Privacy Policy

ActiveLens Ltd. · Last updated: October 2026

This Privacy Policy explains how ActiveLens Ltd. ("ActiveLens", "we", "us" or "our") collects, uses, shares and protects personal information when you visit our websites (including www.activelens.ai), use our free tools, or use the ActiveLens desktop, web, mobile and watch applications and related services (together, the "Services").

ACTIVELENS RECORDS AND TRANSCRIBES CONVERSATIONS ONLY AT THE DIRECTION OF OUR CUSTOMERS. IF YOU TAKE PART IN A CALL OR MEETING WITH AN ACTIVELENS CUSTOMER, THAT CUSTOMER — NOT ACTIVELENS — DECIDES WHETHER THE CONVERSATION IS RECORDED AND IS RESPONSIBLE FOR GIVING YOU NOTICE AND OBTAINING ANY CONSENT REQUIRED BY LAW. SEE SECTION 3.

1. Who We Are

1.1 Controller. ActiveLens Ltd., 11 Bublik Street, Jerusalem 9722193, Israel, is the controller of the personal information described in this Policy, except where Section 3 says we act as a processor.

1.2 Billing affiliate. Our parent company, ActiveLens Inc., New Burton Road, Suite 201, Dover, Kent County, Delaware 19904, USA, issues invoices and collects payments solely as our billing agent, and receives only the billing details it needs to do so.

1.3 Contact. Privacy questions and requests: privacy@activelens.ai. General contact: contact@activelens.ai.

2. Scope

2.1 This Policy applies to personal information we process about website visitors, people who use our free tools, people who sign up for or use the Services, customer contacts, and business partners.

2.2 This Policy does not apply to third-party websites, apps or services that you connect to or reach through the Services (for example, your calendar, CRM, VoIP or video-conferencing provider). Their own privacy policies apply.

3. Customer Content and Conversation Participants

3.1 We act as a processor. When a customer uses the Services to record, upload, transcribe, summarize or analyze calls, meetings and other conversations, the resulting audio, video, transcripts, summaries, tasks and other outputs ("Customer Content") are processed on behalf of that customer. The customer is the controller of Customer Content and we are its processor (or "service provider" under U.S. state laws). Our processing of Customer Content is governed by our agreement with the customer, including our Data Processing Addendum, and not by this Policy.

3.2 Participants. If you are a participant in a conversation recorded by an ActiveLens customer, please contact that customer with any questions or requests about your information. If you contact us, we will refer your request to the relevant customer where we can identify it, and we will assist the customer as required by our agreement with them.

3.3 Customer responsibility. Our customers are contractually required to provide all notices and obtain all consents required by applicable recording, wiretapping, eavesdropping, privacy and biometric laws before any conversation is recorded or analyzed using the Services.

4. Information We Collect

Information you provide

• Account and contact details: name, email address, phone number, company, job title, password (stored in hashed form) and preferences, when you sign up, contact us, request a demo or apply for a job.
• Billing details: billing name and address, tax identifiers and transaction records. Payment card details are collected and processed directly by our payment processor; we do not store full card numbers.
• Communications: messages, support requests, survey responses and feedback you send us.

Information collected automatically

• Device and connection data: IP address, browser type, operating system version, device identifiers, language and connection details.
• Usage data: pages viewed, clicks, features used, actions taken, referring URLs, and dates and times of access.
• Cookies and similar technologies: described in Section 9.

Information from third parties and integrations

• Connected services: when you connect a calendar, contacts, CRM, task management, telephony or video-conferencing account, we receive the information you authorize, such as calendar events, attendee names and email addresses, contact records and call metadata. See Section 8 for Google user data.
• Sign in with Google: if you sign up or sign in with your Google account, including through the "Continue as" prompt on our website, Google shares your name, email address, profile picture and Google account identifier with us. See Section 8.
• Partners and resellers: if you buy the Services through a reseller or telephony partner, we may receive your account and order details from them.
• Advertising and analytics providers: information about how you reached our website, such as the campaign or search term.

