Privacy Policy

What is collected

Information is collected only when you choose to provide it, or when you use one of my tools. I do not buy data from third parties and I do not sell data to anyone.

• Screening form: name, email, phone, business sector, and the answers you give.
• Site opportunity scan: the website address you submit, the scan results, and basic usage data about the scan itself.
• The AI journey (grow.profillment.ai): station progress, completed milestones, and conversations with the in-journey helper.
• WhatsApp: messages you send to my business number, your phone number, and your profile display name.
• Consulting calls: recording, transcript, and automatic summary (see the separate section on call recording).
• Email correspondence, including the content you send.
• Billing: details required to issue a lawful invoice to paying clients.
• Site usage: aggregate page and device metrics, with no cross-site advertising tracking.

Why it is collected

• To get back to you, arrange a call, and work out whether I am the right person to help your business.
• To deliver the service itself: coaching, building tools, and preparing before meetings.
• To improve my tools and content based on what actually helps.
• To meet legal obligations, mainly tax and invoicing rules.

Call recording

Consulting calls are recorded and transcribed automatically using a service called Fireflies.ai, so that I can focus on the conversation instead of writing notes.

Recording is always disclosed at the start of the call. If you would rather not be recorded, just say so and I will turn it off. It changes nothing about the call or what you get from it.

Transcripts stay in my Fireflies account. Only a short summary and follow-up actions enter my own systems, never the full transcript.

Use of artificial intelligence

This business is built on AI, so you deserve to know exactly what that means for your information.

Some of what you provide is processed by AI models to draft messages, summarise calls, and spot opportunities. The providers used are Anthropic (Claude) and OpenAI, through their business APIs.

Under those providers' business API terms, data sent through them is not used to train their models.

No meaningful decision about you is made automatically by AI. Anything sent to you is written or approved by a human, meaning me.

Who it is shared with

I do not sell your information and I do not share it for advertising. It is stored and processed by the infrastructure providers I use to run the business:

• Supabase, database storage.
• Vercel, site and service hosting.
• Anthropic and OpenAI, language processing as described above.
• Fireflies.ai, call recording and transcription.
• Google (Workspace), email, calendar, and files.
• Meta (WhatsApp Business Platform), WhatsApp message delivery.
• iCount, invoices and receipts.
• Beyond that, information is disclosed only where the law requires it, for example under an order from a competent authority.

Transfers outside Israel

Some providers above store data outside Israel, mainly in the United States and the European Union. Their standard data processing terms govern that use.

How long it is kept

• Lead details and correspondence: while there is a reasonable prospect of continued contact, and at most three years from the last interaction.
• Paying client records: while the engagement is active, then for the retention periods tax law requires.
• Billing documents: seven years, as required by law.
• Recordings and transcripts: up to one year, unless you ask for earlier deletion.

Your rights

Under Israel's Protection of Privacy Law, 5741-1981 and its regulations, and in some cases under the EU GDPR, you have the right to:

• Know what information is held about you and receive a copy.
• Correct information that is wrong or out of date.
• Request deletion, where no legal obligation requires keeping it.
• Withdraw consent to marketing content at any time.
• To exercise any of these, email idan@profillment.ai. I handle this myself and reply within 30 days.

Security

Information is held in systems with restricted permissions and encrypted access. Keys and passwords are never stored in code or in shared documents.

No system is completely secure, however. If a security incident affects your information, I will notify you and the competent authority as the law requires.

Minors

My services are intended for business owners, not minors. I do not knowingly collect information about anyone under 18.

Cookies

The site uses aggregate usage measurement (Vercel Analytics), which does not build a personal profile and does not follow you across other sites. There are no advertising pixels on the site.

Changes to this policy

If this policy changes materially, the date at the top of the page will be updated. Worth a glance now and then if you are an active client.

Contact

For any privacy question: idan@profillment.ai. I read and answer these myself.