Privacy Policy

1. Information We Collect

We collect personal information to the extent necessary to provide, operate, and improve the Services. The categories of information we collect include:

1.1. Information You Provide to Us

When registering for the Platform, contacting us through the Site, requesting a demo, filling out contact forms, or speaking with our sales team, we collect details such as: first and last name, email address, phone number, the company you represent, role, address, and any related details you choose to share.

1.2. Information from CRM and Data Source Access

As part of implementation and the Services, when a customer grants us access to their systems (including ERP, data warehouses, CRM, and other operational systems), we collect and process the data needed to deliver the Services, including, without limitation: employee names, contact details, roles, activity history, sales data, purchasing, inventory, and workforce data. The customer is responsible for ensuring that all consents and authorizations required for transferring such data to us are in place.

1.3. Information Collected Automatically

When using the Site and Platform we may automatically collect technical and statistical information, including: IP address, device type, operating system, browser type, date and time of access, pages viewed, actions performed in the system, search history within the Platform, and referral source. This information is used for proper operation, measurement, security, and improvement of the Services.

1.4. Content You Upload and Enter into the Platform

The Platform includes a free-text chat interface and tools for uploading materials, documents, charts, and data ("Uploaded Materials"). We collect, store, and process the Uploaded Materials and any outputs derived from them ("Processed Outputs") in order to provide, maintain, secure, and improve the Services. You are not required to enter sensitive content; if you are not authorized to share particular content, do not enter it.

1.5. Cookies and Tracking Technologies on the Site

On figureit.ai we use various cookies (essential cookies, functional cookies, and analytics cookies) for site operation, performance measurement, and experience improvement. On entering the Site, you will see a cookie banner allowing you to accept or decline non-essential cookies. You may change your preferences at any time in your browser settings or through the Site’s preferences panel.

Advertising cookies and pixels: if you accept non-essential cookies, we also use the Meta Pixel (provided by Meta Platforms Ireland Ltd.) on figureit.ai to measure the performance of our ads on Facebook and Instagram and to show our ads to people who visited the Site. The pixel collects technical information such as the pages you visited, your browser, and an identifier set by Meta. It is not loaded if you decline non-essential cookies, and it does not run inside the Platform. You can also manage your ad preferences in your Facebook or Instagram account settings.

1.6. Information from Advertising Lead Forms

If you fill in a form in one of our ads on Facebook or Instagram (for example, to request a demo), Meta transfers to us the details you entered, such as your name, phone number, email address, business name, number of branches, and role. We use this information only to contact you about the demo you requested and to manage our relationship with you.

2. Purposes of Use and Lawful Bases for Processing

We use information for the following purposes, on the lawful basis applicable to each purpose:

1. Providing the Services, managing your account, operating the Platform, and providing support — Lawful basis: performance of contract.
2. Improving the Platform, developing capabilities, research and measurement, and training models on anonymized or aggregate data that does not identify the customer — Lawful basis: legitimate interest.
3. Information security, fraud prevention, anomaly detection, and maintaining the integrity of the Services — Lawful basis: legitimate interest.
4. Compliance with legal and regulatory obligations, accounting, and reporting — Lawful basis: legal obligation.
5. Marketing and contacting you regarding our services, updates, and promotional communications — Lawful basis: consent (you may withdraw consent at any time by emailing privacy@figureit.ai or via the unsubscribe link in our marketing emails).
6. Operational communication regarding your account and the Services — Lawful basis: performance of contract and legitimate interest.

3. Sharing Information with Third Parties

We do not sell your personal information. We may share information with the following parties, to the extent necessary for the purpose and subject to contracts requiring them to maintain confidentiality and information security:

1. Cloud and infrastructure providers: cloud infrastructure, database storage, runtime environments, backup, and system management providers, including Amazon Web Services (AWS), Google Cloud Platform (including BigQuery), and Render.
2. AI and language-model providers: to power our AI capabilities, we use large language model (LLM) providers, including OpenAI and Anthropic (Claude), and may add or replace providers from time to time. When you use AI features, parts of the Customer Data (such as the question entered and the business context needed to produce the answer) may be transferred to these providers. The providers operate under binding data processing agreements and are contractually committed not to use Customer Data to train their models or for any purpose other than providing the service. AI Outputs are retained in our systems in accordance with our retention policy (Section 5).
3. Operational service providers: email, document storage, analytics, billing and invoicing, customer relationship management (CRM), and related professional tools.
4. Advertising platforms: Meta Platforms Ireland Ltd. (Facebook, Instagram), to the extent you accepted advertising cookies or submitted one of our ad lead forms, to measure and deliver our ads and to receive the details you submitted.
5. Authorities and legal entities: we may be required to transfer information pursuant to law, judicial order, or request from a competent authority, or to protect our rights, the Services, or other users.
6. Merger, acquisition, or restructuring: in the event of a merger, acquisition, sale of business, or restructuring, information may be transferred to the receiving entity, subject to continued compliance with this Policy or with a privacy policy providing similar protection.

