Privacy Policy

Your privacy matters to us. Here you'll learn how we collect, use and protect your information.

Last updated: March 20, 2026

1. Introduction

This policy describes how Active Flow Ltd. collects and processes information through the application and the system, in accordance with the Israeli Protection of Privacy Law, 5741-1981, and the regulations enacted under it.

2. Definitions

"The System" - the platform and its services; "the User" - the account holder in the system; "the User's Customers" - the end customers the User manages in the system; "Personal Information" - any information that identifies a person or allows identification by reasonable means.

3. Types of Information Collected

Information provided by the User - registration details, contact details and billing details.
Business information entered into the system - leads, customers, calls, documents and correspondence.
Technical information - usage data, IP addresses, browser type and cookies.

4. Purposes of Use

The information is used to provide and operate the service, secure the system, improve the product, provide support, handle billing and collection, and comply with legal obligations.

5. Processing with Artificial Intelligence

Some of the services include AI processing, such as call transcription, call analysis and insight generation. This processing is performed solely for the purpose of providing the service, and its outputs are available to the User in their account.

6. Transfer of Information to Third Parties

Information will be transferred to subcontractors (hosting, payment processing, communications, analytics) only to the extent required to provide the service and subject to confidentiality and security commitments, or where there is a legal obligation to do so. Data processing terms for the system's customers are governed by the Data Processing Agreement (DPA).

7. Data Security

We implement accepted physical, technological and organizational security measures, including encryption, access controls, monitoring and backups. The company is certified to the international information security standard ISO 27001. These measures cannot guarantee absolute immunity, and the User is required to keep their access credentials confidential.

8. Retention Periods

Information is retained for as long as the account is active and as required for the purposes for which it was collected, or for longer periods where required by law. Upon termination of the engagement, a 30-day grace period applies for data export.

9. User Rights

Subject to applicable law, you have the right to access, correct and delete personal information, as well as the right to file a complaint with the Privacy Protection Authority. For inquiries: support@activeflow-crm.com.

10. International Data Transfers

Information may be stored or processed by providers outside Israel, subject to ensuring an adequate level of protection as required under the Privacy Protection Regulations (Transfer of Data to Databases Abroad).

11. Cookies, Analytics and Marketing Tools

The following analytics and marketing tools operate on the marketing website, and they are loaded only after consent is given via the cookie banner:

Google Analytics 4 (Google Ireland Ltd. / Google LLC) - collects website usage data, such as pages viewed, session duration, device type and cookie identifiers (_ga), for statistics and site improvement.
Meta Pixel (Meta Platforms Ireland Ltd. / Meta Platforms, Inc.) - collects browsing data and a cookie identifier (_fbp) for conversion measurement and ad targeting.

Without consent, no analytics or marketing cookies will be placed on your device. Full details on the use of cookies appear in the Cookie Policy.

12. Minors

The service is intended for businesses and is not directed at minors under the age of 18.

13. Limitation of Liability

The company's liability in connection with data processing is subject to the limitations set out in the Terms of Service.

14. Changes to this Policy

We may update this policy from time to time. Notice of a material change will be provided on the website or by email, and continued use after the update constitutes acceptance.