Privacy Policy

1. Who we are

The Service is operated by LIRAN AI תוכנות חכמות לעסקים ויחידים (“we”), of החוגה 2, רמת גן, Israel. For any privacy question or to exercise your rights, contact us at [email protected].

2. Controller and Processor roles

For information about your own account and staff, we act as the data controller. For the records that your firm enters about its own clients (for example client details and business/financial information), your firm is the controller and we act only as a processorthat stores and processes that data on your instructions and on your behalf. Your firm is solely responsible for having a lawful basis to process its clients’ data, for providing any required notices, and for its own compliance with applicable law.

3. Information we collect

• Account information: full name, email address, phone number, and organizational role, provided at sign-up or invitation.
• Organizational and operational data:your firm’s data, tasks, schedules, and the client records you manage in the Service.
• Communications: the content of internal team chat messages you send through the Service, and support/bug reports you submit.
• Technical and usage data: IP address, browser/device type, and basic usage and diagnostic information used for security and operation.
• Mobile application: if you enable notifications, we store a device token to deliver push notifications. We do not collect location.

4. How we use information, and legal bases

We process information to:

• provide, operate, secure, and maintain the Service (performance of a contract);
• authenticate users, manage permissions, and enforce tenant separation (legitimate interests and security);
• send operational messages and the notifications you request (performance of a contract / consent);
• improve the Service, prevent abuse, and diagnose problems (legitimate interests);
• comply with legal obligations.

We do not sell personal information and do not use it for third-party advertising.

5. Service providers and sub-processors

We rely on service providers that process data on our behalf under appropriate confidentiality and security commitments, including:

• Supabase — database, authentication, and storage.
• Vercel — application hosting and delivery.
• Resend — transactional email delivery.
• Google — optional sign-in via a Google account.
• Apple / Google — delivery of push notifications to the mobile app.

We disclose information to other parties only where required by law, to protect our rights, in connection with a corporate transaction, or with your consent.

6. International transfers

Data is hosted on secure cloud infrastructure located in the European Union. Where data is transferred across borders, we rely on appropriate safeguards as required by applicable law.

7. Security

We apply commercially reasonable technical and organizational measures, including encryption in transit (HTTPS), access controls, and strict database-level separation between organizations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Data retention

We retain information for as long as your account is active and as needed to provide the Service and meet legal obligations. Following account closure, data is deleted or anonymized within a reasonable period, except where retention is required by law.

9. Your rights

Under Israel’s Protection of Privacy Law, 5741-1981 (and, where applicable, other data-protection laws such as the GDPR), you may have the right to access, rectify, and request deletion of your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address in Section 1. Where we act as a processor for your firm’s client data, please direct such requests to your firm (the controller). You may also lodge a complaint with the Israeli Privacy Protection Authority.

10. Cookies

We use strictly necessary cookies to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies.

11. Push notifications

In the mobile app you may enable push notifications, delivered via Apple/Google using a device token. You can disable them at any time from your device settings or the Service’s notification settings.

12. Children

The Service is a business tool intended for use by professionals and is not directed to children. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this Policy from time to time; the “Last updated” date above reflects the latest version. Material changes will be communicated through the Service.

14. Contact

For any question about this Policy or your data, contact us at [email protected].