Privacy Policy
Effective Date: August 9, 2026
Last Updated: August 9, 2026
1. Who We Are
Atorian Ltd. (“Atorian”, “we”, “our”, or “us”) is an Israeli company that develops AI-native cybersecurity advisory platforms and provides AI-powered cybersecurity advisory services to enterprises.
Atorian Ltd.
Company Registration No. 517023735
Miriam HaHashmonait 4, Tel Aviv, Israel
Email: privacy@atorian.ai
Atorian is the data controller for personal information collected through this website.
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, contact us, or otherwise interact with us through the website. It should be read together with our Terms of Use and our Cookie Policy.
Privacy by Design
As a cybersecurity company, Atorian is committed to incorporating privacy and security into the design and operation of its products, services, and internal processes. We believe that protecting information is fundamental to earning and maintaining our customers’ trust.
2. Scope of This Policy
This Privacy Policy applies only to information collected through the atorian.ai website and related marketing and business development activities.
It does not apply to information Atorian processes on behalf of enterprise customers in the course of delivering its platform and advisory services. That processing is governed by the applicable customer agreement, order form, statement of work, or data processing agreement. See Section 10 below.
3. Information We Collect
3.1 Information You Provide
Our website contact form asks for:
- Full name
- Business email address
- Company name
- The area of interest you select
- Any information you choose to include in your message
Only your name and business email address are required. If you contact us by email, schedule a meeting with us, or subscribe to updates, we will also receive whatever details you choose to provide, which may include your job title or telephone number.
Providing personal information is voluntary. Certain website features may not be available if you choose not to provide it.
We ask that you do not submit sensitive personal information, confidential business information, regulated data, or security-sensitive technical information through website forms. If you wish to discuss confidential matters, please contact us first so that we can establish an appropriate secure communication channel.
3.2 Information Collected Automatically
When you access our website, we automatically collect technical information, including:
- IP address
- Browser type and version
- Device and operating system information
- Language preferences
- Date and time of access
- Pages viewed and time spent
- Referring website
This information is used for operational, analytical, performance, and security purposes. See Section 7 and our Cookie Policy for details of the technologies involved.
4. How We Use Your Information
We use personal information to:
- Respond to inquiries
- Schedule meetings and demonstrations
- Communicate with you regarding a request you have made
- Provide information about our platform and services that you have asked for
- Operate, maintain, secure, and improve our website
- Analyze website usage and performance
- Detect, prevent, and investigate security incidents
- Establish, exercise, or defend legal claims
- Comply with applicable legal obligations
We use personal information only for the purposes for which it was collected, or for a purpose compatible with those purposes, as required under the Israeli Privacy Protection Law.
We do not sell or share your personal information, as those terms are defined under applicable United States state privacy laws, including the California Consumer Privacy Act as amended.
Retention
We retain personal information only for as long as necessary for the purposes described in this Policy, and thereafter as required to comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods are determined by the nature of the information, the purpose for which it was collected, and applicable legal requirements.
5. Legal Basis for Processing
Where the GDPR, the UK GDPR, or comparable law applies, we process personal information on one or more of the following grounds:
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and scheduling meetings | Steps taken at your request prior to entering a contract; legitimate interests |
| Website operation, security, and analytics | Legitimate interests in operating and securing our website |
| Non-essential cookies | Consent |
| Any future marketing communications | Consent |
| Legal and regulatory compliance | Compliance with a legal obligation |
Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms. You may object to such processing at any time (Section 12).
We also process personal information in accordance with the Israeli Privacy Protection Law, 5741-1981, as amended, including Amendment No. 13.
6. Artificial Intelligence and Your Data
Atorian builds AI-native cybersecurity advisory software. We are explicit about how that intersects with the personal information you provide to us.
6.1 How AI is used in relation to this website
Information submitted through this website may be processed using AI technologies solely to route and respond to inquiries, prepare for meetings and demonstrations, and improve our internal operations.
6.2 Model providers
Where AI processing involves a third-party model provider, that provider acts as our sub-processor. Information regarding our sub-processors is available upon request.
6.3 No training on your data
Atorian does not use personal information submitted through this website, or enterprise customer information, to train, fine-tune, or otherwise improve any artificial intelligence model.
Where we use third-party AI providers, we contract with those providers to process our data solely for the purpose of providing services to Atorian, and not to train or improve their models.
6.4 No automated decision-making with legal effect
We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, within the meaning of Article 22 of the GDPR.
6.5 Enterprise engagements
Data handling, model selection, retention, and residency for enterprise customer environments are governed by the applicable customer agreement and data processing agreement, not by this Policy.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies in the following categories:
- Strictly necessary technologies, required for the website to function and to maintain security. These cannot be disabled.
- Analytics and performance technologies, which help us understand how the website is used.
- Functional technologies, which support features such as meeting scheduling.
Our Cookie Policy lists each cookie and similar technology in use, together with its provider, purpose, and duration.
Where required by applicable law, we obtain your consent before placing non-essential cookies on your device. You can change or withdraw that consent at any time through the cookie settings link in our website footer.
You can also control cookies through your browser settings. Disabling certain cookies may affect website functionality.
