Privacy Policy

Last updated: October 22, 2026

This Privacy Policy explains how personal information is collected and used when you visit or interact with berkover.com (the "Site").

The Site is operated by Nati Berkover / Effective Product Management ("Nati", "EPM", "I", "me", or "my").

For privacy purposes, Nati Berkover / Effective Product Management is responsible for deciding why and how personal information collected through the Site is used.

1. Scope

This Policy applies to personal information processed through the public Site, including:

browsing and technical operation;
newsletter subscription;
contact and professional enquiries;
assessments and interactive tools;
meeting and scheduling requests;
Ask Nati and other AI interactions; and
cookie and analytics preferences.

It does not describe Nati's separate private/local NatiOS data environment except where a bounded public capability interacts with the Site.

2. Information You Choose to Provide

Contact and professional enquiries

When you contact me, I may collect:

your name;
email address;
company or organization;
role or job title;
telephone number, if you choose to provide it;
the subject of your enquiry; and
information contained in your message.

When you subscribe, I may collect:

your name, if you choose to give it;
email address;
the newsletters you chose;
subscription date;
consent record and source;
communication preferences;
delivery, bounce, and complaint information;
unsubscribe status; and
email engagement information such as opens or link clicks, if those features are enabled.

Assessments and interactive tools

When you use an assessment or similar tool, I may collect:

your email address;
company or professional information;
answers you provide;
resulting scores, classifications, or recommendations; and
technical information associated with the session.

An assessment may require a business email address as an eligibility or qualification criterion.

Providing an email address for an assessment does not automatically subscribe you to the newsletter.

Meeting and scheduling requests

If you request access to availability or request a meeting, I may collect:

your name and contact details;
company or professional information;
the reason for the requested meeting;
request approval or rejection status;
availability information shown to you;
the time you request; and
information reasonably necessary to coordinate or confirm the meeting.

The public Site is designed to expose only approved or bounded availability information, not Nati's underlying private calendar contents.

Ask Nati and AI interactions

Ask Nati is not available in V1. The following applies only if AI features are separately made available.

If you use the Site's AI assistant, I may process:

the questions or prompts you submit;
AI-generated responses;
relevant conversation context;
feedback you provide;
associated technical metadata; and
information used to prevent abuse, investigate errors, or improve the feature.

The public AI assistant is intended to answer from approved public information. It is not intended to provide unrestricted access to private email, private calendar content, financial data, private files, or other private personal information held by Nati.

Please do not submit confidential, highly sensitive, secret, or legally restricted information through the AI assistant.

3. Information Collected Automatically

When you use the Site, servers and supporting infrastructure may automatically receive technical information such as:

IP address;
date and time of requests;
browser and device information;
requested pages and URLs;
referring page;
basic diagnostic, performance, and security information; and
cookie or similar identifiers where used.

This information may be used for operation, security, fraud/abuse prevention, debugging, performance measurement, and aggregate analysis.

We use Plausible Analytics to understand aggregate traffic and Site usage. Plausible is configured as a privacy-preserving analytics service: it does not use analytics cookies, browser local storage, cross-site tracking, or persistent visitor identifiers. IP address and User-Agent information associated with an HTTP request may be processed transiently by Plausible to derive information such as approximate location and a short-lived daily visitor identifier, but the raw IP address and full User-Agent are not stored by Plausible.

The Site also uses a first-party product analytics layer to measure interactions with Site features and content. This layer is designed to be sessionless and not to store visitor IP addresses or persistent visitor identifiers.

We do not intentionally send names, email addresses, contact details, or other directly identifying information to Plausible, or include such information in analytics event properties.

