1. Who we are
Kol Bina (“we”, “us”) is a phone-based Hebrew voice assistant operated by Kol Bina, registered at 87 Yehuda HaNasi St., Elad, Israel. Website: www.kol-bina.com. Support: support@kol-bina.com.
2. Scope
This Privacy Policy explains how we collect, use, store, and share personal data when you call Kol Bina, connect optional integrations (including Google), subscribe, or contact support. It applies to our voice service, related SMS/email messages, and our admin tools used by staff.
3. Data we collect
- Identity: Phone number (primary account key), and optionally: name, gender, city, email, and language preferences.
- Call data: Call metadata (time, duration, routing IDs), audio recordings, transcripts, and AI conversation memory/summaries.
- Reminders & transit: Reminder text and schedules; trip or monitoring data you ask us to track.
- Local contacts: Names, phones, and emails you explicitly save directly with us.
- Billing: Plan details, usage/airtime, and payment processor IDs. We do not store full credit card numbers or CVVs.
- Security: Phone verification challenge hashes (not plaintext codes) and support operator notes.
- Google (optional): Encrypted OAuth refresh tokens and granted scopes; live API access to Gmail, Calendar, Contacts, and Drive only while you remain connected.
4. How we use data
- To provide and improve the conversational voice assistant experience you request on the call.
- To authenticate you via caller ID and phone verification.
- To manage billing, subscriptions, and airtime measurement.
- To send transactional messages (e.g., Google connection links, requested call summaries).
- To enforce security, ensure safety, prevent abuse, and comply with legal obligations.
5. Processors & subprocessors
We do not sell your personal data. We engage trusted, enterprise-grade service providers to process data securely on our behalf. These categories include:
- Cloud Hosting & Database Providers: To securely store data, host our core infrastructure, and manage application logging.
- Telephony & Communications Partners: To route phone calls, process secure audio streams, and deliver operational SMS/emails.
- AI & Speech Processing Services: To transcribe audio to text and generate conversational AI responses.
- Payment Processors: To securely handle billing and subscriptions (full card data remains exclusively with the processor).
- External API Providers: To fetch localized data (such as weather or public transit schedules) strictly upon your request during a call.
6. Storage & security
Personal data is stored in secured, industry-standard databases. Google OAuth refresh tokens are encrypted at rest using application-level AES-256-GCM encryption before storage. Access tokens are short-lived and kept only in memory. All production API traffic is encrypted in transit over HTTPS.
7. Retention & deletion
We retain operational data (like call metadata and billing records) as necessary to provide the service and meet legal obligations. You may request full deletion of your Kol Bina account data, or disconnection of your Google account, by emailing support@kol-bina.com. Disconnecting your Google account hard-deletes the encrypted credential from our systems, but does not delete data on Google’s servers.
8. Contact
For privacy inquiries: support@kol-bina.com
Operator: Kol Bina, 87 Yehuda HaNasi St., Elad, Israel