Benoz.AI Privacy Policy

Benoz is operated by Benoz.AI Ltd, HaRav Kedar 9, Petah Tikva 4965185, Israel. For any privacy question or request, contact oz@benoz.ai.

When an organization (our customer) gives its team access to Benoz, that organization decides which accounts its users connect. For data in a customer workspace, the customer is the controller and Benoz acts as its processor, on the customer's behalf and under our agreement with it.

• You choose which accounts to connect. You can disconnect them at any time.
• We use your data only to provide the features you see in Benoz.
• We do not sell your data, we do not use it for advertising, and we do not use Google user data to train generalized AI or machine learning models.
• People at Benoz do not read your messages unless you ask us to, it is needed for security, or the law requires it.

Account data. Your name, work email address, profile picture, organization and role, and your sign-in method (Google or an emailed single-use link).

Data from accounts you connect. Depending on the connectors you or your organization enable: email, calendar events, contacts, and meeting recordings and transcripts. Section 4 explains exactly what we access from Google.

Content you create in Benoz. Notes, follow-ups, tasks, questions you ask in Ask Benoz, and settings.

Technical and usage data. IP address, browser type, device information, pages and actions in the app, and error logs, used for security, troubleshooting and improving reliability. We use Sentry for error tracking.

Cookies. We use cookies that are strictly necessary to keep you signed in and to remember your preferences such as language and theme. We do not use advertising cookies in the app.

Benoz connects to Google only after you click "Continue with Google" or "Connect Google" and approve the access shown on Google's consent screen. We request only the access listed below.

We do not send, edit or delete your email, and we do not create, change or delete your calendar events or contacts.

Limited Use. Benoz's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features described above, which are visible in the Benoz interface.
• We transfer Google user data to others only to provide those features (for example, to the service providers listed in section 7, under contract), for security purposes, to comply with applicable law, or as part of a merger, acquisition or sale of assets after obtaining your explicit prior consent.
• We do not use, transfer or sell Google user data for advertising, including retargeting, personalized or interest-based ads.
• We do not sell Google user data and do not transfer it to data brokers or information resellers.
• We do not use Google user data to determine creditworthiness or for lending purposes.
• No person at Benoz reads your Google user data unless you give us your affirmative agreement to view specific messages or data (for example, in a support request), it is necessary for security purposes such as investigating a bug or abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized and used for internal operations.
• We do not use Google user data, or data derived from it, to develop, improve or train generalized or non-personalized AI or machine learning models.

We use data to:

• provide the Benoz features you and your organization use, including client timelines, meeting summaries, follow-ups, unanswered-message alerts and Ask Benoz;
• authenticate you and keep your account secure;
• give support when you ask for it;
• detect, prevent and investigate security incidents, fraud and abuse;
• maintain and improve the reliability of the service, using technical and usage data;
• send service messages such as sign-in links and important notices about your account;
• comply with legal obligations.

We do not use your connected-account content for marketing or advertising.

Some features, such as meeting summaries, follow-up extraction and Ask Benoz, use large language models. To produce these results we send the relevant content to our AI provider, Anthropic, listed in section 7. These providers process the data only on our behalf to return the result to you, and under our agreements they do not use it to train their models. We do not use Google user data to train generalized AI models, ours or anyone else's. AI results appear only inside your organization's workspace.

We do not sell personal data. We share it only:

• With service providers (subprocessors) that help us run Benoz, under contracts that require them to protect the data and use it only to provide services to us:

  Provider	Purpose
  Railway	Application hosting and database
  Vercel	Web app hosting
  Amazon Web Services	Secrets management and storage
  Recall.ai	Meeting assistant and recording
  Soniox	Speech-to-text transcription
  Resend	Sending sign-in and service emails
  Anthropic	AI summaries and answers (section 6)
  Sentry	Error tracking

• Within your organization's workspace, according to the permissions your organization sets. Ask Benoz only shows you what you already have access to.
• For legal reasons, when required by law, court order or a valid request from authorities, or to protect the rights, safety and security of our users or Benoz.
• In a business transfer, such as a merger or acquisition. For Google user data, only after your explicit prior consent.

Data is stored on servers in the European Union and the United States. When data is transferred outside Israel or the EU, we rely on appropriate safeguards required by applicable law, including the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 2001, and, where the GDPR applies, the European Commission's Standard Contractual Clauses.

• Connected-account data (including Google user data) is kept while the connection is active and your organization's account is open.
• Disconnecting an account. You can disconnect Google in Benoz under Settings > Connectors or revoke access at any time at https://myaccount.google.com/permissions. When you disconnect, we stop collecting new data and delete the data we got from that account within 30 days.
• Deleting your account. You or your organization's admin can ask us to delete your account and data by emailing oz@benoz.ai. We delete it within 30 days, except where the law requires us to keep it.
• Backups are deleted on a rolling schedule within 30 days.
• Technical logs are kept for up to 90 days.

We protect data with encryption in transit (HTTPS/TLS) and encryption at rest for our database and storage, access limited to staff who need it, secrets kept in a managed secrets store, tenant isolation between organizations, and logging of access to production systems. We follow the Israeli Privacy Protection (Data Security) Regulations, 2017. No system is perfectly secure. If a breach affects your data, we will notify you and the relevant authorities as the law requires.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to processing or withdraw consent. To exercise these rights, email oz@benoz.ai. We will reply within 30 days. If your data is in a workspace managed by your organization, we may refer your request to your organization's admin. You can also complain to the Israeli Privacy Protection Authority or to your local data protection authority.

Benoz is a business service and is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.

We may update this policy. We will post the new version on this page and change the "Last updated" date. If a change materially affects how we use Google user data or other personal data, we will notify you in the app or by email before it takes effect, and ask for your consent where required.