Privacy Notice

PERSONAL DATA WE COLLECT

We collect personal data that you provide to us (for example when you contact us), personal data we collect automatically when you use the Services, and personal data from third-party sources, as described below.

PERSONAL DATA YOU PROVIDE TO US DIRECTLY

We collect personal data that you provide to us:

• Your Communications with Us. We, and our service providers, collect information you communicate to us, such as through email, contact forms on our Services, or via other means of communication (such as WhatsApp, Signal or Telegram). Such information includes your contact details (name, email address, company name, job title). Please do not provide us with sensitive personal data as part of communicating with us.
• Transactions. If you subscribe to a paid account of the Services, or if you make purchases via the Services, we will receive your payment transaction details (such as your name, the amount paid, the date of payment, and other billing details) from the payment service provider that processed your payment. We do not receive or process the details of your credit card or other payment method that you use to pay for the Services.

PERSONAL DATA COLLECTED AUTOMATICALLY

We collect personal data automatically when you use the Site:

• Device Information. We collect personal data about your device, such as your Internet protocol (IP) address, browser type and version, operating system, device type, and location information (country and region level only, as derived from your IP address).
• Usage Information. We will collect personal data about your use of the Services, such as the pages that you visit, your usage of features on our Services, and session data. We also collect information about the AI agent conversation interactions, including message counts, session IDs, conversion events, funnels as product telemetry, and AI App interactions including prompts, responses, and usage patterns.
• Cookies and Other Technologies. We, as well as third parties, may use cookies, pixel tags, and other technologies to automatically collect personal data through your use of the Services. For more information about our use of such Technologies, please see our Cookies and other Technologies Notice.

PERSONAL DATA COLLECTED FROM THIRD PARTIES

We process personal data about you that we receive from third parties, including our business partners service providers, and publicly-available information. This information is limited to interactions within our Services, and AI agent conversation telemetry from our deployed agents.

HOW WE USE PERSONAL DATA

We use personal information related to you for the following purposes:

• to provide you with the Services, newsletters, or blog to which you may have registered.
• to process your queries and generate responses through our AI Apps or other chatbots provided by us as a controller.
• to contact you if you filled out a form requesting us to do so.
• to provide you with notifications related to your use of the Website, such as electronic newsletters, blogs, or promotional emails.
• to solicit your feedback and provide support.
• to maintain, develop, improve and optimize the Services.

We obey the law and expect you to do the same. If necessary, we will use personal information related to you for the following purposes:

• to enforce our terms, policies, and legal agreements
• to comply with court orders and warrants, and assist law enforcement agencies
• to collect debts, prevent fraud, misappropriation, infringements, identity thefts and any other misuse of our Services.
• to take any action in any legal dispute and proceeding.

We commit to process personal information related to you solely for the purposes described in this Policy.

HOW WE DISCLOSE PERSONAL DATA

We do not sell, rent, or lease personal data related to you.

Personal data related to you is shared with certain employees, external consultants, and our affiliates, who are all governed by this notice.

We also share personal data related to you with our vendors worldwide and third-party service providers that process your personal data on our behalf. Such vendors and service providers are contractually bound to keep personal data related to you confidential and appropriately secure.

A merger, acquisition, or any other structural change will require us to transfer personal data related to you to another entity as part of the structural change, provided that the receiving entity will comply with this notice.

We will share personal data related to you only subject to the terms of this notice or subject to your prior consent.

We will need to disclose personal data related to you in response to lawful requests by public authorities, including national security or law enforcement requirements.

YOUR PRIVACY CHOICES

We will give you choices about the ways we use and share personal data about you, and we will respect the choices you make.

Email Communications. If you receive an unwanted email from us, you can use the unsubscribe functionality to opt out of receiving future emails. Note that you will continue to receive transaction-related emails. We may also send you certain non-promotional communications regarding us and the Services, and you will not be able to opt out of those communications (e.g., communications regarding the Services or updates to this notice).

Deletion of Account. You can delete your service account at any time, or by contacting us using the information set forth in "Contact Us" below and requesting that we delete it.

