Privacy and cookie policy

01Who is responsible

PPLI.com is owned and operated by Talniri Ltd, a company incorporated in Israel. Talniri Ltd decides how and why the personal information described here is used. In GDPR terms it is the controller; under US state privacy laws it is the business.

PPLI.com is an educational research website on private placement life insurance, published in 11 editions. We do not sell insurance and we do not give personal financial, tax or legal advice.

Talniri Ltd is governed by Israel's Protection of Privacy Law, 5741-1981, as amended by Amendment 13, which took effect on 14 August 2025. Its regulator is the Israel Privacy Protection Authority. For all privacy matters, write to info@ppli.com. We do not publish a postal address.

02What we collect

Inquiry and consultation forms

Your name, email address and country of tax residence. If you choose to add them: phone number, investable-asset range, topic and a free-text message. We use these to answer your inquiry and to follow up on it.

AI research assistant ("Concierge")

The messages you type and the answers you receive, the planning answers you select, a session identifier and timestamps. If you ask us to follow up, also your name, email address and any note you add. Section 09 explains how the assistant works.

Professional (advisor) accounts and the 14-day trial workspace

Name, email address, firm, role, country, experience and the access you request. The content you save in the workspace: client references, planning facts, analyses, tasks, messages and course progress. Login and audit records, including IP address.

Email briefing

If you subscribe: your email address, your name if you give it, and your subscription status. Every email carries an unsubscribe link.

Technical data

Our server logs record IP address, browser and device data, the pages requested and the referring page. We derive an identifier from the IP address to limit repeated requests, and we read approximate country and city hints from network headers to show the right edition.

Your cookie choice

When you make a choice in the cookie banner, we store that choice with a random identifier, the language edition, your time zone, the banner version, the page path and the time. The record holds no name, no email address and no full IP address.

03Purposes and legal bases

US state privacy laws do not require a legal basis for each use, so the third column applies to visitors from the EEA, the UK and Switzerland, using the bases in Article 6 of the GDPR and the UK GDPR.

04Cookies

We use a small number of cookies and browser storage entries. Some are needed for the site to work. Others measure which pages are read and whether our advertising leads to visits and inquiries.

On a first visit from the EEA, the UK or Switzerland, a short notice explains that analytics is on and can be switched off, and asks whether you agree to advertising measurement. If you save a refusal, we respect it on every later visit.

When advertising measurement is allowed, Google may also set cookies on its own domains. We do not use personalized advertising or remarketing to individuals.

We use Google Consent Mode. If you refuse or switch off advertising measurement, Google tags still send cookieless signals for it without identifiers, which Google uses for aggregate modeling. The same applies to analytics only if you switch analytics off. They carry no cookie and no ID that recognizes you on a later visit.

Your browser's Global Privacy Control signal is treated as an opt-out of advertising measurement, with no further step needed. To change your choice at any time, use the "Cookie settings" link in the footer of every page or this button:

Cookie settings

05Who receives data

We share personal information only with these recipients, and only as far as each needs it:

• Our web hosting provider, which stores the site, the server logs and the databases.
• Google, for Google Analytics measurement, Google Ads conversion measurement, Google Fonts and YouTube videos embedded on some pages.
• Anthropic PBC (USA), which processes assistant conversations to generate replies.
• Our email service provider or providers, for replies and the email briefing.
• Professional advisers such as lawyers and accountants, where needed.
• Authorities, where the law requires it.

We do not sell personal information. We do not use your data to train AI models, and under its commercial terms Anthropic does not train its models on our API data.

California law treats disclosure for cross-context behavioral advertising as "sharing", even where no money changes hands. Google Ads conversion measurement may fall within that definition. You can opt out of it through Cookie settings or with Global Privacy Control, as section 04 explains.

06International transfers

Data is processed in Israel and by providers in the United States and other countries. For visitors from the EEA, the UK and Switzerland, transfers to Israel rely on adequacy: the European Commission recognizes Israel as providing adequate protection (Decision 2011/61/EU, confirmed in its January 2024 review), and the UK also recognizes Israel as adequate. Transfers to US providers rely on the EU-US Data Privacy Framework, its UK Extension or the Swiss-US Data Privacy Framework where the provider is certified, and otherwise on standard contractual clauses.

07How long we keep data

• Inquiries and related correspondence: up to 3 years after the last contact, unless a client relationship follows that requires longer, or the law requires longer.
• AI assistant conversations: up to 12 months.
• Advisor accounts and workspace content: while the account is active, then deleted within 12 months of closure or of trial expiry without conversion. Trial users can ask for earlier deletion.
• Email briefing: until you unsubscribe. We keep the unsubscribe record so that we honor it.
• Server logs: up to 90 days. Consent records: 3 years.
• Google Analytics: Google keeps measurement data for the retention period set in our account, at most 14 months.
• Backups roll over and are overwritten on a rolling basis.

08Your privacy rights

United States

California (under the California Consumer Privacy Act as amended by the California Privacy Rights Act) and the other states with general consumer privacy laws in force, among them Virginia, Colorado, Connecticut, Texas, Oregon, New Jersey, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, give residents the following rights. The details vary from state to state. We honor these requests from any US reader, whether or not a particular state law applies to us.

We respond within 45 days. If we need more time, we will tell you within that period and may extend by a further 45 days where the law allows. We verify requests by matching them with information we already hold, usually the email address you used with us. If we decline a request, we explain why, and where your state provides a right to appeal you may appeal by replying to our decision. California residents may also contact the California Privacy Protection Agency (CalPrivacy) at privacy.ca.gov; residents of other states may contact their state Attorney General.

EEA, UK and Switzerland

Visitors from these regions see the notice described in section 04: analytics is on and can be switched off, and advertising measurement runs only if they agree. Under the GDPR and the UK GDPR you have the right of access (art. 15), rectification (art. 16), erasure (art. 17), restriction (art. 18), data portability (art. 20) and objection (art. 21), including an absolute right to object to direct marketing. You can object to analytics at any time through Cookie settings, and we stop. You may withdraw consent to advertising measurement at any time without affecting earlier processing (art. 7(3)). You may complain to the data protection supervisory authority in the country where you live or work, or to the Israel Privacy Protection Authority. We answer these requests within one month, extendable where the law allows.

09AI assistant and automated replies

The Concierge assistant answers research questions about private placement life insurance. Its replies are generated automatically through the API of Anthropic PBC in the United States, and the conversation is stored on our server. Transcripts can be sent to the PPLI.com team so that a person can follow up.

The answers are automated research support. They are not financial, tax or legal advice and they are not tailored to your circumstances. No decision with legal or similarly significant effect is made about anyone by automated means.

Avoid typing information you would not want stored, such as account numbers or details of third parties. Conversations are kept for up to 12 months, and you can ask us to delete yours earlier.

10Security

We protect data with access controls, two-factor authentication on administrative accounts, encrypted connections (HTTPS), request rate limits and daily backups. No system is perfectly secure. If a breach affects your personal information, we will notify you and the authorities where the law requires.

11Children

PPLI.com is not directed to anyone under 18, and we do not knowingly collect their personal information. If you believe a minor has sent us data, write to us and we will delete it.

12Changes to this policy

We update this policy when our practices or the law change. The effective date and version number at the top show the current text. If a change affects how we use data you have already given us, we will tell you before it takes effect, and where consent is needed we will ask for it again.

13Contact