5. How We Use Information

We use personal information to:

• provide, operate, maintain and secure the Services, including authenticating logins and preventing unauthorized access;
• create and manage accounts, process payments and issue invoices;
• respond to inquiries, provide support and send service-related messages;
• understand how the Services are used, fix problems, and develop and improve the Services;
• send marketing communications where permitted by law (you can unsubscribe at any time);
• measure the effectiveness of our advertising;
• detect, investigate and prevent fraud, abuse, security incidents and illegal activity;
• enforce our Terms of Service and other policies, investigate disputes, and comply with legal obligations.

6. Artificial Intelligence

6.1 AI features. The Services use speech-to-text and large language models, including models operated by third-party providers, to transcribe conversations and generate summaries, insights, suggested tasks and other outputs for our customers.

6.2 No training on Customer Content. We do not use Customer Content to train generalized AI or machine-learning models, and we do not permit our AI providers to use Customer Content to train their models.

6.3 Accuracy. AI outputs may be inaccurate or incomplete and should be reviewed by a person before being relied on.

7. Legal Bases (EEA, UK, Switzerland and Israel)

Where these laws apply, we rely on: (a) performance of a contract to provide the Services; (b) our legitimate interests in operating, securing, analyzing and improving the Services and marketing to business customers, balanced against your rights; (c) your consent, for analytics and advertising cookies and certain marketing, which you can withdraw at any time; and (d) compliance with legal obligations.

8. Google User Data

8.1 Permissions. If you connect a Google account, we may request access to calendar events (read and write), free/busy information (read only), your calendar list (read only) and contacts (read only), only to provide the features you enable, such as joining scheduled meetings, checking availability, suggesting attendees and creating draft meetings after you review them. If you sign up or sign in with Google, we receive your name, email address, profile picture and Google account identifier, and use them only to create your account and sign you in.

8.2 Limited Use. ActiveLens's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve or train generalized AI or machine-learning models; we do not sell it or use it for advertising; we do not transfer it except as necessary to provide or improve user-facing features, to comply with law, or as part of a merger or acquisition; and our personnel do not read it unless you give explicit consent, it is needed for security purposes or to comply with law, or it has been aggregated and anonymized.

8.3 AI features. Our AI features operate on the call recording and transcript. Where a matched calendar event supplies the participant list for a call, those participant names and email addresses are included as context so that the summary attributes statements to the right people. No other Google Calendar or Google Contacts data is placed in a model prompt.

8.4 Disconnecting. You can disconnect your Google account at any time in ActiveLens or on your Google Account permissions page. Disconnecting deletes our access tokens.

9. Cookies, Analytics and Advertising

We use the following technologies on our websites and in the Services:

9.1 Your choices. In the EEA, UK, Switzerland and Israel we ask for your consent before setting analytics or advertising cookies. Elsewhere these are enabled by default and you can opt out at any time through "Your Privacy Choices" on our website. We treat Global Privacy Control signals as a request to opt out of advertising cookies. You can also opt out of Google Analytics on all websites with Google’s browser add-on at https://support.google.com/analytics/answer/181881, and manage how Google uses information for advertising at https://adssettings.google.com. How Google uses information from sites that use its services is explained at https://policies.google.com/technologies/partner-sites and https://policies.google.com/technologies/ads.

9.2 Help center assistant. Questions you type into our help center assistant are sent, together with relevant help articles, to Google's AI service to generate an answer. We do not send your name, email address or account details. Please do not include personal information in your questions.

