Privacy Policy
Last updated 8 September 2026 · Asaf Katz Advisory LTD (Israel)
Who we are
PromoterAI is operated by Asaf Katz Advisory LTD ("we", "us"), a company registered in Israel. We provide research and outreach tools for event promoters. Privacy questions and data requests: privacy@promoterai.co (or the contact on this site's footer).
What we collect from customers
Account data (email and authentication identifiers), billing data (handled by Stripe; we never see card numbers), workspace members, saved audiences, monitors, campaign definitions, contacts, suppression records, provider event receipts, and usage metering. Password verification is handled by Supabase, and optional Google sign-in is handled by Supabase and Google. We do not store plaintext account passwords. If LinkedIn account connection is enabled for your workspace, authentication occurs in the provider-hosted flow. We never collect or store your LinkedIn password, browser cookies, or session tokens.
Professional data we process (people who are not our customers)
Our tools retrieve publicly available professional information: (1) a research directory of ~7,500 public professional voices (name, topic, region, public platforms, estimated reach — no photos in the directory), compiled from public sources; (2) on your instruction, public LinkedIn profile and post data (name, title, company, public photo, public posts and engagement) fetched at request time. We process this under legitimate interest in professional networking and event promotion; we do not build hidden consumer profiles, we do not sell this data to data brokers, and we honor removal on request.
Your removal rights (listed people)
If you appear in our directory or in a customer's retrieved results, you can request removal, correction, objection, or a copy — no account needed — at /remove. Verified requests are actioned within 5 business days and suppressed so they do not reappear.
How customer data is used
To provide the service, meter usage against your plan, and send you the digests you asked for. We do not sell personal data. AI features send the relevant text to OpenAI to generate your summaries/sequences.
Sub-processors
Supabase (database/auth and password-recovery email), Google (optional sign-in), Vercel (hosting), Stripe (payments), OpenAI (AI generation), Apify (public-web retrieval), Unipile (provider-hosted account connection and messaging when enabled), and Resend (email digests).
Retention
Customer data lives while your account is active. Retrieved profile data lives inside YOUR workspace (audiences/results) — delete an audience and it's gone; monitor digests keep only aggregate themes. Directory suppressions are permanent.
Your rights (customers)
Access, correction, deletion, portability, restriction, objection — email us and we'll respond within the legally required time. Cancel anytime; canceled accounts are deleted on request.
Important honesty note
Automated outreach and data retrieval on professional networks may conflict with those networks' terms of service, and use can restrict YOUR account on those platforms. Account-owner opt-in and conservative limits reduce operational risk but do not create permission from the platform.
Invited account contributors
When enabled, an invited LinkedIn account owner can verify their email or sign in with Google without joining a workspace or starting a subscription. This separate portal uses an isolated authentication session and a short-lived, secure HttpOnly cookie to preserve invitation continuity across sign-in. The server handoff stores hashes, not the invitation token. Opening an invitation or signing in does not grant account access: the owner must review and accept exact permissions. Sharing can be revoked separately from sign-out. Campaign-only inbox permission does not authorize unrestricted private inbox access or historical conversation training. Ordinary product onboarding remains a separate action.
Changes
Material changes are posted here with an updated date.