Do Not Track. Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

Cookies & Other Tracking Technologies. Like many websites, we use "cookies" and we obtain information when your browser accesses our Services. For further information about cookies, please see our Cookies and Similar Tracking Technologies Notice. We also receive information about your online activity from third-party analytics services when you use the Services. For more information, please see the chapter titled "Aggregated and Analytical Information" section. Examples of such information we collect and analyze include the Internet Protocol (IP) address, login, e-mail address, device and connection information such as browser type, version, time zone setting, browser plug-in types and versions, operating system, and platform.

Please note you must separately opt out in each browser and on each device.

ACCESSING & CORRECTING PERSONAL DATA

If you find that the information on your account is inaccurate, incomplete or not up-to-date, please contact us at: privacy@bazak.ai and provide us with the necessary information to correct it.

At any time, you can contact us at: privacy@bazak.ai and request to access the personal data that we keep about you. We will ask you to provide us certain credentials to make sure that you are who you claim to be and to as required under applicable law, we will make good-faith efforts to locate the personal data that you request to access and provide you with a copy.

Following your review of the personal data you can request to correct, amend or delete personal data, if it is inaccurate, incomplete or not up-to-date, or if you believe that our processing of the personal data is in violation of applicable law.

We will use discretion and due care to redact personal data related to others from the information we will make available to you. Where you believe that content containing Personal data was uploaded to our Services by a third-party user, please contact such user who uploaded that content with a request to remove Personal data.

Note that depending on the laws and regulations that apply to our processing of personal data about you, you may be entitled to additional rights with respect to our processing of personal data about you. Please see the chapter entitled Processing Under Specific Laws.

EXERCISING YOUR RIGHTS

Note that when you send us a request to exercise your rights, either under our General Privacy Notice or the sections applicable to our Processing Under Specific Laws, we will need to authenticate your identity and location.

We will ask you to provide us credentials to make sure that you are who you claim to be and will further ask you questions to understand the nature and scope of your request.

If we need to delete personal data following your request, it will take some time until we completely delete residual copies of Personal data from our active servers and from our backup systems.

If you have any concerns about the way we process personal data, please contact us at: privacy@bazak.ai. We will look into your inquiry and make good-faith efforts to respond promptly.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

We store and process personal data, including personal data, either directly or using third parties such as data hosting service providers, in the European Economic Area, the United States, and in other regions to support the Services. The laws of the territories where personal data will be stored and processed can differ from the laws of the jurisdiction in which you live.

RETENTION OF PERSONAL DATA

We store the personal data we collect as described in this notice for as long as you use the Services, or as long as necessary to fulfil the purpose(s) for which it was collected, or as long as necessary to pursue our business purposes.

To determine the appropriate retention period for personal data, we may consider applicable legal requirements; the amount, nature, and sensitivity of the personal data; certain risk factors; the purposes for which we process personal data about you; and whether we can achieve those purposes through other means.

PERSONAL DATA ABOUT CHILDREN

The Services is not directed to, and may not be used by, users under 18, and we do not knowingly collect personal data from children under 18 (or other age as required by local law outside the United States). If you are a parent or guardian and believe your child has uploaded personal data to the Services in violation of applicable law, you may contact us as described in "Contact Us" below.

UPDATES TO THIS PRIVACY NOTICE

We may update this notice from time to time in our sole discretion.

If the updates have minor, if any, consequences, they will take effect 14 days after we post a notice on the Services. Substantial changes will be effective 30 days after we initially post the notice.

If the new notice materially reduces the protection of your privacy rights under the then-existing notice, you can choose not to accept it and stop using our Services. Continuing to use the Services after the new notice takes effect means that you agree to the new notice. Note that if we need to adapt the notice to legal requirements, the new notice will become effective immediately or as required by law.

CONTACT US

We – Bazak AI Innovation Ltd. With registered offices at Schiele 6, Tel Aviv – Jaffa – are the controller of personal data processed under this notice.

If you have any questions about our privacy practices or this notice or to exercise your choices and rights as detailed in this notice, please contact us at: privacy@bazak.ai.

AGGREGATED AND ANALYTICAL INFORMATION

As detailed above, we use standard analytics tools. The privacy practices of these tools are subject to their own privacy policies, and they use their own cookies to provide their service. For further information about cookies, please see our Cookies and Similar Tracking Technologies Notice.

We use the standard analytics tools to learn how you and other users use our Services and to support its related activities and operations. The privacy practices of these tools are subject to their own privacy policies.

