through our relay during remote access but is not retained by us. We never receive your Google account password, and Google does not send us audio recordings or voice transcripts — Google's handling of your voice data is governed by the Google Privacy Policy. You can disconnect the Google integration at any time.
The authoritative and more detailed policy for LumDIY is at lumdiy.com/privacy; LumDIY enquiries go to [email protected].
Data collected automatically
- Technical and server log data: IP address, browser type and version, operating system, referring page, pages viewed and timestamps. This is generated by our hosting and by Cloudflare, which serves and protects this site.
- Approximate location by country: derived from your IP address, used only to choose the default site language and the default country code in the phone field.
- Analytics data: only if you consent — see section 5.
We do not knowingly collect special category data (such as health, religious or political data), and we ask you not to include such information in messages you send us.
3. Why we use your data, and our legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Replying to your enquiry and preparing a quote or proposal | Name, email, phone, country, message content | Steps taken at your request prior to entering a contract — Art. 6(1)(b) |
| Providing and administering services you have engaged us for, including technical support | Contact details, ticket and correspondence content | Performance of a contract — Art. 6(1)(b) |
| Relaying the commands you issue through Google Home to your hub, and reporting device state to Google's HomeGraph | Account details, hub identifier, linking tokens (device data passes through in transit only) | Performance of a contract — Art. 6(1)(b) |
| Keeping the Google Home link working and diagnosing failures | Hub identifier, linking tokens, operational logs | Performance of a contract — Art. 6(1)(b), and our legitimate interest in a reliable service — Art. 6(1)(f) |
| Protecting the site against spam, abuse and attacks (reCAPTCHA, Cloudflare, server logs) | IP address, technical data, form submission signals | Our legitimate interest in keeping the site secure and usable — Art. 6(1)(f) |
| Showing the site in the right language and pre-filling your country dialling code | Country derived from IP address, session data | Our legitimate interest in providing a functioning website — Art. 6(1)(f) |
| Measuring how the site is used so we can improve it (Google Analytics) | Analytics identifiers, pages viewed, approximate location | Your consent — Art. 6(1)(a) |
| Providing the Facebook chat widget so you can message us directly | Data collected by Meta through its chat plugin | Your consent — Art. 6(1)(a) |
| Complying with legal, accounting and tax obligations | Transaction and correspondence records | Legal obligation — Art. 6(1)(c) |
4. How we do not use your data
We make the following commitments, and they apply in full to data obtained through the Google Home integration:
- We do not sell, rent or trade your personal data or your device data to anyone, and we do not transfer it to data brokers or information resellers.
- We do not use it for advertising, ad targeting, ad personalisation or ad measurement.
- We do not use it to train artificial intelligence or machine learning models.
- We do not use it to determine creditworthiness or for any lending decision.
- We do not use it for automated decision-making or profiling that produces legal effects for you.
- We do not access, collect or retain any data beyond what is needed to deliver the features described in this policy.
5. Cookies and similar technologies
Cookies are small files stored on your device. This section applies to our website; the Google Home integration does not use cookies. We divide them into two groups. Strictly necessary cookies are required for the site to work and are set without consent. Optional cookies — analytics and the Facebook chat widget — are not loaded at all until you accept them in the cookie banner. If you decline, or simply ignore the banner, those scripts are never requested.
| Cookie / technology | Set by | Purpose | Category |
|---|---|---|---|
megatam_cookie_consent |
Megatam | Remembers whether you accepted or declined optional cookies (stored for 12 months) | Strictly necessary |
laravel_session |
Megatam | Maintains your browsing session and language preference | Strictly necessary |
XSRF-TOKEN |
Megatam | Protects forms against cross-site request forgery | Strictly necessary |
| Google reCAPTCHA | Distinguishes humans from bots when the contact form is submitted | Strictly necessary (security) | |
| Accessibility widget preferences | Tadam | Remembers accessibility settings you choose (contrast, font size, etc.) | Strictly necessary (accessibility) |
_ga, _ga_* |
Google Analytics 4 | Distinguishes visitors and measures how the site is used | Optional — consent required |
| Facebook chat plugin cookies | Meta Platforms | Operates the chat widget and links the conversation to your Facebook account | Optional — consent required |
Changing your mind is easy. You can withdraw or give consent at any time using the button below. You can also delete cookies through your browser settings at any time.
6. Who we share your data with
We do not sell or rent personal data. We share it only with the service providers below, each of which processes it on our behalf or as an independent controller for the purpose described:
- Google — for the LumDIY Google Home integration, we relay your smart home requests and report device state changes to Google's HomeGraph so it can carry out and display your requests. We also use Google Analytics (only with your consent), reCAPTCHA (bot protection) and Google Fonts (typefaces served to your browser).
