Privacy Policy

1. Information We Collect

We collect the following categories of information:

a) Information You Provide Directly

• Contact Data: Name, email address, phone number, and message content when you submit a contact form or inquiry
• Service Data: Project requirements, business information, and communication history related to our services
• Marketing Consent: Your explicit opt-in preference for receiving marketing communications

b) Information Collected Automatically

• Usage Data: Pages visited, time spent on pages, referring URLs, and interaction patterns (via Google Analytics)
• Device Data: Browser type, operating system, screen resolution, and language preference
• Cookies: Essential, analytics, and functional cookies as described in our Cookie Policy

2. How We Use Your Information

We process your information based on the following legal bases (as required by GDPR):

3. Data Sharing & Third Parties

We do not sell, rent, or trade your personal data. We may share data with:

• Infrastructure Providers: Cloud hosting and database services for secure data storage
• Analytics Providers: Google Analytics for anonymized website usage statistics (only with your consent)
• Communication Tools: Email service providers to deliver responses and marketing (if opted in)
• Legal Authorities: When required by law, court order, or to protect our legal rights

All third-party providers are contractually bound to protect your data and process it only as instructed.

4. Your Rights Under GDPR

If you are located in the European Economic Area (EEA), the UK, or Switzerland, you have the following rights under the General Data Protection Regulation:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure ("Right to Be Forgotten"): Request deletion of your personal data, subject to legal retention obligations
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format
• Right to Restrict Processing: Request that we limit how we process your data
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right to Withdraw Consent: Withdraw consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us at hello@barak-ai.co.il. We will respond within 30 days.

5. Your Rights Under CCPA/CPRA

If you are a California resident, the California Consumer Privacy Act (as amended by CPRA, effective 2023 and updated through 2026) grants you the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected, the sources, the business purpose, and the categories of third parties with whom it is shared
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as defined under CCPA/CPRA
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information beyond what is necessary
• Right Regarding Automated Decision-Making: Under the 2026 CPRA regulations, you have the right to know about, and opt out of, automated decision-making technologies. Barak AI does not use automated decision-making that produces legal or similarly significant effects on individuals. See Section 8 for details on our AI usage

To submit a verifiable consumer request, contact us at hello@barak-ai.co.il.

6. International Data Transfers

Barak AI is based in Israel. The European Commission has recognized Israel as providing an adequate level of data protection (EU Adequacy Decision), meaning transfers of personal data from the EEA to Israel are permitted without additional safeguards.

Where data is processed by third-party providers outside of Israel, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or equivalent mechanisms.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes described in this policy:

• Contact form submissions: Retained for up to 3 years or until you request deletion
• Marketing consent records: Retained as long as consent is valid, plus 3 years for legal evidence
• Analytics data: Anonymized and aggregated; individual data is not retained beyond 26 months
• Service-related data: Retained for the duration of the business relationship plus any legally required period

8. AI & Automated Processing

Barak AI develops AI-powered systems for its clients. Regarding our own website and services:

• Our website may use AI models for automated content generation (blog articles) and chatbot interactions
• We do not use AI for automated decision-making that produces legal, financial, or similarly significant effects on individuals
• AI-generated content is reviewed and curated by our team
• In compliance with the EU AI Act (2026), we maintain transparency about AI usage in our systems and clearly identify AI-generated outputs where applicable

For AI systems we build for clients, data processing terms are governed by individual service agreements.

9. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately for deletion.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact & Data Protection

For any privacy-related questions, data subject requests, or complaints:

• Email: hello@barak-ai.co.il
• Address: Barak AI, Or Yehuda, Israel

If you are in the EEA and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.