We use anonymous, statistical, or aggregated information and will share it with our partners for legitimate business purposes. It has no effect on your privacy because there is no reasonable way to extract data from the aggregated information that we or others can associate specifically with you.

INFORMATION SECURITY

We implement systems, applications, and procedures to secure personal information related to you to minimize the risk of theft, damage, loss of information, or unauthorized access or use of information.

DISPUTE RESOLUTION

Contact us at: privacy@bazak.ai for requests and complaints. We will make good-faith efforts to resolve any existing or potential dispute with you.

PROCESSING PERSONAL DATA UNDER EEA PRIVACY LAWS

If EU data protection laws apply to the processing of personal data about you by us, then the following terms apply in addition to the general terms of our General Privacy Notice.

Lawful Grounds for Processing

Where we process personal data about you as a data controller, the processing is based on the following lawful grounds:

• We process your account and payment details to perform the contract with you.
• We will process personal data to comply with a legal obligation and to protect your and others' vital interests.

We will further rely on our legitimate interests, which we believe are not overridden by your fundamental rights and freedoms, for the following purposes:

• Communications with you, including direct marketing where you are our client or a user of our client, or where you contact us through our Services or otherwise.
• Cyber security.
• Support, customer relations, service operations.
• Enhancements and improvements to yours and other users' experience with the Services.
• Fraud detection and misuse of the Services.

You have the right to object to processing of your personal data that is based on our legitimate interests.

All processing of personal data which are not based on the lawful grounds indicated below, are based on your consent.

Special Categories of Personal Data

We do not knowingly process special categories of personal data, and we require you not to provide us with any such data.

International Transfers

As detailed under Our General Privacy Notice, we store and process information, including personal data in the European Economic Area, the United States, and in other regions to support the Services.

If you are located in the European Economic Area (EEA), note that some of these territories have not been deemed to provide an adequate level of data protection equivalent to the EU. In such case, we will use appropriate safeguards, in particular, by way of entering into the European Union Standard Contractual Clauses as amended from time to time with the relevant recipients, or by adhering to equivalent data transfer regulations to protect the security and confidentiality of such personal data.

You can obtain a copy of the suitable safeguards that we use when transferring personal data as described above or receive further information about relevant data transfers by submitting your request to privacy@bazak.ai.

Your rights under EEA Privacy Laws

In addition to your rights detailed under Our General Privacy Notice other sections of this notice, you have the following rights:

• Withdraw Consent. At any time, contact us if you want to withdraw your consent to the processing of personal data. Exercising this right will not affect the lawfulness of processing based on consent before its withdrawal.
• Deletion or Restriction. Request to delete or restrict access to personal data. We will review your request and use our discretion, pursuant to the provisions of the applicable law, to reach a decision about your request and respond to it.

If you exercise one (or more) of the above-mentioned rights, in accordance with the provisions of applicable law, you may request to be informed that third parties that hold personal data, in accordance with this notice, will act accordingly.

• Portability. You may ask to transfer personal data in accordance with your right to data portability.
• Object. You may object to the processing of personal data for direct marketing purposes. Additional information about this right is available under the Your Privacy Choices chapter in this notice.
• Automated Decision Making. You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affecting you.

Complaints

Contact Us. You can file a compliant with us if you believe that our processing of personal data about you has violated applicable privacy law, your privacy rights, or our obligations to you under this notice. You may submit your complaint by contacting us at privacy@bazak.ai.

Contact the Regulator. You have a right to lodge a complaint with a data protection supervisory authority of your habitual residence, place of work or of an alleged infringement of the GDPR.

A summary and further details about your rights under EU data protection laws, is available on the EU Commission's website at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.

PROCESSING PERSONAL DATA UNDER US PRIVACY LAWS

If US consumer privacy laws apply to the processing of personal data about you by us, then the following terms apply in addition to the terms of our General Privacy Notice.

Privacy Notice for US Residents

This section applies solely to all visitors, users, and others who reside in the US. This section supersedes any contradicting provisions under the other sections of this notice. Any terms defined under US Privacy Laws have the same meaning when used in this section, and as used under this section – "personal data" includes Personal data.

