Privacy Policy

1. Introduction and Consent to the Terms of the Privacy Policy

1.1. Welcome to the Quantap AI website and platform, available at quantap.ai and at app.quantap.ai (the "Website" and the "Platform", respectively). The Platform provides software-as-a-service (SaaS) services for the analysis of plans and engineering files using artificial intelligence, character recognition and data processing technologies, and for the generation of quantities, bills of quantities, reports and other outputs. The Website, the Platform and the services provided through them or in connection with them, including account and project management, the purchase of subscriptions and separately paid analyses, and response and support services, shall be collectively referred to below as the "Services".

1.2. This privacy policy (the "Privacy Policy") is intended to provide information on the manner in which Quantap AI ("we" or "us") collects and processes personal information in the course of the Services, including the types of personal information collected, the ways in which the information is collected, the purposes for which it is used, its transfer to third parties, and the rights of the individuals to whom the information relates.

1.3. The Privacy Policy applies to visitors to the Website, users of the Platform, customers who are individuals, account administrators, authorized users and contact persons acting on behalf of business customers, as well as to individuals who contact us to obtain information or support in connection with the Services (collectively: the "Users", "you" or "your"). The term "Customer" means the person or business for which the Services were purchased or the account was opened.

1.4. "Personal Information" means any data relating to an identified person or to a person who can be identified with reasonable effort, directly or indirectly. Information relating to a business may be considered Personal Information to the extent that it relates to an individual, including a self-employed person, employee, representative or contact person of the business.

1.5. The collection and processing of Personal Information are carried out in accordance with the provisions of applicable law, including the Privacy Protection Law, 5741-1981, and the regulations promulgated thereunder (the "Privacy Protection Law"). Personal Information is processed for the purpose of providing the Services, managing accounts and permissions, handling purchases and billing, operating and securing the Services, responding to inquiries, measuring and improving the Services, and for the additional purposes set out in the Privacy Policy.

1.6. Personal Information may be provided by you, by the Customer or by the account administrator under whose account you operate, or through relevant service providers, and may also be collected automatically in the course of using the Services. Personal Information may be disclosed to third parties for the purposes and in the circumstances set out in the Privacy Policy, subject to the provisions of law.

1.7. You should review the Privacy Policy before providing Personal Information or using the Services. Your voluntary provision of Personal Information, after you have been given the opportunity to review the information regarding its processing, shall be deemed consent to its collection and use for the purposes presented to you, to the extent permitted by law. Where separate or express consent is required for a particular processing activity, we will act to obtain it in accordance with the law.

1.8. You are under no legal obligation to provide us with Personal Information, and its provision depends on your will and consent. However, certain information is required in order to provide the requested service. For example, without an email address and appropriate identification details, it will not be possible to create an account or enable login to it; without the details required for purchase and billing, it will not be possible to complete a purchase; and without contact details and information relevant to an inquiry, we may be unable to respond. Mandatory fields will be marked in the relevant interface, to the extent one is used.

1.9. You must provide accurate, complete and up-to-date information. To the extent that you provide Personal Information about another person, including for the purpose of inviting them to an account, you must ensure that you are entitled to provide it for the relevant purpose, that the required notice has been given to that person, and that the consents required by law have been obtained.

1.10. The Privacy Policy constitutes an integral part of the Quantap AI Terms of Use, available at quantap.ai/en/terms (the "Terms of Use"). Nothing in the Terms of Use shall derogate from rights or obligations under mandatory provisions of law relating to Personal Information.

1.11. The Services are intended for business activity and for users who are 18 years of age or older, in accordance with the Terms of Use. Words in the singular include the plural, and vice versa, as the context requires.

2. Database Controller and Contact Details

2.1. The controller of the database with respect to the Personal Information processed for the purposes set out in the Privacy Policy is Quantap AI, Licensed Dealer (Authorized Business) No. 034029611.

2.2. Personal Information collected in the course of the Services may be stored in databases managed in the course of Quantap AI's activity, including through service providers acting on its behalf, in accordance with the Privacy Policy and the provisions of law.

