Privacy Policy
Last Updated: September 2026
1. Introduction
AluFlow Ltd. (Company No. 517308623) (the "Company", "we") is the controller of the AluFlow platform's databases and is committed to protecting your privacy. This Privacy Policy serves as a notice under the Israeli Protection of Privacy Law, 5741-1981, and explains what information we collect, for what purposes, with whom it is shared, and what your rights are. For any privacy matter you can contact us at info@aluflow.co.il or +972-52-229-3319.
2. Information We Collect
We collect information you provide directly: name, email address, phone number, business name, and payment information (processed by Cardcom). Providing these details is not required by law, but it is required in order to open an account, provide the Service, and process payments — without it we cannot provide the Service. We automatically collect usage data, including IP address and online identifiers (which constitute personal data under the law), browser type, pages visited, and feature usage patterns. We collect project data you create: designs, BOQ calculations, customer information, and quotes, as well as site or customer-home photos you upload for visualizations — such photos may contain identifying details.
3. How We Use Your Information
We use your information to provide and improve the Service, process payments and manage subscriptions, send transactional emails (billing, security, team invitations), provide customer support, analyze usage patterns to improve features, power AI features (visualizations and the support assistant), carry out quality assurance and improve our AI outputs (see Section 5), comply with legal obligations, and — subject to your consent — for marketing, remarketing, and statistical analysis.
4. Information Sharing
We do not sell your personal information. We use sub-processors to provide the Service, by purpose: Payments — Cardcom (Israel); hosting and infrastructure — Hetzner (Germany) and Neon (managed database); email — Resend; SMS and phone verification — 019sms (Israel); error tracking — Sentry; AI providers — Anthropic, Google (Gemini), and OpenAI, including photos you upload for visualizations; analytics and advertising (subject to consent) — Google Analytics, Google Ads, Meta Pixel, and TikTok Pixel; analytics warehouse — Google BigQuery; support-team voice note transcription — ElevenLabs; international payments and in-app purchases — Freemius and Apple (App Store); internal operations — Discord (operational alerts), Telegram (handing a support conversation to a human agent), and GitHub (handling feedback and bug reports). We will also share information as required by law or court order.
5. AI Processing
To power AI features, project data and photos you upload are sent for processing to external AI providers (Anthropic, Google, OpenAI) acting as sub-processors on our behalf. Under these providers' API terms, the input is not used to train their models. We recommend not uploading photos that include people or sensitive details not needed for the visualization. Automated quality control: to improve visualization quality, every visualization generated is automatically reviewed by an additional computer-vision model that compares the output against your original photo and produces a quality score and a list of defects. We retain the score, the defect classification, and the correction instructions you entered, and use them to improve the feature and to test changes to it. This information is not used to train the AI providers’ models and is not shared with any third party for that purpose.
6. International Data Transfers
Information is stored on servers in Germany (Hetzner) and is also processed by service providers in the United States and other countries. These transfers are carried out in accordance with the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, including transfers to countries providing an adequate level of protection or subject to appropriate contractual commitments by the providers.
7. Data Security
We implement industry-standard security measures including HTTPS encryption for all communications, JWT-based authentication with secure token handling, bcrypt password hashing, rate limiting on sensitive endpoints, and database encryption at rest.
8. Staff Access to Your Data
AluFlow personnel and its service providers may access your account content — including projects, drawings, and bills of quantities — only on a need-to-know basis and for defined purposes: providing support at your request, diagnosing and fixing faults, maintaining and securing the system, preventing abuse, and complying with legal obligations. Access is limited to authorized roles, to the narrowest scope required, and is recorded in system logs. Such access is carried out through dedicated, logged tools and not by impersonating your account, and your account content is not used for marketing purposes.
9. Data Retention
We retain information by category: account and project data — for the duration of your subscription. Account deletion freezes the account at once, and the data is permanently erased 30 days later. During those 30 days you can restore the account; after that the deletion is irreversible and we cannot restore the data. We recommend exporting your data before deleting; payment records and invoices — 7 years in accordance with tax law requirements; system and security logs — for the limited period required for operations and security; anonymized usage data — indefinitely; processing by AI providers — per those providers' retention policies. AI visualization quality-control data — quality scores, defect classifications, and the correction instructions you entered — is retained for up to 24 months, after which it is deleted or de-identified so that it can no longer be linked to you or your account.
