Effective: 2026-10-04
Effective date: 2026-10-04 · Version: 1.5.0 · Last updated: 2026-10-04
This Privacy Policy explains how Aidealy Ltd. ("Aidealy", "we", "us") handles personal data collected through our marketing website at aidealy.ai (the "Site").
This Policy covers the Site only. It does not cover: our SaaS product and account area (see the Product Privacy Policy), the Aidealy IDE extension (see the Extension Privacy Notice), or the detailed list of cookies (see our Cookie Policy).
Aidealy Ltd. is a company registered in Israel, at Hamidron 1, Herzliya 4654110, Israel (company registration number: 517367066). For personal data collected through the Site, Aidealy is the data controller.
We collect only what the Site needs:
We do not intentionally collect special-category / sensitive personal data through the Site, and ask you not to submit it via the contact form.
| Purpose | Personal data | Legal basis (EEA/UK) |
|---|---|---|
| Respond to your enquiry / demo request | Contact-form data | Your consent (the form's consent box); performance of / steps prior to a contract; our legitimate interest in responding to enquiries |
| Send marketing communications you opted in to | Name, email (optional form opt-in) | Your consent (withdraw any time) |
| Measure Site usage | Plausible website analytics | Our legitimate interest in understanding and improving the Site |
| Protect our forms from abuse | Turnstile data | Our legitimate interest in Site security |
| Record and demonstrate your cookie choices (consent log) | Consent identifier and state, policy version, page address, browser user agent, first half of your IP address, date and time (kept 12 months, see section 4) | Our legal obligation to be able to demonstrate your consent (GDPR Art. 7(1)) and our legitimate interest in honouring your choices |
| Detect and fix errors | Sentry data | Our legitimate interest in a reliable Site |
| Marketing (and advertising, if we activate it) | CRM + marketing identifiers (HubSpot) | Your consent (for non-essential cookies/tracking and marketing messages) |
Where we rely on legitimate interests, you have the right to object (see §11).
We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies and trackers - including any marketing/advertising technologies used with HubSpot - are set only after you consent via our cookie consent banner (powered by Cookiebot), which lets you accept or reject them equally easily and withdraw consent at any time using the "Manage cookies" link in our footer. The banner is provided by Usercentrics A/S (Cookiebot), which keeps the record of your choice in a consent log processed within the EU/EEA (hosted on Microsoft Azure in Ireland) for 12 months. Because the banner is delivered through Cookiebot's default content-delivery network, the request that fetches it before you make any choice (your IP address, browser user agent, page address and language) is served through the content-delivery network of Akamai Technologies, Inc., a United States company, which may handle the request outside Europe and may log connection details, including your IP address; Cookiebot itself uses that request only to serve the banner and keeps none of it after processing. The safeguards we rely on for data handled outside Europe are described in section 6. We also recognise browser-based opt-out signals (see §8).
We share personal data with service providers ("processors"/"sub-processors") who act for us under contract:
If we activate advertising campaigns, we will also share data with LinkedIn and Google for advertising measurement and targeting (see our Cookie Policy for the tracker details).
We do not sell your personal data for money. If we use advertising tools (HubSpot, LinkedIn, or Google) for cross-context behavioural advertising, some US state laws will treat this as "sharing" - see §8 for how to opt out.
Business transfers. If Aidealy is involved in a merger, acquisition, financing, corporate reorganisation, or sale of some or all of its business or assets, personal data may be disclosed to the prospective or actual acquirer, investor, or lender (and their professional advisers) as part of that transaction - during due diligence only to the minimum extent necessary and under confidentiality obligations - and may be transferred to the successor entity when the transaction completes. Where GDPR or UK GDPR applies, we rely on our legitimate interests in conducting and completing corporate transactions as the legal basis for these disclosures. Any successor may use your personal data only consistently with this Policy as in force at the time; if a successor intends to materially change that, you will be given the notice (or, where required, asked for the consent) that applicable law requires before the change applies to you. Under US state privacy laws such as the California CCPA, a transfer of personal information as an asset in such a transaction is not a "sale" or "sharing" of personal information.
Aidealy is based in Israel. Some of our providers are located outside your country. We rely on the following safeguards:
Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; portability; and to withdraw consent at any time (without affecting prior processing). To exercise any right, contact us at privacy@aidealy.ai. We will respond within the time limits set by the law that applies to you. You will not receive discriminatory treatment for exercising your rights.
Verification, authorised agents, and if we decline your request. We verify requests (typically by confirming control of the email address the request concerns, or equivalent evidence), and where your local law allows an authorised agent to act for you, we accept agent requests with proof of your authorisation and verification of your identity. If we decline a request in whole or part, we tell you why and how to take it further: you may appeal by replying to our response or writing to privacy@aidealy.ai with "Appeal" in the subject, and we will have the appeal reviewed by someone other than the original decision-maker and respond within 60 days (or any shorter period your local law requires). If your appeal is unsuccessful and you are in a US state whose privacy law provides it, you may contact your state Attorney General; wherever you live, you can also complain to your local data-protection authority (§12).
We do not make decisions about you based solely on automated processing (including profiling) that produce legal or similarly significant effects.
If we use advertising tools (HubSpot, LinkedIn, or Google - see our Cookie Policy) for cross-context behavioural advertising, certain US state laws will treat this as "sharing" (even though no money changes hands). Your choices:
US residents also have rights to know, delete, correct, and opt out of targeted advertising, sale, and certain profiling. See §7 and §9 to exercise them.
You may lodge a complaint with your local supervisory authority. The status of our EU representative, and how to reach us in the meantime, are set out in §1. We rely on the legal bases in §3.
