Last updated: October 8, 2026
This Privacy Policy explains how ATLASKAI LTD ("Atlaskai", "we", "us") handles personal data when you visit atlaskai.net (the "Site") or email us. It is written to meet Israel's Privacy Protection Law, 5741-1981, as amended by Amendment No. 13 (in force since 14 August 2025), the EU General Data Protection Regulation ("GDPR"), the UK GDPR and Data Protection Act 2018, and the comprehensive consumer privacy laws of US states such as California, Colorado, Connecticut, Virginia and Texas.
1. Who we are
ATLASKAI LTD (אטלסקאי בע"מ) is a company registered in Israel under company number 517190013, with its registered office at Toha, Yigal Alon St 114, 22nd Floor, Tel Aviv-Yafo 6744320, Israel. We are the controller (the "database owner" under Israeli law) of the personal data described in this policy.
For any privacy question or request, write to info@atlaskai.net or to the address above.
2. What we collect
We collect only the following. We do not ask for sensitive data, and please don't send it to us.
| Source | Data | Notes |
|---|---|---|
| Emails you send to info@atlaskai.net | Your name, email address, and anything you choose to write, plus any signature details (job title, company, phone) | Only what you send us |
| Emails you send to demo@atlaskai.net | As above, plus your organisation, phone number and anything else you include (the Site's "Request a demo" link opens an email that asks for these) | Only what you send us |
| Cloudflare (our network and security provider) | IP address, browser and device type, pages requested, date and time, referring page, approximate location derived from the IP address, and security cookies (see section 11) | Collected automatically on every visit, to deliver and protect the Site |
The Site has no contact forms, accounts or payment features. You are not legally required to give us any personal data. If you don't, we simply can't reply to you.
3. Why we use it, and our legal basis
| Purpose | Data used | Legal basis (GDPR and UK GDPR) |
|---|---|---|
| Replying to your questions sent to info@ | Email data | Our legitimate interest in answering people who contact us (Art. 6(1)(f)) |
| Arranging and running a demo you asked for, and following up on it | Email data sent to demo@ | Steps you asked us to take before a possible contract (Art. 6(1)(b)); otherwise our legitimate interest in responding to business enquiries (Art. 6(1)(f)) |
| Delivering the Site, keeping it secure, and blocking bots, fraud and attacks | Cloudflare technical data and security cookies | Our legitimate interest in a working, secure Site (Art. 6(1)(f)) |
| Keeping records, meeting legal duties, and handling legal claims | Any of the above, as needed | Legal obligation (Art. 6(1)(c)) and our legitimate interest in defending our rights (Art. 6(1)(f)) |
Under Israeli law, we process this data with your consent, which you give when you choose to write to us or use the Site, and as otherwise permitted by law. We use it only for the purposes above.
Where we rely on legitimate interests, we have weighed them against your rights. You can ask us for details, and you can object at any time (section 7).
We do not make decisions about you by automated means, profile you, send you marketing you haven't asked for, or use your data to train AI models.
4. Who else receives it
We share personal data only with the service providers below. They act on our instructions, under written data processing terms, and may not use it for their own purposes.
| Provider | What it does for us | Where it is based |
|---|---|---|
| Lovable (Lovable Labs Sweden AB) | Builds and hosts the Site | Sweden (EU); it uses sub-processors in other countries, including the United States |
| Cloudflare, Inc. | Delivers the Site through its global network and protects it against attacks and bots | United States; servers worldwide |
| Google (Google Workspace) | Runs our email, including info@ and demo@, and our business documents | Ireland (Google Ireland Limited) and the United States; servers worldwide |
We may also disclose personal data when the law requires it (for example, a court order), to protect our rights or someone's safety, or to a buyer or successor if our business is sold or merged. In that last case the recipient must keep honouring this policy.
5. Transfers outside Israel and the EU
Our providers store and process data in several countries, including the United States. We protect these transfers as follows:
- Data leaving Israel is transferred only where permitted under the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001. Where required, we obtain appropriate written commitments from the recipient regarding the protection, use and further transfer of the data.
- Data from the EU, EEA or UK may come to us in Israel, which the European Commission and the UK recognise as giving adequate protection.
- Data sent to the United States goes to providers certified under the EU-US Data Privacy Framework and its UK Extension, or covered by the European Commission's Standard Contractual Clauses (and the UK Addendum).
