1. Who we are and the roles we perform
1.1Trust B Investor Ltd., Israeli company number 515859346, of 65 Menachem Begin, Tel Aviv-Yafo, operates Uniforce. Contact privacy@uniforce.work for privacy matters.
1.2For website enquiries, our account administration, billing and business communications, we determine the purposes of processing and act as a controller (including a controller of a database under applicable Israeli law). For personal data a business Customer processes through its Agents, we generally act on its instructions as processor or holder; the DPA governs that processing. A Customer may itself process data on behalf of another controller.
2. Information and sources
2.1Information you submit through enquiry, demo, waitlist or partner forms can include name, business email, company, role, company size, telephone number, website, message and your selections concerning contact or marketing. Forms also submit the source page and campaign parameters where present. We receive information directly from you and from people acting for your business.
2.2Operating a website or account can involve device, network and request information, preference records, account identifiers, support correspondence and security events. The cookie policy distinguishes the browser storage identified in this website from optional services. Do not submit confidential customer records or sensitive personal data in a general enquiry form.
2.3For platform processing, the categories depend on the Customer’s configured use and can include business contacts, messages, documents, recordings, transcripts, prompts, outputs and execution records. These categories describe possible processing, not a statement that every feature is enabled or that every type is collected for every user.
3. Purposes and legal grounds
3.1We use enquiry details to respond, arrange demonstrations, assess partnership requests and maintain related business records. We use account and service information to deliver contracted services, manage support and billing, prevent misuse and comply with legal duties. Required fields are needed to handle the requested interaction; providing information is voluntary, but we may be unable to fulfil the request without it.
3.2Where European or UK data protection law applies to our controller processing, the grounds below apply to the stated activities. A contract with your employer is not treated as a contract with you. When we rely on legitimate interests, we consider the effect on your rights and apply appropriate safeguards. Where consent is required, we obtain it for the specific activity; consent is not assumed merely because you continue to browse.
3.3Marketing choices are separate from requesting service contact. Where required, we send marketing only with the necessary consent. You may withdraw marketing consent or unsubscribe without affecting a lawful request for support or previous lawful processing. We do not obtain a blanket permission to sell data or create advertising audiences from acceptance of service terms.
| Purpose | Information involved | Ground where European or UK rules apply |
|---|---|---|
| Responding to requested enquiries | Contact and company details, message and enquiry preferences. | Requested pre-contractual steps where you are the prospective contracting party; otherwise legitimate interests in responding to business enquiries. |
| Business account administration and support | Business contacts, account details and support correspondence. | Contract where you are a party; otherwise legitimate interests in administering and supporting the customer relationship. |
| Billing and mandatory records | Billing information, invoices and transaction references. | Legal obligations for mandatory records; contract or legitimate interests for billing administration, as applicable to the relationship. |
| Security and misuse prevention | Network, request, account and security-event records. | Legitimate interests in safeguarding the service and legal obligations where applicable. |
| Optional marketing and browser technologies | Contact details, preferences and relevant device records. | Consent where required. Any other lawful ground for a particular marketing use will be described before that use. |
4. Recipients and connected systems
4.1Authorized personnel and contracted providers may process information as needed for hosting, support, communications, security and business administration. Website enquiries may be delivered to the Company’s internal customer-management or intake systems so that the appropriate team can handle the request. Access is limited to the relevant business purpose.
4.2If you choose an external appointment booking service after submitting an enquiry, that service can receive data directly from your browser. Its own privacy notice applies to its independent processing. Platform integrations chosen by Customers may transfer data to those Customers’ providers within their configured permissions.
4.3We may disclose information where required by law, to protect legal rights, or in a business reorganization subject to appropriate safeguards. Company subprocessors processing Customer data are governed by the DPA. The Subprocessors & External Services page lists the Company suppliers; the applicable configuration, contracting entities and processing schedule must be supplied before Customer Personal Data is processed. You may contact privacy@uniforce.work for information about recipients relevant to your information.
4.4The website loads a Figtree stylesheet and font resources from Google Fonts. Your browser contacts Google’s font-delivery service and sends the connection information needed to request those resources. This page-load request is distinct from optional analytics and marketing selections; the Cookie Policy identifies it alongside the website’s browser storage.