2.3. For any question regarding the Privacy Policy, the collection and processing of Personal Information, or the exercise of your rights, you may contact us:

2.3.1. By email: privacy@quantap.ai.

2.3.2. By mail: 14 Shifon St., Emek Sara Industrial Zone, Be'er Sheva, Israel.

3. Amendments and Updates to the Privacy Policy

3.1. We may update the Privacy Policy from time to time, including as a result of changes in the Services, in work processes or in legal requirements. The updated version will be published on the Website or on the Platform, and the date of the update will be indicated at its top.

3.2. Material changes in the manner in which Personal Information is processed or in the rights of Users will be brought to your attention by means of a notice on the Website, on the Platform, by email or by other appropriate means, in advance to the extent required by law and in accordance with the circumstances. To the extent that a change requires obtaining additional consent, we will act to obtain it before carrying out the relevant processing. The publication of an updated version does not, in and of itself, constitute consent to a new use of Personal Information that requires consent.

4. Types of Information Collected in the Course of the Services

4.1. In the course of the Services, we collect and process Personal Information as detailed in Section 5 below, including account and contact details, identification and permissions data, information about purchases and billing, the content of inquiries, and device and usage data, as well as non-personal information that does not enable the identification of a person.

4.2. Among other things, we may also process statistical or aggregate data that does not enable the identification of a person with reasonable effort, such as data on the overall scope of use of the Services and their performance. Such data may be used for the operation, measurement, trend analysis, planning and improvement of the Services, subject to the law and to the Terms of Use.

4.3. Device data, usage data and technical information are not necessarily anonymous information. To the extent that a person can be identified by means of such data with reasonable effort, whether alone or in combination with other information, it will be treated as Personal Information in accordance with the Privacy Policy.

5. Information Collected, Purposes of Collection and Its Use

5.1 Online Identifiers and Device and Usage Data

5.1.1. When browsing the Website and using the Platform, we may collect online identifiers, such as an Internet Protocol (IP) address, a device or browser identifier, an account identifier, and identifiers linked to cookies or similar technologies ("Online Identifiers").

5.1.2. In addition, we may collect data on the type of device and browser, the operating system and language preferences, as well as data on the use of the Services, such as login times, duration and frequency of use, pages and screens viewed, referral sources, actions performed or not completed, use of functions, volume of analyses, credit utilization, processing times, error data and operational logs ("Device and Usage Data").

5.1.3. This information may be collected directly by us or through service providers and technological tools acting on our behalf. The information is used to operate the Services, secure them, manage logins and permissions, prevent fraud and misuse, detect and handle malfunctions, provide support, measure performance, conduct internal statistics and analytics, plan and improve the Services and the user experience, and save preferences.

5.1.4. Usage data for the aforesaid measurement and improvement purposes does not include the content of the plans and files, the content of clarifications, or the outputs themselves. The use of these materials is governed separately in the Terms of Use, and nothing in this section shall expand the permissions with respect to them.

5.2 Information Collected When Contacting Us, Providing Feedback and Receiving Support

5.2.1. If you choose to contact us via a contact form, email, telephone or another support channel available within the Services, or choose to share with us feedback on the use of the Services, we may collect contact details, such as full name, email address, telephone number and business name, as well as details relating to the account, purchase, billing, analysis or malfunction regarding which you contacted us, the content of the inquiry and correspondence, and any additional information you choose to provide.

5.2.2. The information is used to contact you, verify details as necessary, respond to the inquiry, investigate malfunctions and disputes, handle requests and document the service provided. The information may also be used to monitor and improve service and support processes, subject to the restrictions applicable to the use of User content under the Terms of Use.

5.2.3. Responses may be provided by human representatives, automated systems or artificial intelligence agents. To the extent that such systems are used to handle your inquiry, the content of the inquiry and the relevant information may be processed by means of them and by means of the service providers operating them, for the purpose of providing the response.

