Introduction

Blue Castle. (“Blue Castle”, “we”, “our”, or “us”) operates the website www.bluecastle.ai (the “Website”), as well as our platform, and any other products, services, or offerings that we provide (collectively, the “Services”).

We are committed to protecting your privacy and ensuring the fair and lawful processing of your personal data in full compliance with applicable laws. For the purpose of this Policy, “Personal Data” is individually identifiable information, namely information that identifies an individual or may, with reasonable effort, identify an individual. This Privacy Policy (“Policy”) was designed to help you understand the information we collect, store, use, and share. It applies whenever you visit or interact with our website or Services. Please note that parts of this Policy may not apply to you, depending on the jurisdiction in which you reside and the applicable laws.

We recommend that you read this Policy and ensure you fully understand and agree to it. If you do not agree to this Policy, please discontinue and avoid using our Services. You have the right to cease using our Services at any time, pursuant to this Policy and our Terms. You are not legally required to provide us with any personal data, but without it, we will not be able to give you the best experience when using our Services.

Last date of modification: December 7, 2025

Consent and Voluntary Information Sharing

You are not legally obligated to provide personal information to us. Any personal information you share is done of your own free will. However, please note that without providing certain personal information, we may be unable to offer you our full range of services or website functionalities.

By using our website, platform, or related services, you consent to the collection and processing of your personal information as described in this Privacy Policy. Where required by applicable law, we will obtain your explicit consent before processing your personal information for purposes such as marketing communications or international data transfers.

 

Types of Personal Data Collected

We collect personal information that you provide voluntarily, or that is generated through your interaction with our website, platform, and related services. This may include:

Contact Information: Your full name, email address, phone number, and organization name (if applicable).

Account and Access Information: Login credentials, user preferences, and other details necessary to access secure areas of our platform.

Technical and Device Information: IP address, browser type, operating system, device identifiers, and usage data related to your interaction with our website and platform.

We do not request or process sensitive information (such as government-issued IDs, health data, or information relating to racial or ethnic origin) unless required by law.

 

Cookies and Analytical Data

Information collected through cookies and similar technologies is used to improve functionality, enhance user experience, and analyze usage patterns.

Cookies can generally be divided into the following categories:

Functional cookies are essential for the operation of our Services. They allow you to:

• Access secure areas of the Websites or Platform.
• Remember your preferences and settings.
• Recognize you when you return to our Services.
• Improve the speed and usability of searches and content display.
• Enable social media features or other interactive elements to function correctly.

If you disable functional cookies, some parts of our website may not work as intended.

Analytics and marketing cookies are used to understand how our Services are used and to deliver more relevant content to you. These may include cookies set by:

• Our third-party analytics providers monitor usage patterns, traffic, and performance.
• Social media platforms to enable sharing features and track engagement.

We do not control the collection or use of data by these third parties. You can manage your preferences for analytics and marketing cookies through your browser settings or by following the opt-out instructions provided by the respective providers.

 

Purposes of Data Processing

We process your personal information to respond to your inquiries, enable access to our platform, and deliver requested services; to enhance the functionality, security, and user experience of our website and platform; to send newsletters, updates, and marketing communications, but only upon obtaining your explicit prior consent where required by law; to meet applicable legal, regulatory, and contractual requirements, including data security obligations under Israeli law; and to detect, prevent, and investigate fraudulent or unlawful activities while maintaining the integrity of our systems.

We do not process your personal information for purposes incompatible with those described above without obtaining your explicit consent.

 

Consequences of Data Collection

If you choose not to provide certain personal information, you may experience limitations in accessing or using our services, including an inability to access specific features of our website or platform, reduced ability to receive comprehensive customer assistance, and non-receipt of newsletters, updates, or marketing communications where consent is required; however, these limitations do not affect your legal rights under applicable privacy laws.

 

Data Sharing and Transfers

We may share your personal information with trusted service providers who assist in operating our website, platform, and related services, subject to strict confidentiality, data security obligations, and contractual controls required by applicable law; in response to lawful requests from public authorities or law enforcement agencies, or as otherwise required by applicable law; and with third parties only where you have provided explicit and prior consent.

 

International Data Transfers

As a global digital platform, we may transfer your personal information outside your country of residence. We will only transfer your personal information to another country in accordance with applicable data protection laws and provided there is adequate protection in place for the data (e.g., through an adequate mechanism for the international transfer of personal information). We do not sell personal information under any circumstances.

 

Data Security

We implement comprehensive physical, technical, and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data at rest and in transit using industry-standard protocols, strict role-based access controls, and regular monitoring and testing of systems to identify and address potential vulnerabilities.

In addition, we maintain internal security policies and conduct employee training to ensure compliance with applicable data protection obligations. While we employ industry-standard security practices, please note that no method of transmission over the Internet or electronic storage is completely secure, and therefore, we cannot guarantee absolute immunity from potential security breaches. You are responsible for maintaining the confidentiality and security of your password or any other form of authentication used to access password-protected or secured areas of our platform.

 

User Rights

As a data subject, you have the right to request access to the personal information we hold about you, to seek correction of inaccurate or incomplete data, and to request deletion of your personal information, subject to applicable legal and contractual obligations. You may also request to restrict or object to the processing of your personal data where permitted by law and withdraw your consent for any processing activities that rely on your consent, such as marketing communications.

To exercise these rights, please get in touch with us using the details provided in the “Contact Information” section below, and we will respond in accordance with applicable legal requirements. These rights apply globally to all users of our services and will be honored in full compliance with Israeli law.

 

Data Retention

Subject to the conditions and restrictions set out under applicable laws, we will retain your personal information for as long as needed to fulfill the purpose for which we collected it and for a reasonable period thereafter to comply with audit, contractual or legal requirements or we need to meet obligations under applicable laws, including data security and record-keeping requirements. We may retain personal information in computer backup or archival copies generated in the ordinary course of our business.

Retention periods are determined based on the nature of the information, the purpose of processing, and applicable legal requirements. When personal information is no longer required, we will delete or anonymize it in accordance with our data security policies and applicable law.

 

Policy Modifications

We may update this Policy and its effective date at any time to reflect changes to our data processing practices, applicable legal or regulatory requirements, and our business operations. We encourage you to periodically review this Policy for the latest information about our privacy practices.

Any modifications will be communicated via our website with a minimum of seven (7) days’ notice before the updated policy becomes effective. Your continued use of our website and services following such notice constitutes your acceptance of the revised Privacy Policy.

 

Contact Information and Consent Acknowledgment

Contact Information
For all privacy-related inquiries or to exercise your rights under this Privacy Policy, please contact us at:
Email: info@bluecastle.ai

Consent Acknowledgment
By accessing or using our website, platform, or related services, you acknowledge that you have read, understood, and agreed to the terms outlined in this Privacy Policy.