Privacy Policy — Levion Clinic

Last updated: October 1, 2026 · Version 2026-10-01

This is an English translation of the Hebrew Privacy Policy (עברית). If there is any inconsistency between the versions, the Hebrew version prevails.

Levion (the "Company", "we" or "us") respects your privacy. This policy explains what personal information is collected through the levion.tech website, the contact and demo-scheduling forms, and the lead forms we run on Meta platforms (Facebook and Instagram) — what it is used for, who it is shared with, and what rights you have. The Hebrew version of this policy is written in the masculine form for convenience only and is addressed to all genders.

Important: this policy applies to the website and to our marketing activity and, in addition — in section 15 — to the messages that clinics send and receive through the system. Medical information and patient information managed within the Levion Clinic system belongs to the client clinic, which acts as the database owner (the data controller), and the Company processes it solely on the clinic's behalf — as set out in the Terms of Use and in the service agreements with each clinic.

1. Who we are and contact details

The controller of the information collected under this policy is Levion CS and T — a company registered in Georgia, whose registered address is Givi Kartozia 10, Tbilisi, Georgia ("Levion"), the operator of the Levion Clinic system — a clinic management system for clinics and practices in Israel.
Email for privacy matters: alexander@levion.tech · Phone: +972-55-771-2985 · +972-53-715-6553 · Website: levion.tech

2. What information is collected

Demo-scheduling form on the website: full name, clinic name, number of employees, doctors and branches, phone, email, the content of your enquiry and the language of the enquiry.
Lead forms on Facebook and Instagram (Instant Forms): full name, clinic name, clinic field, phone and email — as you provided them in the form. This information is provided to us by Meta in accordance with the consent you gave when submitting the form and with Meta's privacy policy.
Direct contact: if you contacted us by email, phone or WhatsApp — the details of your enquiry and its content.
Technical information: the website's hosting servers automatically log basic access data (such as IP address, browser type and access times) for security and operational purposes. The website does not run analytics or advertising tools that collect identifying information.

3. Providing information — of your own free will

You are under no legal obligation to provide us with any information, and providing it depends on your free will and consent. However, without contact details we will not be able to get back to you, schedule a demo or send you information you requested.

4. Purposes of use

Responding to your enquiry and scheduling a demo of the system;
Contacting you regarding Levion's services, including information about plans, prices and features relevant to your clinic;
Sending updates and marketing content — subject to your consent and to your right to unsubscribe at any time (section 6);
Managing, securing and improving the website and our marketing activity;
Complying with our obligations under law.

We do not sell or rent personal information to anyone.

5. Sharing information with third parties

Personal information is transferred only to operational providers that help us operate the website and our marketing activity, and only to the extent necessary:

Hosting and infrastructure: the website and its forms are hosted with cloud hosting providers (currently Netlify), which store the enquiries submitted through the website;
Meta: when you submit a lead form on Facebook or Instagram, the information is first collected by Meta in accordance with its policy and is then transferred to us;
Email and communication services that we use to respond and to send messages.

Beyond that, information will be disclosed to a third party only if we are required to do so by law, a court order or a demand of a competent authority, for the purpose of exercising or defending legal rights, or in the context of a merger or transfer of business — and subject to the continued application of this policy.

6. Direct mail and marketing messages

Marketing messages are sent only in accordance with the law, including section 30A of the Communications Law (Telecommunications and Broadcasting), 5742-1982, and the provisions of the Protection of Privacy Law regarding direct mail.
You may remove yourself from the mailing list at any time — via the unsubscribe link in the message, by replying to the message or by writing to alexander@levion.tech — and the removal will be carried out free of charge and within a reasonable time.
Under the Protection of Privacy Law, you also have the right to demand that information used for direct mail be deleted from our lists.

7. Data retention period

Information provided for contact and marketing purposes is kept for as long as it is needed for the purposes for which it was collected — that is, for as long as a business relationship or an active interest in the service exists between us — or until you request its deletion, whichever is earlier. Information required to comply with legal obligations or to defend legal rights may be kept for a longer period, to the extent the law requires or permits.

8. Your rights — access, correction and deletion

Under section 13 of the Protection of Privacy Law, 5741-1981, you have the right to inspect the information about you held by us;
Under section 14 of the Law, you have the right to request correction or deletion of information that is not correct, complete, clear or up to date;
You have the right to withdraw your consent to receive direct mail at any time (section 6).

To exercise your rights, contact alexander@levion.tech. We will respond to your request promptly and within the time limits set by law. You also have the right to contact the Privacy Protection Authority on any matter relating to the handling of personal information.

9. Information security

We implement organizational and technological security measures that comply with the Protection of Privacy Law, 5741-1981 (including Amendment 13) and the Protection of Privacy Regulations (Data Security), 5777-2017 — including encryption in transit, restriction of access to information and logging of access. However, no system can guarantee absolute immunity, and we therefore work to minimize risks and to handle any incident promptly.

10. Cookies and embedded content

The website uses only essential cookies required for its proper operation (such as saving your language preference). The website does not use advertising or tracking cookies.
Some pages embed YouTube videos in privacy-enhanced mode (youtube-nocookie). Playing a video may result in information being collected by YouTube in accordance with Google's privacy policy.
Links to external websites (including our social media pages) are subject to the privacy policies of those websites.

11. Minors

The website and the service are intended for business and professional use by clinics and their staff, and are not directed at minors. We do not knowingly collect information about minors; if such information is provided to us — we will delete it once we become aware of it.

