Legal
Privacy Policy
What we collect when you visit or-on.io or contact us, why, who it goes to, and how long it is kept. Written to be read.
Who is responsible for your data
or-on.io is operated by Or On Artificial Intelligence Ltd., company no. 517185104, 16 Tsifer St., Haifa, Israel ("OrOn", "we"). We are the controller of the data collected through this website under the Israeli Privacy Protection Law, 5741-1981.
Privacy questions: Support@or-on.io.
What this policy covers, and what it does not
This policy covers data collected through the website: browsing it, and the contact form.
It does not cover calls and data that OrOn agents process for our customers as part of the service. There we act as a processor on the customer's behalf, under the service agreement and data processing agreement (DPA) signed with them. If you called a business that uses OrOn, ask that business about your data.
What we collect
What you give us in the contact form: full name, company, work email, phone (optional), the tasks you would like an agent to handle, and a description of your enquiry (optional).
Technical data collected automatically: IP address, browser and device type, pages viewed and time of visit. Some of this is recorded in server logs for security and operations, and some is collected by an analytics tool, only if you consent (see Cookies).
Preferences stored on your device: your language choice, accessibility settings and cookie decision are kept in your browser's local storage and are not sent to us.
We do not ask for especially sensitive information as defined by law (for example health, biometric or financial data). Please do not include such information in your enquiry.
Why we use it
- To reply to your enquiry and propose a pilot, a timeline and a price.
- To run the website, secure it and troubleshoot it.
- To understand which pages are useful and improve the site, using analytics data only where you consented.
- To send you marketing updates, only if you explicitly ticked that you want them.
- To meet our legal obligations.
We do not sell personal data, rent it, or use it to build advertising profiles.
Do you have to give us this data
No. There is no legal obligation to provide it; doing so is voluntary and based on your consent. If you do not provide contact details, we cannot reply to your enquiry. You can also email us directly instead of using the form.
Who we share it with
We use service providers that process data for us, only for the purposes above and under confidentiality and security commitments:
| Provider | Role | Location |
|---|---|---|
| Google LLC (Firebase Hosting) | Website hosting and server logs | United States and other regions |
| Google LLC (Google Analytics / Firebase Analytics) | Analytics, with consent only | United States |
| FormSubmit | Relays contact form enquiries to our inbox | United States |
| Google LLC (Google Workspace) | or-on.io mailboxes | United States and other regions |
We will also disclose data to a competent authority where required by law or court order.
Transfers outside Israel
Some of the providers above store data outside Israel. Transfers are made under the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, to providers committed to an adequate level of protection. By submitting the form you consent to this transfer.
Cookies and similar technologies
Essential: the site stores your language choice, your accessibility settings and your cookie decision in your browser's local storage. These are needed for the site to work and do not identify you.
Analytics: Google Analytics (via Firebase) measures visits and usage. It does not load at all until you click "Accept" in the cookie banner. If you decline, it never loads.
You can change your choice at any time through the Cookie settings link at the bottom of every page. We use no third-party advertising or tracking cookies.
How long we keep it
- Contact form enquiries: while the business relationship is active, and up to three years after your last contact, unless the law requires longer.
- Analytics data: for the period set in our analytics account, and no longer than 14 months.
- Server logs: briefly, for security and troubleshooting only.
Security
Traffic to the site is encrypted (HTTPS). Access to data is limited to staff who need it for their work, and we apply security measures in line with the Privacy Protection (Data Security) Regulations, 5777-2017. No system is perfectly secure; if a serious security incident occurs we will report it as the law requires.
Your rights
- Access: receive the data we hold about you (section 13 of the Law).
- Correction and deletion: ask us to correct data that is wrong, incomplete or out of date, or to delete it (section 14).
- Withdraw consent: withdraw consent to analytics or marketing at any time, without affecting processing done before.
- Unsubscribe: every marketing message we send includes a simple way to opt out (section 30A of the Communications Law).
To exercise these rights, email Support@or-on.io. We reply within 30 days. If you live in the European Union, you also have your rights under the GDPR.
If you are not satisfied with how we handled your request, you can complain to the Israeli Privacy Protection Authority.
Direct marketing
We will not send you marketing messages without separate, explicit consent. The contact form has a separate checkbox for this, not ticked by default, and it is not a condition for handling your enquiry.
Minors
The site and services are intended for businesses and organisations, not for minors under 18. We do not knowingly collect data about minors.
Changes to this policy
We update this policy when our activity or the law changes. The date at the top shows the last update. We will announce material changes on the site.
Language of this document
This policy is published in Hebrew, English, Spanish and Arabic. If they conflict, the Hebrew version prevails.