Draft for legal review. Not yet in force.
Privacy policy
Last updated: 19 October 2026
Who we are
Gazoz (gazoz.ai) is a Hebrew-first studio for making images, video and audio with artificial intelligence. This policy explains what information we collect, why, who receives it, how long we keep it and what rights you have over it.
The database owner and controller: [company name, registration number, address]. Privacy requests: privacy@gazoz.ai.
What we collect
Account details: your name, email address, password (stored only as a one-way hash) and, if you sign in with Google or Apple, the identifier they give us.
Your mobile number, when you verify it. We send it a code by WhatsApp or SMS and keep the number on your account. The code itself is never stored.
What you make and upload: the descriptions you write, the files you upload and the results. Face photos you upload for processing are deleted when the take ends, and within 24 hours in any case.
Payments: the method, amount, the last four digits of the card and the invoice number. Full card details stay with the payment processor and never reach us.
Technical information: your IP address, browser type, and a cookie that identifies the browser (not you) so trial credits and invite links are not abused. Clearing your cookies resets it.
Why we use it
To run the service: to open and secure your account, make what you ask for, keep your gallery, take payments and issue invoices.
To prevent fraud and abuse: one free trial per phone, a check that you are not a bot, rate limits, and blocking harmful content.
To send service messages (receipts, account changes). Marketing messages go out only if you agreed separately, and every one of them lets you stop.
We do not sell personal information, and we do not use what you make to train models.
Do you have to give it
No law requires you to give us information. Without an email or a verified phone we cannot open an account or give trial credits, and without payment details we cannot sell a plan or a pack.
Who receives it
Providers that work for us and only on our instructions: storage and database in the European Union (Frankfurt), email delivery, WhatsApp and SMS code delivery, payments and invoices in Israel, bot checks, and AI model providers in the United States and Europe, which receive each take’s description and files and return the result.
Transfers outside Israel follow the Privacy Protection (Transfer of Data to Databases Abroad) Regulations: to countries with comparable data protection law, or under the provider’s contractual commitment.
To authorities, only when the law requires it or a court orders it.
How long we keep it
Your account and gallery, for as long as the account is open. Face photos you upload, up to 24 hours. Payment records and invoices, as long as tax law requires (seven years). Security logs, up to a year.
Your rights
To see your information (section 13 of the law), to ask us to correct or delete it (section 14), and to withdraw marketing consent at any time. Deleting your account is on the account page and removes your gallery, files and personal information, except what the law requires us to keep.
Requests: privacy@gazoz.ai. We answer within 30 days. You may also contact the Privacy Protection Authority.
Security
Information is encrypted in transit and at rest, staff access is limited and needs two-factor authentication, and every staff action is logged. We will notify you and the Authority of a serious security incident as the regulations require.
AI-made content
Every result is labelled as made with AI: with a visible label, and inside the file itself (IPTC metadata). A link you share shows the result without your description or your name, and you can turn it off at any time.
Minors
The service is for people aged 18 and over.
Changes
When we change this policy in a material way we will tell you by email and ask for your agreement again.