12. Users outside Israel

The service is intended for clinics in Israel, and information is processed in accordance with Israeli law. If you browse from abroad, please note that information may be stored with cloud providers operating outside your country. The principles of this policy — transparency, data minimization, not selling information, and the rights of access, correction and deletion — apply to all users, and residents of the European Union or the United States are welcome to contact us with any request in accordance with the law that applies to them. An English summary appears in section 16.

13. Changes to this policy

We may update this policy from time to time. The current version will always be published on this page, with the date of the update shown at the top. A material change in the way information is collected or used will be brought to your attention by a prominent notice on the website.

14. Contact and complaints

For any question, request or complaint regarding privacy:
Levion CS and T · Givi Kartozia 10, Tbilisi, Georgia
Email: alexander@levion.tech · Phone: +972-55-771-2985 · +972-53-715-6553 · levion.tech

15. Messaging on the Levion platform (WhatsApp, Messenger, Instagram, SMS)

This section applies to the messages that clinics send and receive through the Levion Clinic system.

Messaging on the Levion platform (WhatsApp, Facebook Messenger, Instagram Direct, SMS)

Who is responsible. Clinics that use the Levion platform (the "clinic") are the controllers of their patients' and leads' personal data: the clinic decides whom it messages, what it sends and how long it keeps records. Levion CS and T processes these messages only on the clinic's behalf and on its instructions, as a processor under the data-processing agreement with each clinic.

How messages travel. When a clinic connects its channels to Levion, messages are sent and received through:

WhatsApp: Meta's WhatsApp Business Platform (Cloud API), using the clinic's own WhatsApp Business Account;
Facebook Messenger: Meta's Messenger Platform, for the clinic's Facebook Page;
Instagram Direct: Meta's Instagram messaging API, for the clinic's Instagram professional account;
SMS: 019 Mobile (Israel).

Meta and 019 also process the messages under their own terms and privacy policies when they deliver them.

What we store.

the message text. Attachments (photos, documents, voice messages) are stored with the conversation, malware-scanned, available only to the clinic, and deleted with it; files over 25 MB stay on the sender's phone and only a note of their type is stored;
sender and recipient identifiers: a phone number, or the page-scoped ID (Messenger) or Instagram-scoped ID that Meta assigns;
timestamps, and delivery and read status;
the person's display or profile name, if Meta provides it.

We do not request any other data from a person's Meta profile.

Why we use it. Only to let the clinic read and answer all of its patient and lead conversations in one inbox inside Levion; to send the appointment reminders and other service messages the clinic has set up and the patient agreed to receive; and to operate, secure and fix the service (for example, investigating a failed delivery).

What we do not do.

We do not use message content for advertising or marketing, and we do not sell it or share it with data brokers.
We do not use message content to train artificial-intelligence models, ours or anyone else's.
Automated replies (optional, enabled by each clinic). A clinic may switch on an automated assistant that answers questions from the clinic's own approved information and helps book, reschedule or cancel appointments — always with an option to reach a person, and never giving medical advice. The relevant messages are then processed by an AI service provider under a data-processing agreement, with identifying details removed where possible. It is off unless the clinic enables it.
Levion staff do not read message content, except when the clinic asks for support or the law requires it.

Where it is stored and for how long. Data is hosted on Google Cloud; for clinics in Israel, in the Israel region (Tel Aviv). It is encrypted in transit and at rest, and each clinic's data is kept apart from every other clinic's. Messages are kept while the clinic's account is active, according to the clinic's settings and any legal duty to keep medical records. When a clinic asks us to, or when its account ends, we delete its messaging data within 90 days, except data the law requires us to keep.

How to delete your data

Patients and leads: contact the clinic you messaged — the clinic controls your data and can delete your conversation in Levion. You can also email alexander@levion.tech with the clinic's name and the phone number or account you messaged from. We will pass the request to the clinic and carry out the deletion on its instructions, unless the law requires the record to be kept (for example, a medical record). We reply within 30 days.
Clinics: disconnecting your Facebook Page, Instagram account or WhatsApp number in your Levion settings immediately stops new messages from flowing into Levion. To delete existing conversations, delete them in Levion or email us at the address above.
Data that Meta itself holds is managed through Meta's own settings and policies.

Contact. Levion CS and T, Givi Kartozia 10, Tbilisi, Georgia · alexander@levion.tech

16. English summary

Effective date: October 1, 2026. The controller of the information covered by this policy is Levion CS and T, a company registered in Georgia, registered address Givi Kartozia 10, Tbilisi, Georgia ("Levion"; contact: alexander@levion.tech). This policy covers the levion.tech website and Levion's marketing activity, including lead forms we run on Meta platforms (Facebook and Instagram). Patient data managed inside the Levion Clinic system belongs to the clinic that operates it and is governed by our customer agreements, not by this policy.

What we collect: contact details you submit voluntarily — name, clinic name, clinic field and size, phone, email, and your message — via our website demo form or Meta lead forms; plus basic technical access logs kept by our hosting provider. The site runs no advertising or analytics trackers.
How we use it: to respond to you, schedule a demo, and send relevant information about the Levion service. We do not sell or rent personal information, and we have not sold personal information.
Who we share it with: operational service providers only — website hosting (currently Netlify), Meta (as the platform collecting lead forms), and the email/communication services we use — or where required by law.
Your choices and rights: you may request access to, correction of, or deletion of your information, and opt out of marketing at any time, by emailing alexander@levion.tech. We honor such requests regardless of your place of residence, including for California residents.
Do Not Track: the site does not track visitors across third-party websites and therefore does not respond to browser "Do Not Track" signals.
Changes: updates to this policy are posted on this page with a revised date at the top.