You can ask us for a copy of the safeguards that apply (section 7).
6. How long we keep it
| Data | How long |
|---|---|
| Emails to info@ and demo@ | Up to 24 months after our last exchange. If you become a customer, for the length of the contract plus 7 years, the Israeli limitation period for claims |
| Cloudflare technical data | For short periods set by Cloudflare's own retention rules, typically days to weeks, unless needed to investigate an attack |
| Security cookies | Until they expire (see section 11), at most 30 minutes |
| Data we need for a legal claim or duty | Until the matter is resolved, or as long as the law requires |
When the period ends, we delete the data or make it anonymous.
7. Your rights, and how to use them
Depending on where you live, you can ask us to:
- See the personal data we hold about you and, when applicable, receive a copy or obtain it in a portable format;
- Correct data that is wrong, incomplete or out of date;
- Delete your data, where applicable law gives you that right;
- Object to or restrict certain uses of your data, where applicable;
- Withdraw consent where we rely on it, without affecting processing carried out before withdrawal;
- Find out which providers receive your data and how transfers are protected.
How to use them. Email info@atlaskai.net with the subject "Privacy request", or write to us at the address in section 1. You may use an authorised agent. We may ask for information to confirm your identity, and we use it only for that.
We reply within the time the law sets: 30 days under Israeli law, one month under the GDPR and UK GDPR, and 45 days under US state laws. Some of these periods can be extended when a request is complex; if so, we will tell you. Using your rights is free, and we will not treat you differently for doing so.
If you're not satisfied, you can complain to Israel's Privacy Protection Authority, your local data protection authority in the EU, or the UK Information Commissioner's Office. In US states that provide for it, you can appeal our decision by replying to it with the subject "Appeal"; if you are still not satisfied, you can contact your state Attorney General.
8. We don't sell or share your personal information
We do not sell your personal information, and we do not "share" it for cross-context behavioural advertising, as those terms are defined under California and other US state laws. We have not done so in the past 12 months. We do not use targeted advertising and we do not use or disclose sensitive personal information. We honour Global Privacy Control signals as an opt-out request.
9. Children
The Site is for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, contact us and we will delete it.
10. Security
We protect personal data with measures suited to its risk, in line with Israel's Privacy Protection (Data Security) Regulations, 5777-2017. These include encrypted connections (HTTPS), access controls and two-factor sign-in on our accounts, and contracts that bind our providers to protect data. No system is fully secure, so we cannot guarantee absolute security.
11. Cookies
The Site uses only the cookies and browser storage below. They are strictly necessary to deliver and protect the Site, so the law does not require your consent for them. Blocking them in your browser may stop parts of the Site from working.
| Name | Set by | Purpose | Duration | Type |
|---|---|---|---|---|
__cf_bm (cookie) | Cloudflare | Tells people apart from bots, to block automated attacks | 30 minutes | Strictly necessary |
__dpl (cookie) | Lovable, our hosting provider | Keeps your browser on the same version of the Site while we publish an update. It records which version of the Site you were served, not who you are | About 24 hours | Strictly necessary |
cf_clearance (cookie) | Cloudflare | Records that your browser passed a security check, so you aren't asked again | 30 minutes, only after a security check | Strictly necessary |
_cfuvid (cookie) | Cloudflare | Applies rate limits fairly to visitors who share an IP address | Ends when you close your browser | Strictly necessary |
tsr-scroll-restoration-v1_3 (session storage) | The Site | Remembers where you were on a page when you go back. Holds no personal data | Ends when you close the tab | Strictly necessary |
12. Notice for US residents
In the past 12 months we have collected these categories of personal information: identifiers (name, email address, IP address); professional information (job title, company); internet activity (pages viewed, browser and device data); and approximate location derived from the IP address. We collected them from you and from your device, for the purposes in section 3. We disclosed them for business purposes only to the providers in section 4. We keep them for the periods in section 6.
Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with comprehensive privacy laws have the rights in section 7, including to know, correct and delete their data and to opt out of sale, sharing, targeted advertising and profiling. We do none of these.
13. Changes to this policy
We may update this policy. We will post the new version here and change the "Last updated" date at the top. If a change is significant, we will say so clearly on the Site.
14. Contact
ATLASKAI LTD, Toha, Yigal Alon St 114, 22nd Floor, Tel Aviv-Yafo 6744320, Israel · info@atlaskai.net