5.3 Information Collected Upon Registration, Login and Account Management

5.3.1. To open an account on the Platform, you will be asked to provide an email address and choose a password, or to log in through an external identity service, in accordance with the available options. In the course of registration or account management, additional details may be requested or collected, such as first and last name, telephone number, name of the business or organization, position and professional field of activity, to the extent relevant to the requested service.

5.3.2. If you choose to log in through an external identity service (SSO), such as signing in with Google, we may receive from the identity provider basic account details, such as your name, email address and user identifier with the provider, as well as the authentication data required for login, in accordance with the permissions you approve and the service interface. The use of the identity service is also subject to its terms and privacy policy.

5.3.3. We may retain information on the account status, its creation date, email address verification, user preferences, organizational affiliation and permissions, as well as records of approvals and consents provided in the course of the Services.

5.3.4. The information is used to create, manage and secure the account, authenticate the user, restore access, provide the relevant Services and functions, manage the engagement and send operational notices, such as security, billing, credit balance, analysis completion and Service change notices.

5.3.5. When you use an account of a business or organization, the Customer and the account administrator may obtain access to your details, your permissions and information about your activity within the account, in accordance with the available functions and permissions. The account administrator can view the projects, files and outputs in the account, including those uploaded or created by authorized users. Content uploaded to the organizational account should not be regarded as private content hidden from the account administrator.

5.4 Information Collected When Purchasing Services and Making Payments

5.4.1. When purchasing a subscription, a one-time analysis or an additional separately paid analysis, we may collect purchase and billing details, such as details of the Customer and the contact person, details for issuing an invoice or receipt, the plan purchased, the transaction amount, the purchase date, the subscription period, the payment status, and information on renewals, changes, cancellations and credit notes.

5.4.2. Payment clearing and billing management are carried out through external service providers. In this context, we receive or process information regarding the actual execution of the transaction and details identifying it, such as a transaction identifier, amount, date and payment approval or failure status. The processing of payment details by the payment providers is also subject to their terms and privacy policies, to the extent they apply to the relevant action.

5.4.3. The information is used to complete the purchase, collect payment, manage subscriptions and approved recurring charges, allocate credits, issue accounting documents, provide service in connection with the purchase, handle payment failures, cancellations and refunds, prevent fraud, manage disputes and comply with accounting and legal obligations.

5.5 Mailings and Marketing Messages on Behalf of Quantap AI

5.5.1. To the extent that an option to sign up to receive mailings and marketing messages on behalf of Quantap AI is offered, we may collect for this purpose your name, email address, telephone number, mailing preferences, and records of consent or of an unsubscribe request.

5.5.2. The information will be used to send information, updates and offers in connection with Quantap AI's services, in accordance with your consent and its scope, or on another basis permitted by law. Advertising messages will be sent in accordance with the Communications Law (Telecommunications and Broadcasting), 5742-1982, and direct mailing, to the extent carried out, will be subject to the Privacy Protection Law.

5.5.3. You may request to unsubscribe from marketing mailings at any time through the unsubscribe mechanism in the message or by contacting office@quantap.ai. Unsubscribing from marketing mailings does not prevent the sending of service messages that are not advertising messages.

5.6 Additional Purposes

5.6.1. In addition to the purposes set out above, Personal Information may be retained and processed, to the extent required and in accordance with law, for the purpose of fulfilling and documenting legal obligations, preventing illegal activity and misuse of the Services, enforcing the Terms of Use, resolving disputes, protecting rights and conducting legal proceedings;

5.6.2. For the purpose of examining, planning and carrying out the incorporation of the business, its transfer to a corporation, a reorganization, merger, acquisition or transfer of the business or of the rights and obligations in connection therewith, in whole or in part, including conducting due diligence and ensuring the continuity of the business and of the provision of the Services, subject to the provisions of Section 8.4 below.

6. How Personal Information Is Collected

6.1. Information that you provide to us, such as upon registration, account management, purchase, contacting support, providing feedback or signing up for mailings.