5. International processing
5.1Personal information may be processed outside the country in which you are located, including through remote access by authorized personnel. We apply the transfer requirements applicable to the information and the transfer, including applicable Israeli transfer regulations. Where European or UK rules apply, the relevant arrangement may rely on an applicable adequacy decision or appropriate contractual safeguards, together with supplementary measures where required.
5.2You may contact privacy@uniforce.work for information about the locations and safeguards applicable to your information and, where the law provides, a copy of the relevant safeguards, subject to appropriate redaction. For Customer-controlled data, the agreed processing schedule identifies permitted locations and transfer arrangements. Customer-directed transfers to Customer’s own provider are also governed by that provider relationship; this does not displace obligations that apply to our own processing.
6. Retention and security
6.1We retain personal information according to the purpose-specific criteria in Section 11 and any applicable contractual retention schedule. We apply technical and organizational measures appropriate to the nature of the information, the processing and applicable law. No method of transmission or storage can guarantee absolute security. Customer credential and permission responsibilities do not limit Company’s own security obligations.
7. Your rights and requests
7.1Depending on applicable law and our role, you may have rights to access or correct information, request deletion, restrict or object to processing, receive portable data, withdraw consent or complain to a competent authority. These rights are subject to applicable conditions and exceptions; this notice does not state that every jurisdiction provides identical rights.
7.2For information we control, contact privacy@uniforce.work. We may request proportionate verification and will respond within the time required by applicable law. For data controlled by a business Customer, contact that business; we will assist it as required by the DPA rather than independently determine its processing purposes.
7.3You may contact the Israeli Privacy Protection Authority or another competent supervisory authority where relevant. Withdrawal of consent does not affect lawful prior processing. We do not charge or restrict rights where applicable law prohibits doing so.
7.4Where applicable law provides this right, you may object to processing based on legitimate interests on grounds relating to your situation. You may object to use of your information for direct marketing at any time by using the unsubscribe method or contacting privacy@uniforce.work; we will stop that marketing use. Withdrawing consent must be as easy as giving it and does not affect processing lawfully carried out before withdrawal.
8. AI, children and updates
8.1Customer-configured AI processing, including any scoring or automated workflow, is governed by Customer’s instructions and applicable law. Customer must provide required information and safeguards to affected people. This notice does not claim that all AI decisions are explainable or that a particular statutory right exists in every jurisdiction.
8.2Uniforce is intended for professional business users and is not directed to children. This does not authorize a Customer to process children’s information without a lawful basis, appropriate notices and safeguards, and express support for the intended use. If you believe a child has provided information directly to us inappropriately, contact privacy@uniforce.work. We will investigate and take appropriate steps, including deletion where required, while preserving information that must lawfully be retained.
8.3We will publish changes with an updated version and date, give appropriate notice of material changes and obtain additional consent where required. A changed notice does not itself supply a new lawful basis for an incompatible use.
8.4Where we determine the purposes of an automated use of personal information, we remain responsible for the notices, lawful grounds and safeguards applicable to that use. Customer responsibility for its configured Agents does not transfer responsibility for our independently determined processing. Where applicable law requires information about a decision or a right to human review or challenge, we provide the required information and request channel.
9. Business accounts, administrators and support
9.1If your organization gives you access to Uniforce, its administrators may manage your account, grant or revoke permissions and review information available under their role. Your organization determines its own purposes for monitoring and operating its workforce. Ask it about its notices, internal policies and retention instructions. We do not treat an employer’s acceptance of service terms as your consent to every optional use of your personal information.
9.2When you contact support, we may receive the information you include, such as contact details, execution identifiers, attachments and diagnostic descriptions. Include only what is needed to resolve the issue. Access to Customer-controlled content for troubleshooting remains subject to the DPA and authorized support instructions; labelling an attachment as a support ticket does not remove those protections.
9.3Account and billing administration may involve business contact details, plan information, invoices, transaction references and payment status. The data collected depends on the actual payment arrangement.
10. AI interactions, action records and feedback
10.1Customer-configured Agents may process messages, documents, retrieved information and action results within the permissions granted by Customer. An action record can contain personal information, such as a recipient, message content, appointment, transaction reference or user approval. Customers determine whether those operations are appropriate and must provide the notices and safeguards required for the people affected.
10.2The Company’s contractual no-training commitment is set out in the AI & Agent Terms. It does not mean no content is processed by a model provider, no operational logs exist, or all providers follow identical retention rules. Customer-procured connections follow the relevant provider agreement. Company-procured processing remains subject to our own commitments and the DPA.
