Legal
Privacy Policy
This policy covers information collected on the LiberateOS marketing website. It does not cover patient session data — see our Trust page for the product's privacy architecture.
DRAFT — This privacy policy is a working draft pending formal legal review. It should not be relied upon as a final legal document. Last reviewed by the founding team: June 2026.
Last updated: June 2026 (draft — pending legal review)
1. Who we are
LiberateOS is a technology company based in Israel, building a B2B neurofeedback-based VR wellness platform for clinics. This website (liberateos.co.il) is our public marketing website.
For the purposes of this privacy policy, LiberateOS is the data controller for information collected on this website. Contact details for privacy inquiries are in Section 10.
2. What this policy covers
This policy covers personal information collected on this website — including through contact and demo-request forms, newsletter subscriptions, and any analytics we deploy.
This policy does NOT cover patient session data or brain data processed through the LiberateOS clinical product. That data is subject to separate data processing agreements between LiberateOS and its clinic customers (Providers), and is governed by our product privacy architecture described at /trust.
3. What information we collect
We collect the minimum information needed to operate this website and respond to inquiries:
- Contact and demo-request form submissions: name, clinic/organisation, role, email address, phone number (optional), and any message you include.
- Newsletter subscriptions: email address and consent record.
- Analytics data: if analytics are enabled (see Section 9), we may collect page view data, device type, and general location (country level). We do not use analytics that track individuals across sites.
- Server logs: standard web server logs including IP address and browser type, retained for security purposes for a limited period.
- Cookies: see Section 9 and our Cookie Policy.
4. How we use your information
We use information collected on this website for:
- Responding to demo requests and contact form submissions.
- Sending newsletter updates to subscribers who have given explicit consent.
- Improving this website and understanding how it is used (analytics, where enabled).
- Complying with legal obligations and protecting our legitimate interests.
5. Legal basis for processing
Under Israeli Privacy Protection Law (PPL) and GDPR-aligned principles, we process your information on the basis of: your consent (for marketing communications and non-essential analytics), the performance of a contract or pre-contractual steps (for demo requests and business inquiries), and our legitimate interests (for server security logs and website improvement).
6. How long we keep your information
We retain contact form and demo-request data for up to 24 months from the date of submission, or longer if required for an ongoing business relationship. Newsletter subscription data is retained until you unsubscribe. Server logs are retained for up to 90 days. We will delete your information earlier if you request it and there is no legal obligation to retain it.
7. Third parties and service providers
We use a small number of third-party service providers to operate this website, including our hosting provider (Vercel), form processing infrastructure, and any analytics provider. We do not sell your personal information to any third party.
Where we use third-party processors, we ensure appropriate data processing agreements are in place. A full list of subprocessors is available on request.
8. Your rights
Under Israeli privacy law and GDPR-aligned principles, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your information (subject to legal retention obligations).
- Withdraw consent for marketing communications at any time.
- Lodge a complaint with the Israeli Privacy Protection Authority or your local data protection authority.
To exercise any of these rights, please contact us using the details in Section 10.
9. Cookies and analytics
This website uses strictly necessary cookies for session management and may use privacy-respecting analytics to understand how the site is used. We do not use invasive tracking or cross-site identification. See our Cookie Policy for the full details.
Read the Cookie Policy →10. Contact us
For privacy inquiries, data subject rights requests, or questions about this policy, contact us at: contact@liberateos.co.il. We aim to respond to all privacy inquiries within 30 days.
Looking for our product privacy posture?
This policy covers the marketing website. Our product — which handles brain-derived EEG session data — has a separate, detailed privacy architecture described on our Trust page.
Read our Trust & Privacy posture →