Botique.ai
privacy_policy

Privacy Policy

Last updated: September 2026
section_01.md

Introduction

Botique AI Solutions ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website botique.co.il or use our services. We are based in Israel and serve clients globally, complying with the General Data Protection Regulation (GDPR), Israel's Privacy Protection Law (including Amendment 13), and the California Consumer Privacy Act (CCPA).

section_02.md

Data Controller

Botique AI Solutions acts as the data controller for the personal information described in this policy. For any questions regarding your data, contact us at omri@botique.co.il or +972-58-700-1123.

section_03.md

Data We Collect

We collect the following information when you use this site — some of it because you choose to give it to us, and some of it automatically:

  • Contact Form: Name, email address, company name (optional), your message, and how you heard about us (a fixed set of options). If you have granted analytics consent, the "how you heard about us" selection is also sent to Google Analytics as an event parameter.
  • Newsletter Signup: Email address
  • AI Chat: Conversation messages, processed in real time to generate responses (we do not store them after your session ends; see the AI disclosure below for processing by Anthropic)
  • Browser Local Storage: Your cookie-consent choices, accessibility settings, a record of the last language you selected, and a timestamp noting that you dismissed the exit prompt. These stored values stay in your browser and are not transmitted to us. Note separately that the language you are currently viewing the site in is taken from the page address and is included with contact-form, newsletter and chat requests so that we can reply in the right language.
  • Technical Data: Where abuse rate limiting is enabled, our form and chat endpoints read your IP address and hold it in a short-lived Cloudflare KV counter. The counter expires automatically 10 minutes (chat) or 1 hour (forms) after the most recent request it counted, so a stream of requests can keep one entry alive a little longer than a single request would. It is used only to count requests from the same source, is written to no other store, and is never used to build a profile of you.
section_04.md

Purpose of Processing

We process your personal information for the following purposes:

  • To respond to your inquiries and provide our services
  • To send you requested information about our custom AI development services
  • To follow up personally when you leave your email address. Your address arrives as a notification in our inbox — we do not run an automated mailing list or send bulk campaigns.
  • To analyze website usage and improve our services (only with your consent)
  • To comply with legal obligations
section_05.md

Legal Basis for Processing

Under GDPR and Israel's Privacy Protection Law, we process your data based on:

  • Consent: For analytics cookies and AI chat interactions.
  • Contract Performance: To respond to service inquiries
  • Legitimate Interests: For website security, fraud prevention, and service improvement
section_06.md

AI Usage Disclosure

In compliance with Israel's Privacy Protection Law (Amendment 13), we disclose that our website features an AI-powered chat assistant. This AI system is powered by Anthropic's Claude API (model: Claude). When you interact with our AI chat:

  • Your messages are processed by Anthropic's AI system to generate responses
  • Conversation data is processed in real-time and is not permanently stored by us after your session ends
  • Anthropic retains API conversations for a limited period under its commercial data policy and does not use them to train its models by default
  • The AI provides automated responses; complex inquiries may be handled by our human team

You are interacting with an AI system, not a human. The AI may make errors or provide incomplete information.

section_07.md

Third-Party Data Sharing

We share your data with the following service providers who help us operate our business:

  • Cloudflare: Website hosting and security (servers in multiple global locations)
  • Resend: Email delivery service. It carries the notification emails our contact and newsletter forms generate; we do not use it to send bulk mail to visitors.
  • Anthropic: AI chat functionality via the Claude API. Your chat messages are sent to Anthropic to generate replies and are retained under Anthropic's API data policy.
  • Google (Analytics): Website analytics. The Google Analytics script is loaded only after you accept analytics in the cookie banner — if you decline, it is never loaded at all. If you accept and later withdraw consent, we immediately switch collection off (Google's ga-disable flag plus a "denied" Consent Mode signal), though the script that was already loaded stays in the page until you reload it.
  • Google (Fonts): Our typefaces are served from Google's font CDN, so your browser may contact Google to fetch them and Google necessarily receives your IP address in that request. This happens on page load and is not consent-gated. If it is blocked, the site stays readable using your system fonts.

The providers we send your data to — Cloudflare, Resend and Anthropic — are contractually bound to protect it and to process it only as instructed by us. Google Analytics and Google Fonts are used under Google's own terms: Analytics runs only with your consent, and Fonts is a public CDN your browser requests our typefaces from.

section_08.md

International Data Transfers

Your data may be transferred to and processed in countries outside of Israel and the European Economic Area. Israel has received an adequacy decision from the European Commission. For transfers to other countries, we implement appropriate safeguards including Standard Contractual Clauses (SCCs) where required.

section_09.md

Data Retention

We retain your personal information for the following periods:

  • Contact form submissions: Delivered to our email inbox and retained there under our internal mailbox practices. We do not keep a separate database of submissions.
  • Newsletter signups: Delivered to our email inbox as a notification. We do not operate a mailing list or automated sending system, so there is no subscriber record to unsubscribe from — email us and we will delete your details.
  • Analytics data: up to 14 months (Google Analytics 4 retention setting)
  • AI chat conversations: Not stored by us — we keep no transcript once your session ends. The messages are processed by Anthropic to generate replies, and Anthropic retains API data under its own policy (up to 30 days) unless a zero-retention agreement is in place.
section_10.md

Your Rights

Depending on your location, you have the following rights regarding your personal data:

GDPR Rights (EU Residents)

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we process your data
  • Right to Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests

Israel Privacy Law Rights

  • Right to review personal data held about you
  • Right to request correction of inaccurate data
  • Right to request deletion of data
  • Right to object to direct marketing

CCPA Rights (California Residents)

  • Right to Know: What personal information is collected and how it's used
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of the sale of personal information (we do not sell your data)
  • Right to Non-Discrimination: Equal service regardless of privacy choices

To exercise any of these rights, contact us at omri@botique.co.il. We will respond within 30 days.

section_11.md

Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

  • Encryption of data in transit using TLS/SSL
  • Restricted access to personal data on a need-to-know basis
  • Secure hosting infrastructure via Cloudflare
  • Regular security monitoring and updates
section_12.md

Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

section_13.md

Policy Updates

We may update this Privacy Policy from time to time. Material changes will be announced by posting a prominent notice on our website. We encourage you to review this policy periodically.

section_14.md

Contact Information

For privacy-related inquiries or to exercise your rights:

  • Email: omri@botique.co.il
  • Phone: +972-58-700-1123
  • Location: Israel

You also have the right to lodge a complaint with the Israel Privacy Protection Authority or your local supervisory authority if you believe your rights have been violated.