UK residents may complain to the UK data protection regulator, the ICO, at ico.org.uk - please contact us first so we can try to resolve it. UK law (the Data (Use and Access) Act 2025, in force) requires us to give you a way to complain to us directly: contact privacy@aidealy.ai, and we will acknowledge your privacy complaint within 30 days and respond without undue delay. Our UK representative is in §1.
We provide the disclosures required by the CCPA/CPRA and other state privacy laws. The categories of personal information we collect (using statutory terms) are: identifiers (name, email, IP), commercial/professional information (company), internet activity (analytics, error logs), and the contents of your communications. For each we describe sources, purposes, retention, and whether shared in this Policy. We do not sell personal information for money. We also do not currently share it for cross-context behavioural advertising; if we start using advertising tools (HubSpot, LinkedIn, or Google) for that purpose, some US state laws will treat it as "sharing" - see §8 for how to opt out.
As an Israeli company, we provide notice under the Protection of Privacy Law. When you submit a form, providing your data is voluntary; if you do not provide it, we cannot respond to your enquiry. You have the right to access and correct your personal data held by us; contact us in §1.
If you are in South Korea: our contact form asks for your consent before we process your enquiry, and presents a separate, optional opt-in for marketing emails, which you can decline without affecting anything else. This Policy sets out what we collect (§2), why (§3), who receives it and where (§5 and §6), how long we keep it (§10), and how to refuse or withdraw (§7 and §11). Submitting the form sends your data outside Korea to the providers listed in §5, in Israel, the European Union and the United States; our business email provider, Google, may also process it in other countries where Google or its sub-processors have facilities.
Before we use your data for advertising, we will obtain your separate, itemised consent at the point of collection - stating the recipient, the purpose, the data items, the retention period, and your right to refuse. You may refuse that consent; refusing does not affect your ability to browse the Site or to contact us.
If you are in Japan, the Act on the Protection of Personal Information (APPI) applies to our handling of your data. We specify and make public our purpose of use. Your data is handled outside Japan: by us in Israel and by the service providers listed in §5, in the EU and the United States. We do not rely on your consent for these cross-border transfers. Before we serve visitors and contacts in Japan through providers outside Japan (other than recipients in the EU or the United Kingdom, which Japan's Personal Information Protection Commission has designated as equivalent), we will put in place with each such recipient contractual safeguards that continuously secure protections equivalent to those the APPI requires of a Japanese business operator (APPI Article 28(1); PPC Rules Article 16(i)) - including annual verification, monitoring of the recipient country's laws, and suspension where the safeguards fail - and, on your request, we will tell you how each recipient's safeguards are established, an outline of the protections, how we verify them, the recipient's country, any laws of that country that could affect them, and any impediments and our response (APPI Article 28(3); PPC Rules Article 18). The countries where your data is stored are stated in §5 and §6.
If you are in the United Arab Emirates, UAE Federal Decree-Law No. 45 of 2021 (the "UAE PDPL") restricts transfers of personal data outside the UAE. The UAE has not yet issued the PDPL's Executive Regulations, so no adequacy approvals under Article 22 have been published. Where we receive personal data of individuals located in the UAE through this website, we rely on Article 23(1) of the PDPL, and principally on Article 23(1)(a): our contracts with the service providers that process this data obligate them to apply protections, measures and controls consistent with the requirements of the PDPL. When the Executive Regulations are issued, we will review this basis and update this section where required. We honour your right to object to processing for direct-marketing purposes.
If you visit the Site from Canada, Canada's federal private-sector privacy law (PIPEDA) applies to the personal data described in this Policy, because we collect it in the course of commercial activity directed at you. If you are in Quebec, the Quebec Act respecting the protection of personal information in the private sector (as amended by "Law 25") also applies.
Australia. The Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) may apply to our handling of your personal data when we carry on business in Australia. Whatever our formal status under that Act, we handle Australian visitors' personal data consistently with the APPs:
New Zealand. The Privacy Act 2020 may apply to us as an overseas agency carrying on business in New Zealand. This Policy, together with the notice at the point of collection, tells you what we collect, why, who receives it, and that Aidealy Ltd. (Hamidron 1, Herzliya 4654110, Israel) collects and holds it.
We keep personal data only as long as needed for the purpose collected: contact/CRM records for 24 months after our last interaction with you, after which we delete them; cookie-consent records for 12 months (see section 4); if you opted in to marketing communications, we stop sending them as soon as you unsubscribe or withdraw consent; analytics in aggregated form; and security, bot-protection, and error-monitoring records only for the short operational period needed to keep the Site secure and working, after which they are deleted (we may keep statistics that no longer relate to any person).
You can unsubscribe from marketing emails using the link in every such email (or by contacting us), change your cookie choices any time via the "Manage cookies" link in our footer, and object to processing based on legitimate interests by contacting us. You can also reach us at privacy@aidealy.ai about any of the above.
Aidealy's EU representative is being appointed via EuVerify (GDPR Art. 27 service - EU + UK plan, selected 2026-06-17). Until that appointment completes, please contact privacy@aidealy.ai about anything you would otherwise raise with our EU representative, including any request to exercise your rights under Section 11. We will publish the representative's name and EU member-state address in this Section on completion.
Aidealy's UK representative is being appointed via EuVerify (same EU + UK plan). Until that appointment completes, please contact privacy@aidealy.ai. We will publish the representative's name and UK address in this Section on completion.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS/TLS), access controls limiting who can see the data, bot protection on our forms, and use of reputable processors who maintain their own security safeguards.
The Site is not directed to children, and we do not knowingly collect personal data from children under 16.
We may update this Policy. We will post the new version here with a new "Last updated" date and, where required, notify you.
Questions about this Policy or your data: privacy@aidealy.ai, Aidealy Ltd., Hamidron 1, Herzliya 4654110, Israel.