Privacy Policy

Last updated: May 3, 2026

This Privacy Policy describes how Lord of the Land Ltd. (the "Controller" / בעל שליטה במאגר, as defined in the law) collects, uses and protects personal information about you (the "data subject" / נושא מידע) in accordance with the Israeli Protection of Privacy Law, 5741-1981 (חוק הגנת הפרטיות), as amended by the Privacy Protection Law (Amendment No. 13), 5784-2024, in force from August 14, 2025; the Privacy Protection Regulations (Data Security), 5777-2017; and, where applicable, the Privacy Protection Regulations (Provisions Regarding Information Transferred to Israel from the European Economic Area), 5783-2023. Where users reach the Service from outside Israel we observe applicable local data-protection norms in good faith.

1. Voluntariness

Providing personal data to us is voluntary. There is no statutory obligation requiring you to register. You may browse the Service with 3 free tokens for various actions on the Service without an account. Without an account you cannot save parcels, use the AI chat, upload custom layers or generate Property Dossiers — those are the consequences of declining to provide data.

2. Information We Collect

We collect your email address, name, and authentication data when you create an account (including profile data from Google Sign-In or Facebook Login if you use those methods).
We log property lookups and usage statistics (coordinates, region, parcel identifiers, quota usage) to operate and improve the Service.
We log your chat messages and the property context sent to our AI assistant (see "AI Processing" below).
Payment processing is handled by Lemon Squeezy, which acts as our Merchant of Record (the seller of record for the transaction). We do not store credit card numbers — we receive only subscription status and customer/subscription IDs. See §9 of the Terms of Use for details.
Marketing attribution: If you arrive via a campaign link with UTM parameters (utm_source, utm_content), we record the source so we understand which content drives signups. No personal data is collected from the link itself.

3. AI & Document Processing (OpenAI & Google)

When you send messages to our AI assistant, your message text and the relevant property context (coordinates, parcel data, zoning information) are transmitted to OpenAI for processing.
OpenAI processes this data to generate AI responses. Per OpenAI's API data policy, API inputs are not used to train their models by default.
We may store chat history in our database to improve the Service, support quota enforcement, and enable conversation continuity.
Do not include sensitive personal information (financial details, health data, government ID numbers, passwords) in chat messages — content sent to AI services may be retained per their respective policies.
OpenAI's data policy: openai.com/policies/api-data-usage-policies

Google Cloud (Vertex AI, Gemini & Cloud Vision):

We use Google Cloud Platform as cloud infrastructure. Planning and property documents are stored in Google Cloud Storage and processed with Google Cloud Vision (OCR) and Vertex AI / Gemini models to extract and analyze planning information (for example, building rights).
Where AI analysis of your query is performed by Google models, the relevant text and property context are transmitted to Vertex AI / the Gemini API for processing.
Per Google Cloud's terms, customer data submitted to Vertex AI and the Gemini API is not used to train Google's foundation models.
Google Cloud data-processing terms: cloud.google.com/terms/data-processing-addendum; Google privacy policy: policies.google.com/privacy

AI models we use: depending on the task, the following model families (or their successor versions) may process your queries and our source documents:

OpenAI — GPT-5 and GPT-4o model families (chat, analysis, summarization) and text-to-speech models (reading responses aloud).
Google — Gemini 2.5 and 2.0 model families (document analysis and vision / OCR) and Gemini embedding models (indexing planning documents for search).

We may add, change, or replace AI models at any time as technology evolves; this policy describes the categories of processing rather than fixed model versions.

4. Cookies & Tracking

We use essential cookies for authentication, session management, and CSRF protection. These are required for the Service to function.
We use analytics cookies to collect anonymous usage statistics (pages visited, features used, general location) to improve the Service.
Third-party services (Google Maps, Google Sign-In, Facebook Login, Lemon Squeezy) may set their own cookies subject to their respective privacy policies.
You may revisit your cookie preferences via the cookie-preference banner shown on first visit, or by clearing your browser cookies.

5. How We Use Your Data

To provide and maintain the Service, including account management and authentication.
To enforce usage quotas and subscription status.
To improve the Service based on aggregated, anonymized usage patterns.
We do not sell, rent, or share your personal information with third parties for marketing purposes.

6. Your Rights

Access (Section 13 of the Privacy Protection Law): you may request to inspect the personal data we hold about you.
Correction (Section 14): you may request correction of inaccurate personal data.
Deletion of your account: you may request deletion of your account and all associated personal data by contacting us at support@lordoftheland.com. We will process deletion requests within 30 days.
Direct-marketing opt-out (Section 17ו / 17vav): we currently do not send direct-marketing communications. Should that ever change, you will be able to opt out at any time and request removal from any direct-marketing database we maintain.
Complaint: you may lodge a complaint with the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות, Ministry of Justice).

7. Data Retention

We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:

Account data: retained while your account is active. Upon account deletion, personal data is removed within 30 days.
Usage & activity logs: up to 12 months, for service-improvement and data-security purposes.
Billing records & invoices: up to 7 years, as required under Israeli tax law.
Aggregated, anonymized data: may be retained indefinitely, as it does not identify you personally.

8. Third-Party Services

The Service integrates with third-party services including Google Maps Platform, Google Sign-In, Google Cloud Platform (Vertex AI, Gemini, Cloud Vision, Cloud Storage), Facebook Login, OpenAI, Lemon Squeezy, and various official GIS APIs operated by national, regional and municipal authorities. Your use of these services is subject to their respective terms of service and privacy policies. We are not responsible for the availability, accuracy, or practices of third-party services.

9. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact

For any question, request to exercise a right, or privacy-related inquiry, please contact us at support@lordoftheland.com.

This Privacy Policy forms an integral part of the Service's Terms of Use. In the event of a conflict between the Hebrew and English versions of this document, the Hebrew version prevails.