4. Why Personal Information Is Used

Personal information may be used to:

operate, secure, and maintain the Site;
respond to enquiries;
evaluate potential consulting, advisory, speaking, training, or collaboration opportunities;
provide assessments and display their results;
process meeting and scheduling requests;
operate and improve the AI assistant;
send newsletters and marketing communications you have chosen to receive;
measure aggregate Site usage, understand how content and features are used, improve the Site and its functionality, and evaluate product performance using privacy-minimized analytics;
diagnose technical problems;
prevent abuse and unauthorized access;
maintain records of consent and unsubscribe requests;
comply with legal obligations; and
establish, exercise, or defend legal claims where necessary.

Personal information is not sold.

5. Whether Providing Information Is Mandatory

In general, providing personal information through the Site is voluntary.

Certain information may be necessary to provide a feature you request.

For example:

without an email address, the newsletter cannot be delivered;
without required assessment information, the assessment may not be available;
without sufficient identity and context, a meeting request may not be evaluated;
information contained in an AI prompt is necessary for the AI system to respond to that prompt.

Required fields should be identified in the relevant interface.

Where the EU General Data Protection Regulation applies to a particular processing activity, information may be processed on one or more of the following legal bases:

Consent - where required, for newsletter or marketing communications and for any future non-essential tracking technology that requires consent;
Steps requested before entering a contract / performance of a contract - where you ask about or receive a professional service;
Legitimate interests - for operating, securing, understanding, and improving the Site — including privacy-minimized measurement of Site usage and product interactions — responding to professional enquiries, preventing abuse, improving services, and maintaining appropriate business records, where those interests are not overridden by your rights;
Legal obligation - where retention or disclosure is required by applicable law.

You may withdraw consent at any time for future processing based on consent.

Marketing communications are sent when you have chosen to receive them or where otherwise permitted by applicable law.

You may unsubscribe at any time using the unsubscribe mechanism included in the message.

Providing contact information for an assessment, contact request, or scheduling request does not, by itself, subscribe you to marketing.

A limited suppression record may be retained after unsubscribe so that your opt-out can continue to be respected.

8. Cookies and Similar Technologies

The Site may use strictly necessary cookies or similar browser storage for functions such as security, maintaining necessary application state, and remembering that you have dismissed or acknowledged privacy notices.

Our current analytics implementation does not use analytics cookies or persistent browser identifiers. Plausible Analytics does not use cookies or local storage to identify visitors, and our first-party product analytics layer is designed not to create a persistent visitor identifier.

Accordingly, the Site does not currently require you to accept analytics cookies before analytics operate. The privacy notice displayed by the Site is informational rather than an analytics-consent mechanism.

If we introduce optional cookies, advertising technologies, persistent tracking identifiers, or other technologies for which consent is legally required, those technologies will not be activated until the required consent has been obtained.

The Site does not intend to use marketing or behavioral-advertising cookies in V1.

For more information, see the Cookie Policy.

9. Service Providers

Third parties may process information on my behalf where reasonably necessary to provide or secure the Site.

Expected provider categories include:

website hosting and infrastructure;
database and backup infrastructure;
email delivery;
AI model/infrastructure providers;
analytics, if enabled;
monitoring and security;
professional advisers where necessary.

The primary public website infrastructure is hosted in Germany.

Newsletter delivery is planned through Amazon Simple Email Service (Amazon SES).

AI and other service providers may change as the Site evolves.

Providers should receive only information reasonably necessary to perform their role.

I may also disclose information where required by law, to protect rights or security, or in connection with a genuine business restructuring or transfer.

10. Artificial Intelligence Providers

Some AI functionality may rely on third-party model providers or infrastructure.

Relevant portions of an AI interaction may therefore be transmitted to the provider used to generate or process the response.

The Site is designed so that public AI functionality receives approved public information rather than unrestricted access to Nati's private data sources.

The provider used may change over time. Material changes affecting privacy will be reflected in this Policy or related notices.

11. International Processing

The Site is operated from Israel and its primary public infrastructure is hosted in Germany.

Some service providers may process information in other jurisdictions.

Where applicable law requires safeguards for international data transfers, reasonable measures will be used to support those requirements.