6.2. Information provided by the Customer, the account administrator or anyone acting on your behalf, such as when inviting users, setting permissions and providing contact or billing details.

6.3. Information collected automatically in the course of browsing and using the Services, by means of cookies, logs and other technological tools.

6.4. Information received from relevant service providers, such as authentication data from an identity provider you have chosen to use and transaction details from the payment provider.

7. Use of Cookies and Technological Tools

7.1. In the course of the Website and the Platform, we may use cookies and similar technologies for purposes of operation, login and user authentication, information security, saving preferences, and measuring and analyzing the use of the Services.

7.2. Operational cookies and security cookies are used, among other things, to maintain login continuity, operate functions, manage access, and identify or prevent suspicious activity. Analytics cookies and tools are used to collect usage data, measure performance, detect malfunctions, analyze trends and improve the Services and the user experience.

7.3. These tools may collect Online Identifiers and Device and Usage Data, as detailed in Section 5.1 above. They may be operated by us or through external providers that provide operational, security and analytics services. They will be used in accordance with the law and the required consents.

7.4. You can block or delete cookies through the settings of the browser you use. We recommend reviewing your browser's instructions for managing these preferences. Blocking cookies that are required for the operation of the Services may impair login to the account, continuity of use or the availability of certain functions. Changing browser settings does not, in and of itself, delete information that has already been lawfully collected and stored in our systems.

7.5. The Website uses a Meta Platforms pixel (Facebook and Instagram) to measure visits to the Website and inquiries made through it, and to improve and tailor our ads on Meta's networks. The pixel runs only after you give consent in the cookie window shown when you enter the Website. If you decline, the pixel is not loaded.

7.6. You can change your choice at any time through the "Cookie settings" link at the bottom of every page of the Website. Information collected through the pixel is also processed by Meta in accordance with its own privacy policy.

8. Sharing Information with Third Parties

We will not sell Personal Information and will not provide it to business partners for their own independent marketing purposes. Personal Information may be disclosed to third parties in the following cases, to the extent and scope required and subject to the law:

8.1. Service providers and contractors acting on our behalf – for the purpose of providing, operating and managing the Services, including providers of cloud infrastructure, processing and storage, databases and backup, identification and authentication, information security and error monitoring, analytics, payment clearing and management, email and message delivery, office systems, customer service and support, as well as providers of document processing, character recognition and artificial intelligence, to the extent that the Personal Information is required for the service they provide. Access to and use of the information on our behalf will be for the relevant purposes and subject to appropriate obligations under law.

8.2. The Customer and authorized users in the account – in the course of providing the Services to a business or organizational account, information may be accessible to the Customer, the account administrator and authorized users in accordance with their roles, permissions and the available functions, as detailed in Section 5.3.5 above.

8.3. Professional advisors – such as legal advisors and accountants, to the extent that the information is required to obtain their services, to comply with legal obligations or to protect rights, and subject to appropriate confidentiality obligations.

8.4. Incorporation and change in the structure of the business – in the course of the incorporation of the business, its transfer to a corporation, a reorganization, merger, acquisition or transfer of the business or of the rights and obligations in connection therewith, in whole or in part, information may be transferred to the relevant party for the purpose of continuing the business and providing the Services. Any such transfer will be subject to the law and to the continued application of the restrictions on the use of the Personal Information. To the extent that notice or consent is required, we will act accordingly.

8.5. Legal requirements and legal proceedings – where there is an obligation or authority to disclose the information under law, an instruction of a competent authority or a judicial order, as well as to the extent permitted and required for the purpose of resolving a dispute, claim or demand, conducting legal proceedings or protecting rights.

8.6. Security and harm prevention – to the extent that the disclosure is permitted by law and required for the purpose of detecting, preventing or handling fraud, unauthorized use, a security incident or illegal activity, enforcing the Terms of Use, or preventing serious harm to a person or property.

8.7. With your consent or at your request – for the purpose and to the parties presented to you in the context of the request or consent.