- Telegram — when you submit the website contact form, a notification containing your name and the contact details you provided is sent to our internal team chat so we can respond quickly. Data from LumDIY and its Google Home integration is not sent to Telegram.
- Meta Platforms — the Facebook Customer Chat widget, loaded only with your consent, and any conversation you start with us on Facebook.
- Cloudflare — content delivery, DNS and security protection for this site; it processes connection data including your IP address.
- ipapi.co — receives your IP address to determine your country so the phone field can pre-select the right dialling code.
- cdnjs (Cloudflare) — serves the phone-input library used by our forms.
- Tadam — provides the accessibility widget.
- Our hosting provider — stores the website, the MegaOne platform and the LumDIY relay and account service.
- Professional advisers and authorities — where we are legally required to disclose data, or where it is necessary to establish, exercise or defend legal claims.
7. International transfers
Some of the providers listed above are located outside the European Economic Area, primarily in the United States. Where personal data is transferred outside the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses, an applicable adequacy decision, or another lawful transfer mechanism offered by the provider, together with appropriate technical and organisational safeguards. You may request further detail on these safeguards by emailing [email protected].
8. How long we keep your data
- Enquiries submitted through the contact form — retained for up to 24 months from your last contact with us, then deleted, unless a business relationship begins.
- LumDIY account and hub-link information — retained while your account remains active.
- Session and Google Home linking tokens — expire automatically, and when you sign out or unlink. They are then deleted.
- Device names, states and commands — stored on your own hub, under your control. We do not retain them; they only pass through our relay in transit.
- Operational logs (timestamps and error codes) — retained for a limited period for troubleshooting and security, then deleted.
- Client and project records — retained for the duration of the engagement and for as long afterwards as required by applicable accounting, tax and limitation rules.
- Server and security logs — retained for a short period for security and troubleshooting.
- Analytics data — retained according to the retention period configured in Google Analytics.
When data is no longer needed for the purpose it was collected for, we delete it or irreversibly anonymise it.
9. How we protect your data
We use HTTPS/TLS encryption for all data in transit, including every request exchanged with Google. Access tokens are stored in encrypted form. Access to enquiry and device data is restricted to the people who need it to do their job, we apply security updates to our systems, and we use reCAPTCHA and Cloudflare to defend against abuse. We protect user and device data throughout its whole lifecycle, from collection through to deletion. No method of transmission or storage is completely secure, so we cannot guarantee absolute security — but we commit to notifying you and the relevant supervisory authority where a personal data breach requires it under Articles 33 and 34 GDPR.
10. Your rights
Under the GDPR you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete your data ("right to be forgotten"), where no overriding reason to keep it applies.
- Restriction — ask us to limit how we use your data while a concern is resolved.
- Portability — receive the data you provided to us in a structured, machine-readable format, or have it transmitted to another controller.
- Object — object to processing based on our legitimate interests, and to direct marketing at any time.
- Withdraw consent — where we rely on consent (analytics and the chat widget), withdraw it at any time using the cookie preferences button above. This does not affect processing carried out before you withdrew it.
- Complain — lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.
To exercise any of these rights, email [email protected]. We will respond within one month, and exercising your rights is free of charge. We may ask you to confirm your identity before we act on a request.
11. Deleting your data and unlinking Google Home
You are always in control. You can remove your data in any of the following ways:
- Unlink the Google Home integration. Open the Google Home app, select your linked LumDIY service and choose to unlink it. Unlinking immediately invalidates the linking tokens we hold and stops any further relaying of requests or state to Google.
- Delete the data on your hub. Because device names, states and commands live on your own hub, you remove them by deleting the devices, or by resetting the hub, yourself.
- Request deletion of your account information. Email [email protected] for LumDIY, or [email protected] for anything else, with the subject "Data deletion request". We will delete your personal data within 30 days and confirm in writing once it is done.
We will always honour a deletion request unless we are legally required to retain specific records (for example invoices for tax purposes), in which case we will tell you what has been retained and why.
12. Children
This website, the Google Home integration and our services are directed at businesses and adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact [email protected] and we will delete it.
13. External links and embedded services
Our site links to and embeds third-party services, including our support system at
teamwork.megatam.com and external platforms such as Facebook and Google Home. Once you interact
with those services, their own privacy policies apply to the data they collect. We are not responsible for the
privacy practices of websites we link to.
14. Changes to this policy
We may update this policy to reflect changes in our practices or in the law. The revision date at the top of this page always shows when it was last changed. If we make a material change, we will make it prominent on the site and, where required, notify you directly.
15. Contact us
Questions, requests or complaints about this policy or your personal data: [email protected] or +972 76-540-4939.