Legal

Privacy Policy

Last updated: October 1, 2026

Questions about this document? Contact our legal team at [email protected] or write to RugAlchemy Ltd., Rothschild Blvd 22, Tel Aviv-Yafo, Israel.

This Privacy Policy explains how RugAlchemy Ltd. (“RugAlchemy”, “we”, “us”) collects, uses and protects personal data when you use rugalchemy.com and the RugAlchemy platform.

1. Who we are

RugAlchemy Ltd. is a company registered in Israel (company no. 516482093), with its registered office at Rothschild Blvd 22, Tel Aviv-Yafo, Israel. RugAlchemy is the data controller for the personal data described in this policy. Our Data Protection Officer, Noa Mizrahi, can be reached at [email protected].

2. Data we collect

We collect only the data we need to provide and improve our services:

  • Contact details you provide (name, company, role, email, phone)
  • Account and workspace data
  • Uploaded images, prompts and generated designs
  • Usage, device and log data
  • Cookie data (see our Cookie Policy)

3. How we use your data

We use your data to provide the platform under our contract with you, to respond to demo and support requests, to keep the service secure, and, where you have consented, to send you our newsletter and measure how our website is used. You can withdraw consent at any time.

4. Your designs and uploads

Designs, prompts and uploads belong to your organization and stay private to your workspace. We never sell them, publish them or use them to train models for other customers. Private style models are trained only on your own archive and only at your request.

5. Sharing and processors

We share data only with carefully selected processors that help us run the service, such as cloud hosting in the EU, transactional email and customer support tools. Each processor is bound by a data processing agreement and may only act on our instructions.

6. International transfers

Our primary infrastructure is located in the European Union. Where data is transferred outside Israel or the EEA, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses, together with supplementary safeguards.

7. Data retention

Account and workspace data is kept for as long as your subscription is active and deleted within 90 days after it ends. Demo requests are kept for 24 months, server logs for 30 days, and newsletter data until you unsubscribe.

8. Your rights

Depending on where you live, including under Israel’s Privacy Protection Law 5741-1981, the GDPR and the KVKK, you may access, correct, delete, restrict or export your personal data, and object to certain processing. Email [email protected] and we will respond within 30 days.

9. Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is role-based, protected by multi-factor authentication and logged. We run regular penetration tests and train every employee in data protection.

10. Contact

For privacy questions, write to [email protected] or RugAlchemy Ltd., Rothschild Blvd 22, Tel Aviv-Yafo, Israel. You also have the right to complain to the Israeli Privacy Protection Authority or to your local supervisory authority.