No promise is made that all Site-related data remains exclusively in Germany or the European Union unless a specific feature states otherwise.

12. Retention

Personal information is retained only for as long as reasonably necessary for the purpose for which it was collected, subject to security, legal, and operational requirements.

The intended V1 retention schedule is:

ordinary application/security logs: generally up to 90 days;
raw Ask Nati conversation turns: deleted from active storage within 24 hours of creation (an hourly deletion job), with the conversation container expiring 24 hours after its most recent turn; deleted data may remain in encrypted backups for up to 35 days under backup rotation, and documented security/legal holds are exceptional;
privacy-minimized, non-identifying analytics derived from an Ask Nati interaction (see Sections 3 and 8): retained for longer than the raw conversation, for product and quality analysis — these contain no question or transcript, no generated answer text, no IP address, and no persistent identifier;
analytics data: retained only as long as reasonably useful for the purposes described below this schedule, and designed not to retain raw IP addresses, full User-Agent strings, or persistent visitor identifiers;
unconverted contact enquiries: generally up to 24 months after the last meaningful interaction;
assessment records: generally up to 24 months after the last meaningful interaction;
unsuccessful or expired scheduling requests: generally up to 24 months after the last meaningful interaction;
newsletter subscriber information: while you remain subscribed;
suppression/unsubscribe information: as long as reasonably necessary to continue honoring the opt-out;
rolling backups: deleted records may remain for up to approximately 35 additional days before backup expiry.

Commercial, contractual, accounting, security, or legal records may be retained for longer where reasonably necessary or required by law.

Aggregated or properly anonymized information that no longer identifies an individual may be retained for longer.

Analytics data is retained only for as long as reasonably useful for understanding Site and product usage, evaluating historical trends, improving the Site, and meeting legitimate operational needs. Plausible analytics are designed not to retain raw IP addresses, full User-Agent strings, or persistent visitor identifiers. First-party product analytics — including the privacy-minimized analytics derived from Ask Nati interactions — are designed not to retain visitor IP addresses or persistent visitor identifiers. These are privacy-minimized, non-identifying per-interaction records (not "aggregated" data); true aggregate statistics may in turn be derived from them and retained for longer-term historical analysis. If analytics information constitutes personal information, it is subject to the applicable personal-data retention and deletion requirements described in this Policy.

13. Security

Reasonable technical and organizational measures are used to protect personal information against unauthorized access, alteration, disclosure, loss, or misuse.

Measures may include:

encrypted network transport;
access controls;
restricted administrative access;
secret isolation;
service separation;
security logging;
least-privilege access;
backup controls.

No internet-connected system can be guaranteed to be completely secure.

14. Your Privacy Rights

Depending on the law that applies to you and to the relevant processing, you may have rights such as:

requesting access to personal information about you;
requesting correction of inaccurate, incomplete, unclear, or outdated information;
requesting deletion where applicable;
requesting restriction of processing where applicable;
objecting to certain processing where applicable;
requesting portability where applicable;
withdrawing consent for future processing based on consent;
unsubscribing from marketing communications; and
complaining to an applicable privacy/data-protection authority.

A request may require reasonable identity verification before information is disclosed or changed.

To make a privacy request, email:

info@pmeffective.com

15. Children

The Site is intended primarily for professionals, organizations, and adults interested in product, technology, AI, data, and related professional subjects.

It is not designed to solicit personal information from children.

If you believe a child has submitted personal information inappropriately, please contact me.

16. Third-Party Websites

The Site may contain links to third-party websites.

This Privacy Policy does not govern those third parties. Their own policies apply to their services.

17. Changes to This Policy

This Policy may be updated when Site functionality, service providers, data practices, or applicable law change.

The current revision date appears at the top.

Material changes may be highlighted or may trigger renewed consent where required.

18. Contact

Privacy questions or requests may be sent to:

Nati Berkover / Effective Product Management
Petah Tikva, Israel
Email: info@pmeffective.com