Who is responsible for the data
LeonAI ("we") is the controller of the data collected on this site, in Hebrew and in English. For any privacy question, request or complaint: care@leonai.io.
What we collect, and why
Contact form and the fit questionnaire
What: Name, organization, business email, phone (optional), the content of your inquiry, the questionnaire answers if you filled it in, which page you came from, the language and time of sending — and the consent sentence you ticked.
Why: To answer you and arrange the work that follows. That is the whole story.
How long: As long as the inquiry or the business relationship is active, then as the law requires. On request — deleted earlier.
Newsletter signup
What: Name, email, language, and the consent sentence you ticked with its time.
Why: To send you updates and professional content — only if you explicitly agreed.
How long: Until you ask to remove the address.
At the moment a form is sent
What: IP address and browser identification.
Why: Protection against bots and mass submissions — up to five submissions from the same address in ten minutes.
How long: Not kept by us beyond the check window. The hosting provider keeps its server logs under its own policy.
| Where | What | Why | How long |
|---|---|---|---|
| Contact form and the fit questionnaire | Name, organization, business email, phone (optional), the content of your inquiry, the questionnaire answers if you filled it in, which page you came from, the language and time of sending — and the consent sentence you ticked. | To answer you and arrange the work that follows. That is the whole story. | As long as the inquiry or the business relationship is active, then as the law requires. On request — deleted earlier. |
| Newsletter signup | Name, email, language, and the consent sentence you ticked with its time. | To send you updates and professional content — only if you explicitly agreed. | Until you ask to remove the address. |
| At the moment a form is sent | IP address and browser identification. | Protection against bots and mass submissions — up to five submissions from the same address in ten minutes. | Not kept by us beyond the check window. The hosting provider keeps its server logs under its own policy. |
What we do not do: we do not sell data, show advertising, build profiles, run advertising trackers or process payments on this site.
Duty or choice
You are under no legal duty to give us information; doing so is your choice. Without an email address or a phone number we cannot get back to you — that is the only consequence of not providing them. The fields marked with an asterisk are the minimum needed to reply.
Consent — how it is given and how it is withdrawn
Every form on the site asks for a separate consent for one purpose: the inquiry — so we can get back to you; the newsletter — so we can send you mailings. No box is pre-ticked, and no single consent covers both purposes.
With every submission we keep the consent sentence you ticked, its version and the time, so we can show you exactly what you agreed to.
Consent can be withdrawn at any time by emailing care@leonai.io. Withdrawal does not affect the lawfulness of processing done before it.
Newsletter and mailings
Mailings go only to people who explicitly asked for them, as §30A of the Communications Law requires. Every message carries the sender’s name and a simple way to unsubscribe, and removal takes effect immediately. Signing up is not a condition of any service.
Who else sees the data
Providers that process data for us, only on our instructions and under data-processing agreements:
- Vercel — hosting of the site and bot protection. Servers in the European Union; server logs are kept by the provider.
- Cloudflare — DNS for our domains and network protection at the edge. Traffic that passes through it is kept in operational logs by the provider.
- Make — receives the inquiries from the site and passes them to our systems (European Union).
- monday.com — the system in which we manage inquiries and customers.
- Google Workspace — internal email notifications to the team about a new inquiry.
The data is not handed to anyone for their own purposes. Transfers outside Israel follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations 5761-2001 — to countries whose level of protection is recognized, or under a contractual commitment to protection no weaker than Israeli law.
We hand data to a public authority only when the law requires it.
Cookies and browser storage
NEXT_LOCALE
What it does: Remembers the last language you browsed in — via the language switch or a language-prefixed address (/en, /he).
How long: Until the browser closes
lp-consent
What it does: Your choice about measurement tools (allowed or not).
How long: 180 days
lp-effects
What it does: The "reduce effects" preference from the footer. Kept on your device only (localStorage).
How long: Until you change it
lp-tier:hero · lp-tier:river
What it does: The animation level your device can sustain, so the page never stalls. On the device only.
How long: 24 hours
| Name | What it does | How long |
|---|---|---|
| NEXT_LOCALE | Remembers the last language you browsed in — via the language switch or a language-prefixed address (/en, /he). | Until the browser closes |
| lp-consent | Your choice about measurement tools (allowed or not). | 180 days |
| lp-effects | The "reduce effects" preference from the footer. Kept on your device only (localStorage). | Until you change it |
| lp-tier:hero · lp-tier:river | The animation level your device can sustain, so the page never stalls. On the device only. | 24 hours |
None of these identifies you or follows you across sites. They are strictly necessary for operation and preferences, so they need no consent. The developer tuning tool (lp-tune-on) is written only for someone who opens it deliberately.
Measurement tools — only with your consent
The site is built to work with Google Analytics 4, Microsoft Clarity and Vercel Web Analytics, but none of them loads before you say yes. The notice at the bottom of the screen asks for consent, browsing without choosing is not consent, and the choice is stored in lp-consent. When a measurement tool is running, its provider receives page-usage data under its own terms; withdrawing consent stops the loading from the next page on.
The same consent also turns on partner attribution: if you arrived through a partner link, our own leonai_via cookie — a random click id, with no personal details — is kept for 90 days on leonai.io and its subdomains, so that a sign-up and purchase of any of our products is credited to the partner who referred you; it is deleted once the sign-up is recorded. Without consent the cookie is never written.
Information security
LeonAI is certified to ISO/IEC 27001:2022 (certificate 1126333). The site is served over HTTPS only with a strict content-security policy, the forms are protected against bots, and access to the data is limited to team members who need it for their role. We apply the Privacy Protection (Data Security) Regulations 5777-2017 at the level that applies to our databases. A severe security incident affecting your data is reported to the Privacy Protection Authority and to you, as the law requires.
Your rights
- Access — to know what information is kept about you (§13 of the Law).
- Correction — of information that is inaccurate, incomplete or out of date (§14).
- Deletion — to ask us to delete the details you gave, as long as no legal duty requires keeping them.
- Unsubscribe — via the link in every mailing, or by email.
- Withdrawal of consent — at any time, for each purpose separately.
How: write to care@leonai.io and say what you are asking for. We aim to answer within a few days, and in any case within the periods the regulations set; if we refuse a request, we explain why and how to appeal.
Not satisfied with the answer? You can contact the Privacy Protection Authority at the Ministry of Justice.
Minors
The site and the services are meant for organizations and for people aged 18 and over. We do not knowingly collect information about minors.
Changes to this policy
When we update the policy we change the date and version at the top of the page. A material change in the purposes of processing is brought to your attention, and where needed we ask for consent again.
What changed from the previous wording
This wording replaces the policy of 11 August 2025 published on leonai.io. The main difference: the previous text was a generic template describing payments, shipping and advertising cookies that do not exist on this site. The current text describes only what the site actually does, adds the §11 notice next to every form, separates the inquiry consent from the mailing consent, and moves measurement tools to "only with your consent".