Ploni data processing agreement
Between the customer ("you") and the Ploni AI team ("we"). This agreement is part of the terms of service and applies when your texts contain personal data.
1. Roles
You are the controller of the database (בעל שליטה) under the Protection of Privacy Law, 1981, as amended by Amendment 13. We are a holder (מחזיק) and process personal data only on your behalf and on your instructions. These terms are your instructions; you may give further instructions in writing if they are lawful and within the service.
2. What we process
| Purpose | Detecting and replacing identifying details; restoring them when you ask |
|---|---|
| Data | Whatever personal data your texts contain, which you choose; this may include sensitive data |
| People | The people your texts are about |
| Duration | Only while handling each request |
| Location | Israel (Google Cloud Tel Aviv region) |
3. No storage
We hold each text in memory only while handling the request. We do not write texts, outputs or replacement maps to disk, logs or backups. The map returns to you; we keep no copy. Logs contain request times, word counts, key identifiers, technical details and error types, never content. We do not use your texts to train models, unless a separate signed agreement says otherwise.
4. Your duties
You confirm that you have a lawful basis for the data you send, and that you meet your own duties under privacy law, including your review of us before engaging us. Sending the output to an AI provider or anyone else is your decision and your responsibility.
5. Confidentiality and security
Only people who need access, and who are bound to confidentiality, may access the systems. We apply measures suited to the service: encryption in transit, access by key, restricted administrative access, separation of production systems, monitoring, and the measures that apply to us under the Protection of Privacy (Data Security) Regulations, 2017. We will give you a short written report on our security measures once a year, on request.
6. Sub-processors
You authorise these sub-processors for texts: Google Cloud (Tel Aviv region, hosting). We will give 30 days' notice of any new one that handles your texts, and you may object. If we cannot resolve an objection, you may end the service and receive a refund of prepaid fees. Each sub-processor is bound by data-protection duties that meet this agreement.
7. Transfers outside Israel
We do not transfer your texts outside Israel. Where you use a dedicated deployment in another region, you choose the region and instruct us to process there.
8. Security incidents
We will tell you without undue delay, and no later than 72 hours, after we learn of a security incident affecting your data, with what we know and what we are doing. We will help you meet your own reporting duties.
9. Your rights and help we give
Because we keep no texts, we hold nothing to search when someone asks to see or correct data in them. We will answer reasonable questions you need answered for a request, a regulator or a review. You may audit our compliance by asking for written information once a year, and in person where a regulator requires it, with reasonable notice and at your cost.
10. End of service
On ending, we delete account data as the privacy policy describes. There are no texts to return or delete.
11. Liability and order
The liability limits in the terms of service apply to this agreement. If this agreement and the terms differ on personal data, this agreement prevails.