8. Marketing Communications
We do not add contact details submitted through this website to marketing lists. Information you provide through our contact form is used to respond to your inquiry and to arrange any meeting or demonstration you have requested.
If we introduce marketing communications in the future, we will obtain your prior consent where required by applicable law, including the Israeli Communications Law (Telecommunications and Broadcasting), 5742-1982. Any such message will include a mechanism to opt out at no cost, and you may also opt out at any time by contacting privacy@atorian.ai.
Operational and transactional communications relating to a request you have made are not marketing communications and will continue regardless of any marketing preference.
9. Sharing Personal Information
We do not sell, rent, or trade personal information.
We share information only where necessary with trusted service providers that support our business, in the following categories:
- Website hosting and application platform
- Content delivery, storage, and web font providers
- AI and machine learning model providers
- Meeting scheduling platforms (Currently Calendly)
- Email and communications providers
- Customer relationship management platforms
- Analytics and website performance providers
We maintain appropriate contractual arrangements with our service providers. A current list of our sub-processors, naming each provider and the country in which it processes information, is available on request from privacy@atorian.ai.
These providers are authorized to process personal information only as necessary to perform services on our behalf and are contractually required to protect it and to process it only on our instructions.
We may also disclose information:
- To comply with applicable law, regulation, or legal process
- To respond to lawful requests from public authorities
- To protect our rights, property, or the security of our systems and users
- To investigate suspected fraud or security incidents
- In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections
10. Enterprise Customer Data
When Atorian provides its cybersecurity advisory platform or related professional services to enterprise customers, Atorian may process personal information solely on behalf of those customers. In those situations, Atorian acts as a processor (or service provider, where applicable), while the customer remains the controller of the information.
That processing is governed by the applicable customer agreement, statement of work, and data processing agreement, which set out permitted purposes, security measures, sub-processor arrangements, retention, deletion, and assistance with data subject requests.
If you are an employee, contractor, or other individual whose information is processed as part of a customer engagement, please direct your privacy requests to that organization. We will support our customer in responding.
11. International Data Transfers
Atorian Ltd. is based in Israel, and personal information collected through this website is processed in Israel. Israel benefits from a European Commission adequacy decision for transfers of personal data from the European Economic Area.
Our service providers may process or store personal information in other countries, including the United States. Where personal information is transferred to a country that does not benefit from an adequacy decision, we implement appropriate safeguards, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, and supplementary technical and organizational measures where required.
You may request a copy of the relevant transfer safeguards by contacting privacy@atorian.ai.
12. Your Rights
Subject to applicable law, you may have the right to:
- Request access to the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information
- Object to processing based on legitimate interests, including direct marketing
- Request restriction of certain processing
- Withdraw consent where processing is based on consent, without affecting prior lawful processing
- Receive a copy of your personal information in a portable format
- Lodge a complaint with your supervisory authority, or with the Israeli Privacy Protection Authority
United States residents
Depending on your state of residence, you may also have the right to know the categories of personal information collected, the purposes of collection, and the categories of third parties with whom it is shared; to request deletion or correction; to opt out of sale, sharing, or targeted advertising; and to be free from discrimination for exercising your rights. As stated in Section 4, we do not sell or share personal information and do not use it for cross-context behavioral advertising. You may designate an authorized agent to submit a request on your behalf.
How to exercise your rights
Contact privacy@atorian.ai. We may need to verify your identity before responding. We will respond within the timeframes required by applicable law, and in any event within 30 days of a verified request unless an extension is permitted.
13. Data Security
We implement administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction, in accordance with the Israeli Privacy Protection Regulations (Data Security), 5777-2017.
Personal information is encrypted in transit and at rest. Our further safeguards include, where appropriate, access controls, security monitoring and logging, vendor risk management processes, personnel security practices, and other administrative, technical, and organizational security measures appropriate to the nature of the information processed.
Enterprise customers may request additional information regarding Atorian’s security and privacy practices by contacting us at security@atorian.ai or privacy@atorian.ai.
No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Confidentiality
Atorian is committed to protecting the confidentiality of information entrusted to us. Information submitted through this website is accessible only to personnel and service providers who require access for legitimate business purposes and is handled in accordance with applicable confidentiality and security obligations.
14. Children’s Privacy
Our website is intended for business audiences and is not directed to individuals under the age of 18.
We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.
15. Third-Party Websites
Our website may contain links to third-party websites or services. We do not control and are not responsible for their privacy practices, security, or content. We encourage you to review the privacy policies of any third-party website you visit.
16. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or business operations.
The updated version takes effect upon publication on this page with a revised Effective Date. Where changes are material, we will provide advance notice through the website and, where we hold your contact details and applicable law requires it, by direct notification. Where a change requires your consent, we will obtain it before the change applies to you.
17. Contact Us
Atorian Ltd.
Company Registration No. 517023735
Miriam HaHashmonait 4, Tel Aviv, Israel
- Privacy Inquiries: privacy@atorian.ai
- General Inquiries: info@atorian.ai
- Security Contact: security@atorian.ai
- Privacy Contact: Menachem Barzilay, CEO