Legal.

Effective date: July 31, 2026

Privacy policy

This policy describes how Soda Labs Ltd. (“Soda Labs”, “we”, “us”), a company incorporated in Israel, handles personal data collected through sodalabs.xyz (the “Site”). We are the data controller for the processing described here. It covers the Site only; Soda Labs products (including the Bubble application) are governed by their own agreements. Contact for all privacy matters: support@sodalabs.xyz.

We process personal data in accordance with the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13), the Privacy Protection (Data Security) Regulations, 5777-2017, and, for visitors in the European Economic Area and the United Kingdom, the GDPR and UK GDPR.

What we collect, and whether you must provide it

• Contact & demo requests. When you submit our contact form we receive the details you provide: name, work email, company, and your message.
• Usage data. We use analytics and marketing services (Google Analytics 4, PostHog (hosted in the EU), and the Meta Pixel) that collect device and usage information: pages viewed, approximate location derived from IP address, browser type, and interactions, via cookies and similar technologies. For visitors in the EU/EEA, the United Kingdom, and Switzerland, none of these load before you consent via the cookie banner. Elsewhere, they run by default and you can opt out at any time via “Cookie preferences” in the footer; your choice is remembered.
• Server logs. Our hosting provider (Vercel) processes IP addresses and request metadata as necessary to serve and secure the Site.

You are under no legal obligation to provide any personal data to us; providing it is voluntary and depends on your consent, your region’s default, or your choice to contact us. The only consequence of not providing it is that we will not be able to respond to an enquiry you did not send, and analytics simply will not run.

Purposes and legal bases

We process contact-form data to respond to enquiries you initiate and to arrange any follow-up you request (GDPR basis: our legitimate interest in responding to business enquiries); analytics and marketing data to understand how the Site is used and to measure campaigns (basis: your consent, which you may withdraw at any time); and security/log data to operate the Site securely (basis: legitimate interest). We do not sell personal data and we do not use it for automated decision-making that produces legal effects.

Recipients and international transfers

Data is shared only with the service providers that operate the Site on our behalf Vercel (hosting), Google (analytics), PostHog (analytics, EU-hosted), and Meta (marketing measurement), under their data-processing terms, and with authorities where the law requires. Note that Meta also processes pixel data for its own purposes as an independent controller, as described in Meta’s own privacy policy. Some providers process data in the United States and elsewhere outside Israel and the EEA; such transfers rely on recognized mechanisms including standard contractual clauses and the EU-US Data Privacy Framework. Transfers between the EEA and Israel benefit from the European Commission’s adequacy decision for Israel, reconfirmed in January 2024.

Retention

• Contact enquiries: up to 24 months from our last exchange, then deleted.
• Google Analytics: 14 months (configured retention).
• PostHog: up to 12 months.
• Meta Pixel cookie (_fbp): 3 months.
• Server logs: per Vercel’s standard rotation.

Your rights

Under the Israeli Protection of Privacy Law you may inspect data we hold about you (section 13), request correction or deletion of data that is incorrect, incomplete, or outdated (section 14), and demand removal from any direct-marketing list. Where the GDPR applies you additionally have the rights of access, rectification, erasure, restriction, objection, and portability, and the right to withdraw consent at any time without affecting prior processing. Write to support@sodalabs.xyz; we respond within a reasonable time and never charge for a first request. You may lodge a complaint with the Israeli Privacy Protection Authority or, in the EU/EEA, with your local supervisory authority.

Cookies

For visitors in the EU/EEA, the United Kingdom, and Switzerland, no analytics or marketing cookies are set until you consent via the Site’s cookie banner, and refusing is one click. For visitors elsewhere, these cookies are set by default. In both cases you can change or withdraw your choice at any time via “Cookie preferences” in the footer. We also set a soda_geo cookie (30 days, strictly necessary) recording only which of these two regimes applies to you. Cookies in use:

• soda_consent: strictly necessary; stores your consent choice and a random consent reference (30 days). Set for sodalabs.xyz and its subdomains so you are asked once rather than on every service.
• _ga, _ga_*: Google Analytics (analytics consent; up to 2 years).
• ph_*: PostHog, EU-hosted (analytics consent; up to 1 year).
• _fbp: Meta Pixel (marketing consent; 3 months).

We do not respond to browser “Do Not Track” signals.

Records of consent. Where the law requires us to demonstrate that consent was given, we keep a record of each choice: a random consent reference, the date and time, what was chosen, the version of the banner shown, the applicable region, and hashed values derived from your IP address and browser string. The record is pseudonymous and is not linked to your name or any account. We keep it for three years after the consent expires or is withdrawn, then delete it.

Security

We apply technical and organizational measures aligned with the Israeli Privacy Protection (Data Security) Regulations, 5777-2017, including access controls, encrypted transport (TLS) across the Site, minimization of what we collect, and vetted processors. No system is perfectly secure; if a breach materially affects you, we will notify you and the relevant authorities as the law requires.

Children

The Site is directed at professionals and is not intended for anyone under 18. We do not knowingly collect data from minors.

Changes

We may update this policy from time to time; the effective date above reflects the latest revision. Material changes will be highlighted on this page.

Terms of service

These terms govern your use of the Site. By using the Site you accept them. The Site is intended for business and professional users aged 18 or over; if you are acting for an organization, you confirm you are authorized to accept these terms on its behalf. The Site is operated by Soda Labs Ltd. (Israel), reachable at support@sodalabs.xyz.

The Site is informational

Content on the Site, including product descriptions, benchmarks, comparisons, and research summaries, is provided for general information only. It is not an offer or solicitation, not investment, financial, legal, accounting, or tax advice, and not a representation that any product is suitable for your use case or compliant with the regulations that apply to you. Use of Soda Labs products (including the Bubble application and SDK) is governed by separate written agreements, not by these terms.

Intellectual property

The Site and its content (text, design, graphics, logos, code samples) are owned by Soda Labs or its licensors, and the marks “Soda Labs” and “Bubble” are proprietary to Soda Labs. You may view and share Site content for non-commercial reference with attribution; any other reproduction requires our prior written permission. Third-party names and logos belong to their owners and appear for identification only.

Acceptable use

You agree not to disrupt or probe the Site, attempt unauthorized access, scrape at volumes that degrade service, misrepresent your affiliation, or use the Site to transmit malicious content.

Third-party links

The Site links to third-party sites and resources (documentation, research, social platforms). We are not responsible for their content or practices.

Disclaimers, liability, and indemnity

The Site is provided “as is” and “as available” without warranties of any kind, express or implied, including accuracy, availability, non-infringement, and fitness for a particular purpose. To the maximum extent permitted by law, Soda Labs shall not be liable for any indirect, incidental, special, or consequential damages arising from use of the Site, and our aggregate liability in connection with the Site shall not exceed USD 100. You agree to indemnify Soda Labs against third-party claims arising from your breach of these terms. Any claim relating to the Site must be brought within twelve (12) months of the event giving rise to it.

Changes and termination

We may modify the Site or these terms at any time; the effective date above reflects the latest revision, and continued use after a change constitutes acceptance. We may suspend access for conduct that violates these terms. If any provision is held unenforceable, the remainder stays in effect; these terms are the entire agreement between us regarding the Site.

Governing law

These terms and any dispute arising out of or relating to them or the Site shall be governed by the laws of the State of Israel, without regard to conflict-of-laws principles, and shall be subject to the exclusive jurisdiction of the competent courts of Tel Aviv-Jaffa, Israel. Nothing in this clause limits statutory privacy rights that visitors hold under the laws of their own jurisdiction.

Contact

Soda Labs Ltd. · support@sodalabs.xyz