Roofella AIby Alpha
עבBack to home

Privacy Policy – Roofella AI

Last updated: 25.10.2026

1. Who we are

Roofella AI ("Roofella", "we") is an AI platform for businesses. It is operated by A.S Alpha Marketing Ltd (ע.ש אלפא שיווק בע"מ), Israeli company no. 516422334.

  • Address: 18 Abba Even Blvd, Herzliya Pituach, Israel.
  • Email: info@roofellaai.com.
  • Website: roofellaai.com.

This policy covers:

  • the roofellaai.com website, including the "Free AI check" questionnaire and the chat on our site;
  • the Roofella platform.

It is based on Israel's Protection of Privacy Law, 5741-1981, as amended by Amendment 13, and the regulations under it. When we serve people in the EU, we also follow the GDPR.

2. Two roles

a. Data we are responsible for (we are the database "controller"):

  • website visitors;
  • people who fill in the "Free AI check";
  • people who use the chat on our site;
  • people who contact us;
  • businesses that use the platform, and their users.

b. Data we hold for businesses (we are a "holder", i.e. a processor): when you contact a business that uses Roofella, that business controls your data. This includes its chat, its booking page and its messages. We store and process that data only on the business's instructions and under our agreement with it. Please send requests about this data to the business first. If you contact us instead, we will forward your request to the business.

3. The "Free AI check" questionnaire

What we collect:

  • Name.
  • Phone number or email (at least one).
  • Business name (optional).
  • Answers about your business:
    • business type;
    • monthly inquiries;
    • where inquiries come from;
    • how appointments are booked;
    • what happens with leads who did not reply;
    • whether you ask for reviews;
    • who answers inquiries;
    • whether inquiries arrive after hours.
  • An optional open question: "what bothers you most".
  • Technical data: how you reached the site (campaign parameters and referring page), and the time you filled in the form, which we use for spam filtering.

Why we collect it: to show you which modules fit your business, and to contact you about the recommendation and a quote. The recommendation is calculated automatically from your answers. It is not a binding decision and does not affect your rights.

Do you have to provide it? No. You are under no legal obligation to provide this information. Providing it is voluntary and depends on your consent.

What happens if you don't:

  • Without your name and a phone number or email, we cannot receive your request or get back to you.
  • Without your answers, the recommendation will be less accurate.
  • The business name and the open question are optional.

Who receives it:

  • Your details, answers and fit score are saved as a lead in the customer relationship management (CRM) system of A.S Alpha Marketing Ltd, the company that operates Roofella.
  • The CRM is hosted by cloud providers (Vercel and Neon) in Frankfurt, in the European Union.
  • Only the staff and service providers who handle your request can access it.
  • We do not pass it to third parties for their marketing.

Consent: we contact you only if you ticked the box agreeing to be contacted about the check. That is not consent to marketing. We send marketing only if you give separate, explicit consent.

4. The chat on our site

When you use the chat on our site:

  • We store the conversation, its language, the page you were on, your IP address, and any details you choose to give (name, phone, email).
  • To generate replies, the conversation is sent to a third-party language model (see section 7).
  • If you leave your details, a lead is created. It may get an automatic interest score (hot, warm or cold) to help us prioritise.
  • The chat is run by software, not a person, and it can make mistakes. You can always ask for a human.
  • You are not legally required to give details in the chat, but without contact details we cannot get back to you.
  • Please do not share medical or other sensitive information in the chat.

5. Other data we collect as controller

  • Inquiries: your contact details and message, by email or WhatsApp.
  • Platform accounts:
    • name, email, phone and role;
    • password, stored in encrypted (hashed) form;
    • login times and an activity log.
  • Business settings: hours, services, FAQs and other content the business enters for its bot.
  • Billing: billing details and invoices. Card data is processed by a payment provider. We do not store full card numbers.
  • Technical data: IP address, browser type and cookies (see section 10).