10.3Feedback can reveal parts of a conversation or attachment. Before sending it, remove unrelated personal or confidential information. Providing feedback does not grant an unrestricted right to use Customer content for general-purpose model training. Any separate contribution program requires specific information and the necessary permission.
11. Retention by purpose and deletion requests
11.1Enquiry records are kept while needed to handle the enquiry and any reasonably related follow-up, then deleted or minimized unless another lawful purpose applies. Account records are kept while needed to administer the relationship and resolve relevant issues. Financial and contractual records may be retained for applicable legal obligations. Security and dispute records are retained only as justified by the event, applicable limitation periods and legal requirements.
11.2Customer-controlled content follows the return and deletion schedule agreed under the DPA, including separate treatment of active data and protected backups. Stopping a subscription, removing a browser preference and deleting an external provider account are different operations. A request concerning one does not automatically delete records from all of them.
11.3If a legal obligation prevents deletion of particular information, we will restrict its use to the relevant retention purpose and explain the applicable exception where legally permitted. We do not retain all activity records indefinitely merely because they might be useful. Truly anonymous statistics may be retained separately; pseudonymized information remains personal information where a person can reasonably be identified.
11.4When the relevant retention purpose ends, we delete or irreversibly anonymize the information, subject to a lawful retention exception. A restricted backup retained under the applicable schedule is not used to resume ordinary processing.
11.5For Customer workspace data processed under the DPA, the default post-termination deletion ceilings are three months for active databases and nine months for isolated encrypted backups, subject to earlier valid deletion instructions and applicable legal requirements. Restricted security logs are retained for at least 24 months under the Company security policy and reviewed thereafter for continuing necessity. These periods do not automatically apply to independent website enquiries, accounting records or third-party accounts controlled by Customer; those are retained for their relevant purposes and legal requirements. Retention does not guarantee continued service access or an export window.
11.6Inactive Authorized User profile information is retained for up to 24 months after inactivity unless it remains necessary for an active Customer relationship. Unconverted prospect details are retained for up to 24 months or until an earlier valid removal request. Financial and billing records follow applicable accounting retention requirements, ordinarily seven years. Support email correspondence is retained for the engagement and up to 12 additional months, subject to necessary legal holds. Marketing contact records are retained for up to 24 months unless removal is requested earlier; minimal suppression records may remain to honor the opt-out. Recordings, where an enabled voice feature creates them, follow the disclosed recording settings and lawful instructions. These category-specific periods do not extend the DPA’s deletion ceilings for ordinary Customer workspace content.
12. Marketing preferences and external links
12.1You can unsubscribe from marketing using the mechanism provided in a message or by contacting privacy@uniforce.work. We may retain a minimal suppression record to respect that choice. Necessary service, security and contractual notices are separate from optional promotional messages. A request for a demonstration permits a response to that request; it is not a blanket subscription to unrelated campaigns.
12.2Links to booking, social, payment or other external services take you to services with their own practices. Choosing an external link can disclose ordinary connection information to its operator. Our Privacy Policy does not replace that operator’s notice. We do not represent that a provider shown in a product demonstration necessarily receives production data.
12.3Optional advertising or analytics technologies require the disclosures and choices described in the Cookie Policy before activation where applicable. Hashing an email address for an audience does not by itself make it anonymous or remove consent and opt-out requirements. This notice does not authorize an undisclosed advertising audience program.
13. How we handle a rights request
13.1Specify the relationship involved, the information or activity concerned and the right you wish to exercise. We may ask for proportionate information to confirm identity or authority and avoid disclosing information to the wrong person. Do not send a copy of an identity document unless we explain why a less intrusive method is insufficient.
13.2We will apply the response period and any lawful extension under the law governing the request. Where a request cannot be fulfilled in full, we will explain the relevant reason and available complaint route where required. We will not condition a mandatory right on buying another service or consenting to marketing.
13.3Israeli access and correction rights, and rights available under other applicable laws, differ in scope and conditions. Where European or UK rules apply, further rights may include erasure, restriction, portability, objection and safeguards for certain automated decisions. Applicability depends on the actual processing and law, not solely on nationality. Requests about Customer-controlled records are directed to that Customer with our assistance under the DPA.