Legal

Privacy Policy

Last updated: March 13, 2026

1. Introduction

Shkhina AI Labs Ltd ("Shkhina AI Labs", "we", "us", or "our") is an AI consulting company registered in Ashdod, Israel. We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at www.shkhina-ai-labs.com (the "Site") and use our services.

By accessing or using the Site, you agree to the terms of this Privacy Policy. If you do not agree with the practices described herein, please do not use the Site.

2. Information We Collect

2.1 Information You Provide

  • Contact Form Data: When you submit a contact form, we collect your name, email address, phone number (if provided), and message content. This data is stored in our database to respond to your inquiry.
  • Google OAuth Data: If you sign in via Google OAuth to access the Playground, we receive your Google profile information including your name, email address, and profile picture. We use this solely for authentication and access control.

2.2 Information Collected Automatically

  • Analytics Data: We use Google Analytics to collect information about how visitors use the Site, including pages visited, time spent on pages, referral sources, browser type, device type, and IP address (anonymized where possible).
  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance your experience. See Section 5 for details.
  • Log Data: Our servers automatically record information including your IP address, browser type, referring/exit pages, and timestamps.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To respond to your inquiries and provide customer support
  • To authenticate users and manage access to the Playground
  • To analyze usage patterns and improve the Site
  • To send you information about our services if you have requested it
  • To comply with legal obligations
  • To detect, prevent, and address technical issues or security threats

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context:

  • Consent: Where you have given us explicit consent (e.g., submitting a contact form, signing in via Google OAuth).
  • Legitimate Interests: Where processing is necessary for our legitimate interests (e.g., analytics, improving our services) and your interests and rights do not override those interests.
  • Legal Obligation: Where we need to process your data to comply with a legal obligation.

5. Cookies

We use the following types of cookies:

  • Essential Cookies: Required for the Site to function properly, including session management and authentication tokens (JWT).
  • Analytics Cookies: Google Analytics cookies (_ga, _gid, _gat) help us understand how visitors interact with the Site. These cookies collect information anonymously.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect Site functionality.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Google: For OAuth authentication and Google Analytics.
  • Service Providers: Third-party vendors who assist us in operating the Site, conducting business, or servicing you, provided they agree to keep your information confidential.
  • Legal Requirements: If required by law, regulation, or legal process.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), secure authentication via JWT tokens, and access controls on our servers. However, no method of transmission over the Internet is 100% secure.

8. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Contact form submissions are retained for up to 24 months. Google Analytics data is retained according to Google's data retention policies.

9. Your Rights

Depending on your jurisdiction, you may have the following rights:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Request correction of inaccurate or incomplete data.
  • Erasure: Request deletion of your personal data ("right to be forgotten").
  • Restriction: Request that we restrict processing of your data.
  • Data Portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interests.
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 12.

10. Children's Privacy

Our Site is not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us: