Privacy policy

22.9.2026

Who we are

Kablan OS is operated by Barak AI (sole trader), Israel. This policy explains in plain words what data is collected, why, and your rights under Israel's Privacy Protection Law.

What data

Account details: name, phone, email, business name, trade, language.

Data you enter: customers, addresses, quotes, photos, signatures, payments, messages.

Voice recordings you make for a quote: transcribed to text and not kept after transcription.

Technical data: IP (hashed), browser, usage times.

Subscription payment data is held only by the payment company (Tranzila). We never see a card number.

Why

To run the service: write quotes, send to customers, issue invoices through your software, collect, remind.

To charge the subscription and issue your receipt.

To send service messages (welcome, trial ending, receipt). No advertising without consent.

Who has access

Sub-processors that run the service: hosting and database (EU), WhatsApp/SMS delivery, email, AI for transcription and drafting (text is sent for processing, not used for training), payments (Tranzila) and receipts (iCount). Named list on request.

Your invoicing software (Morning / iCount): receives customer details and items to issue a document in your name.

Your customers: see the business name, the quote, and the documents you send them.

Data is never sold or shared with third parties for marketing.

Your customers

You are responsible for having a lawful basis to enter your customers' details. We process them only for you, on your instructions.

A customer who receives a message can reply “remove” and we stop sending.

How long

While the account is active, and up to 7 years for financial documents as the law requires. After account deletion data is erased within 30 days, except what must be kept.

Your rights

Access, correction, export (menu: export) and deletion (menu: data deletion). Any question through the site chat.

Security

Encryption in transit and at rest, business separation at the database level, provider API keys encrypted, limited and logged access.