10. How We Share Information

We do not sell personal information for money. We share personal information only as follows:

• Service providers (sub-processors) that host, process or support the Services on our behalf under written contracts, including cloud hosting, speech-to-text, AI model, meeting-attendance, analytics, email, support and payment providers. Our current list of sub-processors is available on request and in our Data Processing Addendum.
• Stand-ins: if you choose to send an ActiveLens stand-in to a meeting, we share the meeting link, join time and a display name with our meeting-attendance provider (Recall.ai, Inc.), which joins that meeting only, records it and produces a transcript. These recordings are hosted in the European Union, kept for no more than 12 months (or less, per your settings) and deleted when you delete the meeting in ActiveLens.
• Our affiliate ActiveLens Inc. , for invoicing and billing.
• Partners and resellers through which you purchased the Services, to the extent needed to administer your account and orders.
• Integrations you enable , when you instruct us to send information to a third-party service such as your CRM or task manager.
• Advertising partners such as Google, as described in Section 9.
• Professional advisers and auditors , under confidentiality obligations.
• Corporate transactions: in connection with a merger, acquisition, financing, reorganization or sale of assets, subject to confidentiality protections.
• Legal and safety: where we believe in good faith that disclosure is required by law, subpoena or governmental request, or is necessary to enforce our agreements, detect or prevent fraud or security issues, defend legal claims, or protect the rights, property or safety of ActiveLens, our customers or others.

11. International Transfers

11.1 We are based in Israel, and our primary production infrastructure is hosted on Amazon Web Services in the European Union. Some service providers, and our affiliate ActiveLens Inc., are located in the United States and other countries.

11.2 Where we transfer personal information out of the EEA, UK or Switzerland, we rely on adequacy decisions (including the European Commission's adequacy decision for Israel), the EU Standard Contractual Clauses and the UK Addendum, or another lawful transfer mechanism.

12. Retention

12.1 We keep personal information only as long as needed for the purposes described in this Policy, including to provide the Services, comply with legal, tax and accounting obligations, resolve disputes and enforce our agreements.

12.2 Account information is kept for the life of the account and deleted or anonymized within a reasonable period after closure, except where we must keep it longer by law (for example, billing records). Customer Content is kept and deleted according to the customer's settings and our agreement with the customer. Analytics retention periods are listed in Section 9. Data in backups is overwritten on a rolling basis.

13. Security

We use administrative, technical and physical safeguards designed to protect personal information, including: TLS encryption in transit; encryption at rest for databases, search indexes and file storage, with credentials and tokens additionally encrypted at the application layer; authenticated sessions with optional multi-factor authentication; role-based access controls and per-user visibility permissions enforced on our servers; logical separation of each customer organization's data; logging of production access and customer-data actions; and scheduled deletion of expired data. ActiveLens has completed a SOC 2 Type 2 examination covering the security, availability, confidentiality and privacy trust services criteria, which also evaluated HIPAA Security Rule safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

14. Your Rights

14.1 General. Depending on where you live, you may have the right to access, correct, update, delete, restrict or export your personal information, to object to processing based on legitimate interests (including product analytics), and to withdraw consent at any time without affecting earlier processing.

14.2 EEA, UK, Switzerland and Israel. You may also lodge a complaint with your local data protection authority, or in Israel with the Privacy Protection Authority. We encourage you to contact us first.

14.3 U.S. state privacy laws. Residents of certain U.S. states may have the right to know, access, correct and delete personal information, and to opt out of "sale", "sharing" or targeted advertising. Our use of advertising cookies may be considered a "sale" or "sharing" under some of these laws; you can opt out through "Your Privacy Choices" or by enabling Global Privacy Control. We do not knowingly sell or share the personal information of people under 16. We will not discriminate against you for exercising your rights. You may use an authorized agent, subject to verification.

14.4 How to exercise your rights. Email privacy@activelens.ai. We will verify your identity before acting on a request and respond within the time required by law. Rights are not absolute and may be limited by law or by the rights of others. For Customer Content, see Section 3.

15. Children

The Services are intended for business and professional use by adults. We do not knowingly collect personal information from children under 16 (or the minimum age of digital consent in your country). If you believe a child has provided us personal information, contact privacy@activelens.ai and we will delete it.

16. Changes to This Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, where the changes are material, notify account owners by email or in the Services before they take effect.

17. Contact Us

ActiveLens Ltd., 11 Bublik Street, Jerusalem 9722193, Israel · privacy@activelens.ai