We are bound by appropriate agreements with each service provider and will not grant any provider access to information beyond what is necessary for the service it provides.

4. International Data Transfers

Some of our service providers are located outside of Israel, including in the United States and the European Union. As a result, personal information may be transferred to, stored at, or processed in jurisdictions outside Israel. We carry out such transfers while taking appropriate safeguards, including binding data processing agreements, reliance on Standard Contractual Clauses (SCCs) or similar mechanisms, and in accordance with the Israeli Privacy Protection Law and its regulations.

5. Data Retention

1. We retain personal information for as long as it is necessary for the purposes for which it was collected, including providing the Services, complying with legal obligations, resolving disputes, and enforcing our agreements.
2. Uploaded Materials and Processed Outputs will be retained for up to 90 days after termination of the agreement with the customer or after the last use of the Services, whichever is later; after this period they will be deleted from our active systems, unless we are required to retain them by law.
3. Marketing contact data (such as mailing lists) will be retained until you request removal from the list.
4. Logs and security data will be retained for the period required for security, audit, and legal compliance purposes.

6. Information Security

1. We apply reasonable and customary information security measures, including encryption in transit (TLS/SSL), encryption of data at rest where technically feasible, role-based access controls, multi-factor authentication for our staff, supervision of subprocessors, monitoring, and oversight.
2. Access to personal information is limited to employees, advisors, and contractors who require it for their role and are subject to confidentiality obligations.
3. Despite these measures, no system is entirely secure. We do not warrant that the Services will be immune from intrusions, cyber events, malfunctions, or leaks.
4. In the event of a material security incident affecting personal information, we will act in accordance with the reporting obligations applicable to us under the Privacy Protection Law (including Amendment 13) and the Privacy Protection (Information Security) Regulations, will notify the Israeli Privacy Protection Authority where required, and will inform affected data subjects to the extent and in the manner required by law.

7. Your Rights with Respect to Personal Information

Subject to the Privacy Protection Law and Amendment 13, you have the following rights with respect to your personal information:

1. Right of access: to receive from us the personal information we hold about you, in a readable format and within 14 days of your request, to the extent required by law;
2. Right to correction: to ask us to update, correct, or complete information that is inaccurate, outdated, or incomplete;
3. Right to deletion: to ask us to delete your personal information, subject to applicable legal exceptions (such as regulatory retention obligations);
4. Right to object and to restrict: to object to specific processing of your personal information or to ask us to restrict its processing;
5. Right to withdraw consent: to withdraw, at any time, any consent you have provided (for example, to remove yourself from a marketing list). Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal;
6. Right to data portability: to receive the information you provided to us in a commonly used, machine-readable format, and to transmit it to another party;
7. Right to lodge a complaint: with the Israeli Privacy Protection Authority at the Ministry of Justice.

To exercise any of the above rights, please contact us at privacy@figureit.ai. We may need to verify your identity before processing your request. We will respond within 14 days where reasonably practicable. Where a request is unfounded, repetitive, or imposes an unreasonable burden, we reserve the right to charge a reasonable fee or to decline the request, subject to applicable law.

In addition to contacting us, if you have an active account, you may download a copy of your information and delete your account directly within the Platform: Settings → Privacy & Data → Download My Data / Delete My Account.

8. Minors

The Services are intended for adults only (ages 18 and above). We do not knowingly collect personal information from minors. If a parent or guardian believes that a minor has provided us with information, please contact privacy@figureit.ai and we will promptly delete the information.

9. Changes to This Policy

We may update this Policy from time to time. Notice of any material update will be posted on this page and reflected by a change to the "Last updated" date at the top of this document. Where appropriate we will provide direct notice (for example, by email or via the Platform). Continued use of the Services after the effective date of any update constitutes your acceptance of the updated Policy.

10. Governing Law and Jurisdiction

This Policy is governed exclusively by the laws of the State of Israel. The competent courts located in Tel Aviv-Yafo shall have exclusive jurisdiction over any dispute arising out of or relating to this Policy, without prejudice to your right to file a complaint with the Israeli Privacy Protection Authority as permitted by law.

11. Contact

For any question, request to exercise a right, privacy incident report, or concern regarding this Policy, please contact us at:

Email: privacy@figureit.ai
Address: Figureit Ltd., 58 Ha’Rakevet St., Tel Aviv-Yafo

We will endeavor to respond to all inquiries within 14 business days.