7. Your Rights
If you are in the EU, the EEA or the United Kingdom, the General Data Protection Regulation (GDPR) gives you the right to access your personal data, to have inaccurate data corrected, to have your data erased, to restrict or object to processing, and to receive your data in a portable format. Where processing is based on consent, you may withdraw that consent at any time. You also have the right to lodge a complaint with your local supervisory authority. Customers in Israel have the corresponding rights of access and correction under the Israeli Protection of Privacy Law, 5741-1981. To exercise any of these rights, contact us at info@aluflow.co.il. You can delete your account yourself at any time from Settings → Security; see our Data Deletion page for what that removes and when.
11. Cookies and Tracking
We use essential cookies for authentication and session management — these are always active. Subject to your consent in the cookie banner, we also activate: Google Analytics for usage analysis, and advertising/conversion pixels of Meta (Facebook/Instagram), TikTok, and Google Ads. These measurement and advertising tools are off by default and are activated only after your approval. Consent is collected by category — essential (always active), analytics and marketing — and every non-essential category is off by default. You can change or withdraw your consent at any time via the Cookie settings link in the site footer. We record the consent you gave and when you gave it, as required by law.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.
13. Contact Us
For privacy-related questions or to exercise your rights, contact the Company's privacy contact at info@aluflow.co.il or call +972-52-229-3319.
14. The AluFlow iOS App
The AluFlow iOS app (available on the App Store) is a dedicated native client for this same Service. This section describes what is specific to the mobile app; the general provisions above (Sections 1 to 13) apply to it as well, except where noted below. Data the app collects: your name, email address, phone number, and account identifier (provided when you sign in or set up your account), a device identifier used solely to deliver push notifications, and - only when you choose to capture or upload a photo (for example a site photo, a customer's home, or an AR snapshot) - photos or videos. All of this data is linked to your account and is collected solely to operate the app; the app never uses it for advertising or tracking. The app does not include any advertising trackers or analytics pixels. Google Analytics, Meta Pixel, Google Ads, and TikTok Pixel, described in Section 10 above, run on the aluflow.co.il website only and are not embedded in the iOS app. Camera and ARKit: when you use the augmented-reality preview, camera images and scene data are processed entirely on your device to position and render the pergola design; they are not uploaded to our servers or shared with any third party. The app does not collect your location. Crash and performance diagnostics: if the app crashes or experiences a performance issue, technical diagnostic data (crash logs, performance metrics, and general device diagnostics) is sent to our error-monitoring provider, Sentry. This diagnostic data is not linked to your identity. Account and data deletion: you can permanently delete your account and all associated data at any time directly in the app, under Settings, using the Delete Account option - a first confirmation, followed by typing the word DELETE to complete the request - or from the website, under Account Settings, using the Delete Account option. The account is frozen immediately on our servers and permanently erased 30 days later, as described in Section 9 above; during that period you can restore it using the link we email you. You may also contact us at info@aluflow.co.il to request deletion.
15. Google Data (Calendar and Sign-In)
If you connect your Google Calendar (Settings → Google Calendar) or sign in with a Google account, AluFlow accesses your Google data as described below. The connection is per user, granted by your explicit consent on Google's permission screen, and can be revoked at any time. What we access: your Google account email address and identifier (via the openid and email scopes), and calendar events (via the calendar.events.owned scope). How we use it: to create, update and delete events that AluFlow itself created on your primary calendar — for the installations, teardowns and meetings you are assigned to on the schedule. To detect a change made directly in Google, we read the event list of your primary calendar and its subsequent changes; an event that AluFlow did not create is identified as such and filtered out — it is not stored by us, not shown in the app, and not disclosed to anyone. What we store: a Google refresh token, encrypted; your Google account email address, for display only; and, for each synced booking, the Google event id and the timestamp of our last write. We do not store the contents of your calendar. Sharing: Google data is never sold, never used for advertising or remarketing, never sent to AI providers, and never used to train models. It is not disclosed to any third party other than Google itself to operate the connection, and except where disclosure is required by law. Deletion: disconnecting (Settings → Google Calendar → Disconnect) revokes the grant with Google and deletes the token and link records on our side; events already created in your calendar remain there. Requesting account deletion disconnects the integration automatically. AluFlow's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.