Privacy policy
This policy explains what information this website collects about you, why, and what you can ask us to do with it.
Who we are and what this policy covers
This website, kav-channels.io, is operated by Kav, a business of שחר תוכנה, based in Israel. You can reach us about privacy at sales@kav-channels.io.
This policy covers this website only — its contact form, the Kav assistant on its pages, and its technical logs. When an organization uses Kav to serve its own customers, that organization decides what data is processed and its own privacy policy applies; Kav processes that data on its behalf. The one exception is the calendar connection an organization makes in Kav, described in the section on Google account and Google Calendar data, because Google asks us to state it here.
What we collect
When you fill in the contact form: your name, work email and organization, and — only if you choose to add them — your website, a message, your organization type and the systems and channels you are interested in.
When you use the Kav assistant on this site: the messages you type and the assistant's answers. The assistant on this site answers questions about Kav and does not ask you to sign in; please don't type personal details into it.
Technical information that any website receives when you visit it: your IP address, browser type, the pages you requested and the time of the request, recorded in server logs.
We do not buy personal data about you from others, and we do not collect sensitive information on this website.
Cookies and browser storage
The site sets one strictly necessary security cookie, which protects the contact form against forged submissions. We do not use advertising cookies, tracking pixels or third-party analytics.
The assistant stores your preferences (such as language and text size) in your browser's local storage so they stay the same on your next visit. You can clear them at any time from your browser settings.
If you arrive through a campaign link, the assistant and the contact form keep its campaign tags (such as the source and campaign name), the first page you landed on without its query string, and the site that referred you, in your browser tab's session storage only. That storage is cleared when you close the tab. It uses no cookie and records no IP address, and it is sent to us only if you send a message or the contact form.
Why we use it
We use contact details only to reply to you and to discuss Kav with your organization. We do not add you to a mailing list unless you ask us to, and we never sell personal data.
We use assistant conversations to answer your question, and technical logs to keep the site running, secure and free of abuse.
Who we share it with
Only with the service providers that run this website for us: our hosting provider, Cloudflare (which delivers and protects the site), and third-party AI model providers that generate the assistant's answers from the messages you type. We reach these AI model providers through OpenRouter, which chooses the provider for each request. Each receives only what it needs to provide its service.
We may also disclose information when the law requires it. Some of these providers may process data outside Israel, subject to appropriate safeguards.
How long we keep it
We keep contact requests for as long as we are in contact with you or your organization, and delete them on request.
Technical logs and assistant conversations are kept only for as long as needed for security and troubleshooting.
Your rights
Under the Israeli Protection of Privacy Law you may ask to see the information we hold about you and to have it corrected or deleted. If you are in the European Union, you also have the rights given by the GDPR, including objecting to processing and data portability.
To make a request, email sales@kav-channels.io. We will answer within the time the law requires.
Google account and Google Calendar data
If an organization that uses Kav connects a Google account so that appointments can be booked into its Google Calendar, Kav accesses that account only with the consent of the organization's administrator, given on Google's own sign-in screen. We process this data on behalf of that organization, which decides why the account is connected.
What we access: the account's email address (to show which account is connected), the list of the account's calendars, the times when the calendars the administrator chooses are free or busy — without the titles, attendees or details of any event — and the appointment events that Kav itself creates, moves or deletes on the calendar the administrator chooses, and only on calendars the account owns.
What we do not do: we do not read the details of other events, sell this information, or use it for advertising.
How the assistant uses it: the assistant that offers appointments uses third-party AI model providers, which we reach through OpenRouter. Kav uses the calendar's free and busy times only to compute the open appointment times offered to the person who is booking. Raw Google data, such as event titles, attendees and locations, is never sent to any AI model. The AI model sees only the computed list of open times (date, time and duration).
Google user data, and anything derived from it, is not used to train or improve any generalized artificial-intelligence or machine-learning model, by Kav or by any provider. We use OpenRouter's account setting that restricts routing to providers that do not train on prompts.
How it is kept: the credential that lets Kav act on the calendar (a refresh token) is stored encrypted under a separate key for each organization, and short-lived access tokens are held only in memory. Appointment records stay in the organization's Kav account and are kept under that organization's retention settings.
Disconnecting and deleting: the administrator can disconnect the account in Kav at any time; we then revoke the permission at Google and delete the stored credential. You can also remove Kav's access yourself at https://myaccount.google.com/permissions. Kav's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Security and changes to this policy
The site is served only over an encrypted connection (HTTPS), and access to the information we collect is limited to the people who need it.
If we change this policy, we will update it here and change the date at the top of the page.