Before connecting an AI tool to email or business systems, read the terms of service and check whether the vendor reserves the right to train on your data. In Israel, transferring customer or employee data to a vendor that trains models on it may violate privacy law and data protection regulations, even if the tool itself is convenient. If you are building an internal system, decide upfront on a clear policy for data access and model training, and document it in writing.
Instinct, a personal AI assistant still in private access, is raising privacy and security concerns despite its capabilities. The agent connects to email, messaging apps, calendar, and gains access to audio, location and device screen. The terms of service grant Instinct a broad perpetual and irrevocable license to access, store, replicate, transfer and modify user materials, including for training AI models.
What happens to your data
The terms specify that the agent can receive information from users’ screens. The license the user grants is irrevocable, meaning even if you delete your account, the vendor retains the right to continue using materials already collected.
This is not just a technical matter. When an AI assistant gains access to business email, it sees correspondence with clients, suppliers, employees, and internal documents. If the terms of service allow the vendor to train on these materials, your business information becomes part of a model that serves other users as well.
Why it matters for businesses in Israel
In Israel, privacy law and data protection regulations impose direct liability on the business owner who transfers data to a third party. If you connect an AI tool to systems containing personal information about customers or employees, you must ensure the vendor meets the conditions required by law.
A perpetual and irrevocable license for model training means you have no control over how the information is used after you transfer it. This can be a legal problem, not just a technical one. Companies developing internal AI systems need to decide upfront what privacy model they adopt, and document that decision in writing.
What to do this week
Before adopting a new AI tool, read the terms of service. Look for the words “training”, “model”, “perpetual”, “irrevocable”. If the vendor reserves the right to train on your data, ask whether there is an opt-out option or a version that does not train.
If you are building an internal system, document your data access policy and training policy in writing. Specify what data is retained, why, and for how long. This not only protects you legally, it also forces you to decide upfront what is actually necessary.
If you need help building a system that gives you full control over your data, see our guide on AI agents for business.
Frequently asked
A perpetual and irrevocable license means the vendor retains the right even after you delete your account. In practice, if the terms of service are written this way, you have no simple legal path to revoke the license. That is why it is important to read the terms before connecting, not after.
Read the terms of service and look for the words "training", "model improvement", "machine learning". If it is not specified, ask the vendor directly in writing. Serious vendors will give a clear answer and offer an opt-out option or an enterprise version that does not train.
A short call, no commitment, and we will tell you whether it is relevant to your business or not.