9. Data Retention Period

9.1. Personal Information will be retained for the period required to fulfill the purposes for which it was collected, or for an additional period to the extent required by law, including for the purpose of maintaining accounting records, complying with security obligations, handling disputes and protecting rights. In determining the retention period, the type of information, the purposes of its processing, its sensitivity and the requirements applicable to it will be taken into account.

9.2. Cancellation of a subscription or cessation of use does not, in and of itself, require the immediate deletion of all Personal Information. Requests to delete information or to close an account will be examined in accordance with the law, the permissions of the requesting party and permitted retention needs, as detailed in Section 12 below.

9.3. The retention of input, files and outputs that do not include Personal Information, access to them, and the options for exporting or restoring them are governed by the Terms of Use and by specific agreements, if any. Nothing in the Privacy Policy constitutes an undertaking to retain these materials for any particular period or to provide the Customer with storage, archiving, backup or restoration services. To the extent that these materials include Personal Information, the provisions of the Privacy Policy and the law will also apply to such information.

10. Information Security and Transfer Outside of Israel

10.1. We take reasonable and appropriate technical and organizational measures to protect Personal Information, to maintain its confidentiality and integrity, and to reduce the risk of unauthorized access or use, in accordance with the obligations applicable under law.

10.2. However, absolute security cannot be guaranteed, nor can every intrusion, loss, disruption or unauthorized use be prevented. Nothing in this clarification shall derogate from our obligations or from liability that cannot be contracted out of under law.

10.3. In the course of providing the Services and engaging external providers, Personal Information may be transferred, stored and processed in Israel and outside of Israel. The transfer of Personal Information to databases outside of Israel will be carried out in accordance with the provisions of applicable law, including the requirements relating to the protection of the information and the undertakings of its recipients.

10.4. You must maintain the confidentiality of your login credentials, refrain from disclosing them to others, and notify us without delay of any reasonable suspicion of unauthorized use of the account, at office@quantap.ai. This responsibility does not derogate from our obligations to secure the information.

11. Third-Party Services and Websites

11.1. The Services may include links or interfaces to services operated by third parties, such as identity and payment services. The processing of information by a third party for the purpose of its own independent activity is subject to its privacy policy and to the provisions of law applicable to it. We recommend reviewing the relevant policy before using its service.

11.2. The Privacy Policy applies to Personal Information processed by us or on our behalf, and does not replace the policies of third parties with respect to the independent processing they carry out. Nothing in a reference to a third party's policy shall derogate from our obligations regarding the information that we collect, process or disclose to it.

12. User Rights in Connection with Personal Information

12.1. In accordance with Section 13 of the Privacy Protection Law and subject to the conditions and exceptions set forth therein, you are entitled to inspect the Personal Information about you held in a database, yourself or through a person lawfully authorized for that purpose.

12.2. If you find that the Personal Information about you is not accurate, complete, clear or up to date, you may request, pursuant to Section 14 of the Privacy Protection Law, that it be corrected or deleted.

12.3. To the extent that Personal Information about you is used for a personal approach based on your belonging to a population group, which constitutes "direct mailing" under the Privacy Protection Law, you are entitled to demand in writing that it be deleted from the database used for direct mailing, in accordance with the law. This is in addition to the option to unsubscribe from marketing mailings.

12.4. To exercise these rights, you may contact privacy@quantap.ai and specify the request. We may request details reasonably required to verify your identity and authorization, in order to protect the information and prevent its disclosure to or alteration by an unauthorized party. Requests will be handled in accordance with the provisions of law and within the time periods prescribed therein.

12.5. When you use an organizational account, requests relating to account management, permissions or the organization's content may require the involvement of the Customer or the account administrator. This does not derogate from your personal rights under law.

13. Governing Law

The Privacy Policy shall be governed by the laws of the State of Israel. Subject to mandatory provisions of law, jurisdiction over disputes relating to the Privacy Policy shall lie with the competent courts of the Tel Aviv-Jaffa District.