6. End-customer data on the platform

Depending on the modules a business enables, the platform stores inquiries from that business's customers:

  • Chats and messages.
  • Leads, with an AI score and a short reason.
  • Contacts and their history with the business.
  • Appointments: service, time and status.
  • Outgoing messages: reminders, confirmations, review requests and follow-ups. Marketing messages go only to people who gave the business documented consent, and each one includes an opt-out.
  • Phone calls, if and when a voice agent is offered: each call will start by saying it is an AI assistant and that the call is recorded and transcribed. You can always ask for a human.

Medical data: the platform is not intended for medical information. For clinics and health providers, it is used only for appointments and leads, and the bots are set up not to ask about medical conditions.

Each business sees only its own data. We use this data only to operate, secure and support the service.

7. Artificial intelligence

  • The bots and the lead scoring use third-party language models through the Vercel AI Gateway. The default model is currently Google Gemini.
  • Conversation content is sent to the model provider only to generate a reply.
  • According to Vercel's published policy, the Gateway does not retain prompts or responses and does not use them for training.
  • We do not use conversations, recordings or end-customer data to train AI models.

8. Why we use data

  • To provide, operate and secure the website and the platform.
  • To contact you, and to give you a recommendation and a quote.
  • To manage the relationship, support and billing.
  • To send service messages.
  • To send marketing, only with your explicit consent.
  • To produce aggregate statistics that identify no one.
  • To comply with the law.

9. Who we share data with

Service providers that process data for us, bound by confidentiality and security obligations:

  • Vercel and Neon: hosting for the website, the CRM, the platform and the databases.
  • Google, via Vercel AI Gateway: the language model behind bot replies and lead scoring.
  • Zoho: business email.
  • Jotform: contact form on the Alpha website.
  • Meta (WhatsApp): WhatsApp messages, when enabled.
  • ElevenLabs and Twilio: voice agent, if and when offered.
  • A payment provider and an email delivery provider: billing and sending messages.

We may also share data with:

  • The business you contacted, for the data described in section 6.
  • Authorities, where the law requires it.
  • A buyer or a merging entity, subject to this policy.

We do not sell personal data.

10. Where data is stored, and cookies

Location: data is stored and processed on servers of cloud providers in the EU and/or the US. The CRM that holds website leads is hosted in Frankfurt, in the EU. When data is transferred outside Israel, the transfer follows Israel's Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and relies on the providers' contractual commitments to protect it.

Cookies: we use only essential cookies, such as for logging in to the platform. If we add analytics or advertising tools, we will update this policy and ask for your consent where the law requires it.

11. How long we keep data

  • Leads and inquiries, including the AI check: up to 24 months after the last contact.
  • Account and billing data: for the term of the relationship, plus 7 years.
  • End-customer data: as the business instructs. When the relationship ends, we return or delete it within 30 days.
  • Chat IP addresses: 90 days.
  • Access logs: 24 months.
  • Call recordings, if any: 90 days.

12. Security

We follow Israel's Privacy Protection (Data Security) Regulations, 5777-2017. Our measures include:

  • encryption in transit;
  • hashed passwords;
  • separation between businesses;
  • access permissions;
  • rate limiting;
  • an audit log.

No security is perfect. If a security incident happens, we will act as the law requires and notify those affected.

13. Your rights

  • You can review the data we hold about you (section 13 of the Law).
  • You can ask us to correct or delete data that is incorrect, incomplete, unclear or out of date (section 14 of the Law).
  • You can opt out of marketing at any time.
  • For data a business holds with us, please contact that business. We will help it handle your request.
  • If the GDPR applies to you, you also have the rights it grants.

Contact: info@roofellaai.com. You can also complain to Israel's Privacy Protection Authority: https://www.gov.il/en/departments/the_privacy_protection_authority

14. Minors and changes

Minors: the service is for businesses. We do not knowingly collect data about anyone under 18.

Changes: we will update this policy from time to time and show the date of the latest update. We will announce material changes on the website, and email them to businesses.

15. Contact

A.S Alpha Marketing Ltd (ע.ש אלפא שיווק בע"מ), company no. 516422334
18 Abba Even Blvd, Herzliya Pituach, Israel
info@roofellaai.com