Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how MLAIA Data Science Ltd. (Hebrew: המלאיה מדעני נתונים בע״מ; company registration / ח.פ. 516808078) ("MLAIA", "we", "us", or "our") handles personal data in connection with the NextDemand marketing website at nextdemand.ai (the "Site"). It covers only this marketing Site. The NextDemand product application, used by our customers under a separate agreement, is not covered by this policy.

Who we are

The Site is operated by MLAIA Data Science Ltd., a company incorporated in Israel (company registration / ח.פ. 516808078), registered at Shenef 4, Yavne, Israel 8151139. Our Data Controller and Privacy Officer is Yochai Edlitz. All privacy inquiries and data-subject requests are handled by email at yochai@mlaia.com (we do not publish a phone line for privacy matters).

What data we collect

The Site is a static, informational page. We ourselves run no analytics, set no cookies, use no tracking pixels, and submit no form data to any server. There are no social-media trackers, advertising networks, or behavioural analytics on the Site. We collect personal data in only two ways, and we describe both honestly below.

The Site's accessibility toolbar saves the display preferences you choose (such as larger text or high contrast) in your own browser's local storage — this is first-party data that stays on your device, is not a cookie, is never sent to us or anyone else, and is not used for tracking; you can remove it at any time with the toolbar's "Reset all" button or by clearing your browser's site data.

The free calculators under /tools (for example, the demand-pattern classifier, where you can paste demand histories) run entirely in your browser: anything you type or paste into them is processed on your device only — it is never transmitted to us, stored by us, or shared with anyone, and it disappears when you leave the page.

1. Information you volunteer by email

The only way the Site sends us information is the "Book a demo" link that opens your own email application (a mailto: link). If you choose to email us, we receive the information you send — typically your email address and the content of your message (which may include your name, company, and any details you decide to share). We do not require you to provide any particular information.

2. Technical data processed by our infrastructure providers

Like any website, the Site cannot be delivered to your browser without your device's technical data passing through our hosting and content-delivery infrastructure. This happens automatically and is inherent to how the web works. The providers involved are:

• Firebase Hosting (Google LLC / Google Ireland Ltd.), which serves the Site from servers located primarily in the United States and automatically records standard server-log data — your IP address, request metadata, and a timestamp;
• Cloudflare, Inc., which provides DNS and content-delivery / redirect services across its global network and processes connection metadata (including IP address) to route and secure requests;
• Google Fonts (Google LLC), from which the Site loads the Archivo typeface; Google receives your IP address when your browser requests the font files.

We do not use this technical data to build profiles of visitors, and we do not combine it with other data to identify you.

Why we use it and our legal basis

We use the information you email us solely to read and respond to your enquiry and to conduct the resulting business correspondence. Technical / server-log data is processed only to deliver, secure, and maintain the Site. We do not use any of it for automated decision-making or profiling.

For visitors in the European Economic Area and the United Kingdom, our legal bases under the General Data Protection Regulation (GDPR) are our legitimate interest in operating a secure website and responding to enquiries about our products, and your consent, given by voluntarily choosing to contact us. You may withdraw consent or object at any time (see "Your rights" below).

AI use

Messages you email us are read and answered by a human. They are not automatically processed by AI, profiled, or used to train AI systems.

Sharing and disclosure

We do not sell, rent, or trade your personal data, and we do not share it for third-party marketing. The only third parties that process data in connection with the Site are the infrastructure providers named above (hosting, CDN / DNS, and fonts), acting on our behalf or as necessary to deliver the Site, plus the standard email-service providers that carry any message you send us. We may also disclose information where required by law or to establish, exercise, or defend legal claims.

International transfers

MLAIA is based in Israel, which the European Commission recognises as providing an adequate level of data protection. Our hosting, CDN, and font providers (Google and Cloudflare) may process technical data on servers in the United States and other countries. Where such transfers involve personal data of EEA/UK individuals, they are covered by appropriate safeguards, which may include the EU Standard Contractual Clauses, the providers' SOC 2 controls, and certification under the EU-US Data Privacy Framework.

Security

The Site is served exclusively over HTTPS/TLS. It is a static site with no database and no user accounts, which materially reduces its attack surface. Access to any correspondence you send us is limited to authorised MLAIA personnel on a need-to-know basis.

Retention

We keep the emails and correspondence you send us for up to three years from submission, or until the end of any resulting business relationship, whichever is appropriate, after which we delete or archive them in the ordinary course. Technical server-log data is retained by our infrastructure providers under their own standard retention periods.

Your rights

Subject to applicable law, you have the following rights over your personal data:

• Access — to obtain a copy of the data we hold about you;
• Correction — to have inaccurate or incomplete data corrected;
• Deletion — to have your data erased;
• Portability — to receive your data in a portable format;
• Withdraw consent — at any time, without affecting prior processing;
• Restriction — to limit how we process your data;
• Objection — to object to processing based on legitimate interest.

To exercise any of these rights, email yochai@mlaia.com. We will acknowledge your request within 5 business days and respond to verified requests within 30 days (extendable to 60 days for complex requests, in which case we will tell you). There is no charge unless a request is manifestly unfounded or excessive.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data-protection supervisory authority.

Israeli Privacy Protection Law

If you are in Israel, the Israeli Privacy Protection Law, 5741-1981 — including Amendment 13, effective August 2025 — applies. You have the right to review personal information we hold about you and to request that inaccurate, incomplete, or outdated information be corrected or deleted. You may also lodge a complaint with the Israeli Privacy Protection Authority (PPA / רשות הגנת הפרטיות). Please direct requests to yochai@mlaia.com.

Children

The Site is intended for business audiences and is not directed at children under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.

Contact

Questions about this policy or your personal data? Email yochai@mlaia.com, or write to MLAIA Data Science Ltd., Shenef 4, Yavne, Israel 8151139.

MLAIA Data Science Ltd. · Shenef 4, Yavne, Israel 8151139 · yochai@mlaia.com