Last updated: 7 September 2026

lizo.ai ("lizo", "we", "our", or "us") values your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and protect information in connection with our marketing website at www.lizo.ai (the "Site") and the lizo application at app.lizo.ai (the "Application"). Together, the Site and the Application are referred to as the "Services".

1. Information We Collect

Information you provide

• Contact information. If you submit a form on the Site, we may collect your name, email address, company, and message.
• Account information. When you create an account in the Application, we collect your name, work email address, and organization.
• Content you submit. Property, asset, and portfolio information you upload or enter in order to run analyses.

Information collected automatically

• Usage data. Non-identifiable data such as browser type, IP address, pages visited, and time spent, collected via analytics tools and cookies for the purpose of operating and improving the Services.

Information from connected Google accounts

If you choose to connect a Google account to the Application, we access data from that account as described in Section 3 below. Connecting a Google account is optional and is never required to use lizo.

2. How We Use Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Services;
• Respond to your inquiries and provide customer support;
• Produce the analyses, reports, and outputs you request in the Application;
• Secure the Services and prevent abuse;
• Comply with legal obligations.

We do not use your information for advertising, and we do not sell your information.

Google user data is used only as described in Section 3 and for no other purpose listed in this section. Google user data is never used to develop, train, fine-tune, or improve any machine learning or artificial intelligence model, including lizo's own models.

‍

3. Google User Data

The Application offers an optional Gmail integration that helps you extract deal teaser details from your inbox. This section describes exactly what that integration accesses, how the data is used, and how you can revoke it. It applies only to users who explicitly connect a Google account.

3.1 Scopes we request

• https://www.googleapis.com/auth/gmail.readonly — read-only access to Gmail messages. This scope is required so that lizo can locate and read the specific messages you identify as deal teasers. lizo never sends, modifies, labels, or deletes email.

3.2 How we access and use Gmail data

• You configure a keyword (for example, "teaser"). lizo searches your mailbox for messages matching that keyword and only reads messages that match it.
• From each matching message, lizo extracts the asset name and the property address contained in the teaser.
• The extracted asset name and address are added to your workspace in the Application so you can analyze the property.
• Gmail data is used solely to provide this user-facing feature. It is not used for advertising, for profiling, for credit or lending decisions, or for any purpose you have not requested.

3.3 How we store Gmail data

• Message content — subject lines, message bodies, and attachments — is processed transiently in memory and is not stored by lizo.
• The only data retained from a message is the extracted asset name and property address, which are publicly available information about physical real estate, not personal information about you.
• OAuth tokens are stored encrypted at rest and are used only to perform the access described above.

3.4 How we share Gmail data

• Extraction runs entirely inside lizo's own infrastructure. No third-party large language model, AI service, or external API receives your email content.
• We do not sell, rent, or transfer Google user data to third parties.
• We do not transfer Google user data to others except as necessary to provide or improve this feature, to comply with applicable law, or as part of a merger or acquisition, in each case subject to the restrictions of the Google API Services User Data Policy.
• We do not allow humans to read your Gmail data, except where you give explicit consent for specific messages (for example, to troubleshoot a support request you have raised), where it is necessary for security purposes such as investigating abuse, or where required by law.
• lizo does not use Google user data to develop, train, fine-tune, or evaluate any machine learning or artificial intelligence model, whether operated by lizo or by a third party.

3.5 Limited Use disclosure

lizo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3.6 Revoking access and deleting your data

You can disconnect your Google account at any time:

• In the Application: open Settings → Connections and select Disconnect next to your Google account.
• In your Google account: visit myaccount.google.com/permissions and remove access for lizo.

When you disconnect, lizo deletes the stored OAuth tokens and stops all access to your mailbox. To request deletion of the asset names and addresses previously extracted into your workspace, email contact@lizo.ai with the subject line "Privacy Request".

3.7 Security of Google user data

Gmail data is protected by the following measures. All data is encrypted in transit using TLS 1.2 or higher. OAuth access and refresh tokens are encrypted at rest using AES-256 and are held in a managed key management service, with encryption keys rotated periodically. Message content, including subject lines, message bodies, and attachments, is processed only in volatile memory and is never written to disk, logs, backups, or caches. Access to production systems that handle Google user data is restricted to a minimal set of authorized personnel under least-privilege controls, requires multi-factor authentication, and is recorded in audit logs. lizo reviews these controls at least annually, and additionally upon any change to the Gmail integration.

4. Cookies

The Services use essential cookies for operation, and analytics cookies to help us understand usage. You can control your cookie preferences through your browser. By using the Services, you consent to our use of cookies as described here.

5. Data Sharing

lizo does not sell your information. We may share data with service providers acting on our behalf strictly as needed to operate the Services (for example, cloud hosting and analytics), and where required by law. All such providers are bound by confidentiality and data protection obligations. Google user data is subject to the additional restrictions set out in Section 3. Google user data is never shared with analytics, advertising, or marketing providers, and is never included in any dataset used for product analytics.

6. Data Security

We take reasonable technical and organizational measures to safeguard your data, including encryption in transit and at rest, access controls limiting employee access to production data, and regular review of our security practices.

7. Data Retention

We retain account and content data for as long as your account is active, and thereafter as required to comply with our legal obligations or resolve disputes. Gmail message content is not retained at all, as described in Section 3.3. You may request deletion of your data at any time by contacting us.

8. Your Rights

In accordance with Israeli privacy law (Amendment 13), you have the right to access, correct, or delete your personal information. To exercise your rights, please contact us at contact@lizo.ai with the subject line "Privacy Request".

International users and GDPR

If you are located in the European Union, the United Kingdom, or another region with data protection laws, you may have additional rights under the General Data Protection Regulation (GDPR) or equivalent local laws. These may include the right to restrict processing, to object to processing, and to request data portability. To exercise such rights, please contact us at contact@lizo.ai.

9. Children

The Services are intended for business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

10. Policy Updates

lizo may update this Policy from time to time. Changes are effective upon posting on this page, and the "Last updated" date above will be revised accordingly. Material changes affecting Google user data will be communicated to affected users before taking effect.

11. Contact

Questions about this Policy or about how we handle your data can be sent to contact@lizo.ai.

‍