Privacy Policy

Effective date: October 15, 2026

AiBiFy is a business-intelligence assistant for small and mid-size companies. This policy explains what information AiBiFy collects, why, how it is stored and protected, who it is shared with, and how you can have it deleted. It covers the website aibify.com and the AiBiFy application (each customer's workspace at <customer>.app.aibify.com).

1. Who we are

AiBiFy is operated by Kadabrix Ltd. (company no. 517173985), Israel. For any privacy question or request, contact support@kadabrix.com.

2. Information we collect

Website visitors

When you fill in the demo request form we receive the details you provide: full name, business email, company name and phone number. The website does not run third-party advertising or analytics trackers.

Application users

• Account information — your name, email address and role in your organization's workspace.
• Business data — data your organization connects to its workspace (for example ERP tables), conversations with the AI assistant, and the reports and automations you create. This data belongs to your organization and is processed only to provide the service to it.

Information received from Google (Gmail)

If you choose to connect your Gmail account, AiBiFy requests only the following Google permissions:

• openid and email — to know which Google account you connected (your email address).
• https://www.googleapis.com/auth/gmail.send — permission to send email messages from your account.

With these permissions AiBiFy receives your email address and an OAuth refresh token that allows it to send messages on your behalf. AiBiFy does not read, store, index or analyze the contents of your mailbox — it has no permission to do so.

3. How we use information from Google

We use the Gmail send permission for one purpose only: to send an email message that you requested, from your own Gmail account. For example, a weekly purchase-order report sent as a PDF to your supplier. Every message is either:

• shown to you and explicitly approved by you before it is sent, or
• sent only to recipients you approved in advance for that specific report or automation.

We do not use information received from Google for advertising, we do not sell it, and we do not use it to build user profiles. Information received from Google APIs is not used to develop, improve or train artificial intelligence or machine-learning models, ours or anyone else's.

4. How information is stored and protected

• Each customer organization runs in its own isolated workspace, hosted on Amazon Web Services (AWS) in the Israel (Tel Aviv) region.
• Google OAuth refresh tokens are encrypted at rest (AES-256-GCM) and are used only by the component that sends your messages. Short-lived access tokens are not stored.
• All traffic is encrypted in transit (HTTPS/TLS).
• Access to production systems is limited to authorized personnel, and only where needed for security, to comply with law, or to provide support you asked for.
• Every message sent through Gmail is recorded in your workspace's activity log (time, sender, recipients, subject) so you and your organization's administrator can see what was sent.

5. Sharing

We do not sell or rent personal information and we do not share information received from Google with third parties. We use infrastructure providers only to operate the service (cloud hosting) and an AI model provider (Anthropic) to run the AI assistant on your conversations and business data; information received from Google APIs is not provided to the AI model provider for training. We may disclose information if required by law.

6. Retention and deletion

• Your Gmail connection is kept until you disconnect it. In the application, open My email account and click Disconnect: the refresh token is deleted from our systems immediately and revoked at Google. You can also remove AiBiFy's access at any time at myaccount.google.com/permissions.
• To request deletion of any other personal information, email support@kadabrix.com. We complete deletion requests within 30 days.
• Demo-request details are kept only as long as needed to handle the request.

7. Your rights

You may ask to access, correct or delete your personal information, as provided by the Israeli Privacy Protection Law and other applicable law, by contacting support@kadabrix.com.

8. Changes to this policy

We may update this policy from time to time. The current version is always published at this address, with its effective date. If a change materially affects how we use information received from Google, we will ask for your consent again before applying it.

9. Contact

Kadabrix Ltd. (AiBiFy) · support@kadabrix.com