Privacy Policy

Account Information: Name, email address, phone number, company name, and billing details when you create an account.

Usage Data: Pages visited, features used, session duration, browser type, device information, and IP address.

Business Data: CRM records, contacts, leads, invoices, tasks, and other business data you input into the platform.

AI Interactions: Conversations with our AI agents, including prompts, responses, and tool usage logs.

Cookies & Tracking: We use cookies and similar technologies as described in our Cookie Policy.

We use the information we collect to:

• Provide, maintain, and improve the KalOps.ai platform
• Process transactions and send related information
• Power our AI agents to deliver intelligent business insights
• Send technical notices, updates, security alerts, and support messages
• Respond to your comments, questions, and customer service requests
• Monitor and analyze usage trends to improve user experience
• Detect, prevent, and address technical issues and security threats

We take data security seriously and implement industry-standard measures:

• Encryption: All data is encrypted at rest using AES-256-GCM and in transit using TLS 1.3
• Row-Level Security: PostgreSQL RLS policies enforce strict tenant isolation across all 229 tenant-scoped tables
• Data Residency: Primary data storage is located in Israeli data centers, ensuring compliance with local data sovereignty requirements
• Access Controls: Role-based access control (RBAC) with multi-factor authentication support
• API Key Protection: All API keys and secrets are encrypted at rest using AES-256-GCM
• Audit Logging: All data access and modifications are logged for compliance and security purposes

We may share limited data with trusted third-party providers:

• AI Providers: Anthropic (Claude), OpenAI (GPT), and Google (Gemini) for AI agent processing. Prompts are sent to these providers but are not used for model training.
• Payment Processing: Payment gateway providers to process subscription payments
• Communication: WhatsApp Business API, Telegram, and email service providers for notifications
• Infrastructure: Cloud hosting and CDN providers for platform delivery

We do not sell your personal data to any third party.

Under the EU General Data Protection Regulation (GDPR) and the Israeli Privacy Protection Law, 5741-1981 (חוק הגנת הפרטיות, התשמ"א-1981), you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Data Portability: Request your data in a structured, machine-readable format
• Restriction: Request limitation of processing of your personal data
• Objection: Object to processing of your personal data for specific purposes
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at privacy@kalops.io or through the GDPR management tools in your account settings.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active and for 30 days after deletion request
• Business Data: Retained while your account is active; exported and purged upon account closure
• Usage Logs: Retained for 90 days for analytics and security purposes
• AI Conversation Logs: Retained for 12 months unless you request earlier deletion
• Billing Records: Retained for 7 years as required by Israeli tax law

KalOps.ai is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

For privacy-related inquiries, data requests, or complaints: