Privacy Policy

Version 1.1 · Effective date: October 12, 2026 · Last updated: October 12, 2026

1. Who we are

Lavi Entrepreneurship & Management (Meir Lavi), doing business as AI Lab Pro ("we", "us"), 29 Yigal Alon St., Herzliya, Israel. Privacy contact: support@ailabpro.co.

This Policy covers our website, the online questionnaire, the client portal and the services we run for our clients. It is part of our Terms of Service.

2. Two kinds of information

• Our clients' information (business owners and their staff who use our website, questionnaire and portal). For this information, we decide how it is used.
• Callers' information (people who call or text one of our client businesses through the AI line). We process this information on behalf of that business, as its service provider, only to provide the service. The business decides how it is used and is responsible for its own privacy notice to its customers. If you are a caller, you can also contact the business directly.

3. What we collect

3.1 From clients

• Contact and account data: name, business name, email, phone, time zone, language preference.
• Questionnaire answers: services, hours, service area, tools you use, FAQ content.
• Quote and contract data: accepted Quote, the name you typed to accept, date, IP address, browser type, and the document version you agreed to.
• Billing data: invoices and payment status. Card or account details are handled by the payment provider (for example PayPal, Payoneer or Upwork); we do not see full card numbers.
• Connection data: access tokens for tools you connect (for example Google Calendar or Calendly). We store them encrypted.
• Support data: requests and messages you send us.

3.2 From callers (on behalf of the business)

• Phone number, and what the caller says or types: name, service address or ZIP, job type, urgency, preferred time.
• Call transcripts (speech converted to text) and text message content. We do not store call audio. One exception: if our system is down, the phone carrier plays a voicemail greeting and stores the caller's voicemail, with notice in the greeting.
• Booking details created in the business's calendar.
• Opt-out status (STOP / START), including opt-outs made in a text sentence or out loud on a call.
• Consent records: which version of the call notice played, the caller's answer when the assistant asked whether it may text a booking confirmation and a reminder (yes or no, with the words used), the time, the number and the call record, and each opt-out or opt-in with how it was made. If a caller objects to recording or transcription, we keep only a note of the objection and the call details, not a transcript.
• Call and message metadata: time, duration, delivery status, line type (mobile or landline).

AI and recording notice. Every call answered by the AI begins with a spoken notice that the caller is speaking with an AI assistant, that the call may be recorded and transcribed by us and our service providers, and that the business may text the caller about the call. The notice plays before the assistant processes anything the caller says. Call audio is streamed to our service providers to convert speech to text and text to speech; we do not store it. If a caller objects to recording or transcription, the assistant stops and we do not keep a transcript of the conversation. We use callers' information only to provide the service to the business and do not use it to train AI models; our service providers process it under their own terms, which limit how they may use it (section 6).

3.3 From website visitors

• Usage data from analytics tools (Google Analytics and Microsoft Clarity): pages viewed, device, approximate location, clicks and scrolls. These tools use cookies or similar technology. You can block cookies in your browser, use Google's opt-out add-on for Google Analytics, or send a Global Privacy Control signal.
• Text you type into the website demo. The demo is fictional; do not type personal information.

4. How we use information

• To write your Quote, build and run your service, and support you.
• To answer calls and texts for the business, book appointments, and send the business lead alerts and summaries.
• To bill you, keep records, and meet legal and tax duties.
• To keep the service secure, prevent abuse and fix problems.
• To improve our service using aggregated or de-identified data.

We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We do not use callers' information for our own marketing.

Mobile numbers and SMS consent. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that help us deliver the messages (such as our SMS carrier).

5. AI processing

We use Claude, an AI model by Anthropic, PBC, through Anthropic's commercial API, to understand callers, write replies and draft Quotes. Text from calls and messages is sent to the API to produce each answer. Under Anthropic's commercial terms, data sent through the API is not used to train its models by default, and we have not opted in to any program that would allow it. The AI does not make decisions that have legal or similarly significant effects on anyone; your business reviews and controls what the AI does. We are not affiliated with Anthropic.

6. Service providers (sub-processors)

We share information only with the service providers below, only as needed for the purpose shown, and under their contract terms, which limit how they may use it.

If we add or replace a provider that handles callers' information, we will update this list and tell active clients by email before the change. We may also disclose information if the law requires it, to protect rights and safety, or as part of a sale or merger of our business (with notice to you).

7. How long we keep information

When your service ends, you can ask for an export of your data within 30 days. After that we delete it, except booking records (kept 2 years, as above), the consent log (kept 5 years, as above) and records we must keep by law.

8. Security

We use encryption in transit, encrypted storage of access tokens, access controls per client, signed webhooks, and the minimum access we need. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires.

9. International transfers

We are based in Israel, and our main systems are in the United States. Your information may be accessed from Israel to provide support and maintenance, with the same protections described in this Policy.

10. Your US state privacy rights (including California)

Depending on where you live (for example California under the CCPA as amended by the CPRA, and other US states with consumer privacy laws), you may have the right to:

• know what personal information we have about you and how we use and disclose it;
• get a copy of it in a portable format;
• correct it;
• delete it;
• opt out of the sale or sharing of personal information, and of targeted advertising (we do not sell or share personal information, and we do not do targeted advertising);
• limit the use of sensitive personal information (we do not collect it on purpose; see section 11);
• not be discriminated against for using these rights.

Notice at collection. In the last 12 months we have collected these categories of personal information: identifiers (name, email, phone number, IP address); commercial information (Quotes, invoices); internet activity (website usage); text transcribed from calls; texting consent and opt-out records; and approximate location (city or ZIP). The sources, purposes, recipients and retention periods are described in sections 3, 4, 6 and 7. We have not sold personal information or shared it for advertising.

How to make a request. Email support@ailabpro.co with the subject "Privacy request". We will confirm your identity before acting, and answer within 45 days (we may extend once by 45 more days when the law allows, and will tell you why). An authorized agent may make a request for you with your written permission. If we deny your request, you may appeal by replying to our answer; we will respond to the appeal within the time the law requires. If you are a caller of one of our client businesses, we will pass your request to that business and help it respond. We honor Global Privacy Control signals as an opt-out request.

11. Health and other sensitive information

Our services are not designed to collect health, financial-account or government-ID information. We do not act as a HIPAA business associate unless we have signed a written Business Associate Agreement with the client. Until then, the services are not available to HIPAA covered entities (such as dental and medical practices), and clients must not use them for protected health information.

12. Children

Our services are for businesses and their adult staff. They are not directed to children, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

13. Changes

We will post updates here with a new "Last updated" date and version. For material changes, we will email active clients at least 14 days before the change takes effect.

14. Contact

Lavi Entrepreneurship & Management (Meir Lavi) · 29 Yigal Alon St., Herzliya, Israel · support@ailabpro.co.