Overview of Personal Data Collected, Disclosed, Sold, and Shared

Categories of Personal Data Collected

• Identifiers and personal data categories are listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
• Internet or other electronic network activity information, including, but not limited to, browsing history, search history, and information regarding your interaction with the Services.
• Commercial information, including products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
• Inferences drawn from any of the above-mentioned information.
• Geolocation data (not precise – up to city level).

Categories of Sensitive Personal Data Processed. Our Services are not intended to process sensitive personal data (within the meaning of US Privacy Laws). The only category of sensitive personal data we collect and process is your service account log-in, and we only process it for the following purposes:

• Provide you with our Services.
• Protect the Services against malicious, deceptive, fraudulent, or illegal actions, and to prevent, detect, and investigate security incidents that may compromise the Services.

We do not knowingly collect any other category of sensitive personal data about you, or allow others to collect such data, and we require you not to provide it to us.

Sources of Personal Data. As further detailed above, we obtain the categories of personal data related to you listed above from the following categories of sources:

• Directly and indirectly from you and your activity on the Services.
• We automatically collect personal data from your device and browser when you use our Services, including by using Cookie and similar tracking technologies.
• Third parties, such as reliable service providers.

Purposes of Processing. As further detailed under Our General Privacy Notice, we use and disclose the personal data that we collect for business and commercial purposes detailed under the How We Use Personal Data chapter in Our General Privacy Notice.

Consumer under the age of 16. Bazak.ai does not sell, disclose or otherwise use personal data for any purpose other than providing, operating, supporting and securing our Services. As such, we have no actual knowledge of any "sale" or "sharing" for "cross-context behavioral advertising" of personal data of minors under 16 years of age.

Your Rights

In addition to other rights detailed under Our General Privacy Notice, you have the following rights as a U.S. resident:

Access to specific personal data and data portability rights

In addition to the general right of access detailed under Our General Privacy Notice, you have the right to request that we disclose certain information to you about our collection and use of personal data about you over the past 12 months preceding your request.

Upon verification of your request, we will disclose the following information to you:

• The categories of personal data we collected about you;
• The categories of sources for the personal data we collected about you;
• Our business or commercial purpose for collecting that personal data;
• The categories of personal data that we disclosed for a business purpose, and the categories of third parties with whom we disclosed that particular category of personal data;
• The specific pieces of personal data that we collected about you; and,
• If we disclose personal data about you for a business purpose, we will provide you with a list which will identify the personal data categories that each category of recipient obtained.

Deletion rights. You have the right to request that we delete any personal data about you. Upon confirmation of your request, we will delete personal data about you from our records, unless an exception applies.

Opt-out of Selling or Sharing

As detailed in our General Privacy Notice, we respect your privacy and do not sell or share personal data or personal information about you, within the meaning of the terms personal data or personal information under applicable U.S. State Consumer Privacy Laws.

For the purpose of this chapter: "selling" means disclosing personal information to a third party for monetary or other valuable consideration; and "sharing" means disclosing personal information to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration.

We do collaborate and engage with third parties for various purposes, such as analytics, marketing automation, and enhancing user experience, and for these purposes we allow them to collect personal information on our website.

The information shared with these third parties helps us deliver tailored content and services to you and enables our partners to provide more relevant content and advertisements.

These third parties do not pay us for collecting such information, but the right granted to them to collect personal information on our website may be considered by U.S. regulators as a form of disclosure for sale, sharing for cross-context behavioral advertising, or targeted advertising.

Under some U.S. State Consumer Privacy Laws, you may have the right to opt-out of the selling or sharing of personal information about you, or to otherwise opt-out of the use of personal information about you for the purpose of cross-context or targeted advertising, as the case may be.

To exercise this right, you may:

• Use our "Do Not Sell My Personal Information" link available on our website.
• Contact us at privacy@bazak.ai with your request.

At any time, you can opt out of the collection of personal data by such service providers by contacting us at privacy@bazak.ai.

Non-discrimination. You also have a right not to be discriminated against for exercising your rights under applicable United States privacy laws.

Limit the Use of Sensitive Personal Data. We do not provide you with an option to limit our use of such sensitive personal data, because (as detailed above) we already use it solely for permitted purposes under applicable U.S. Privacy Laws. If you have further questions about our use of sensitive personal data about you, please contact us at privacy@bazak.ai.

Retention

Please see Retention of Personal Data under Our General Privacy Notice.