YOUR INFORMATION
Privacy policy.
Effective 24 September 2026
This policy explains how information is handled when you visit rotemalaluf.com, register to read The Agentic Age, or choose to receive essays and updates.
Who is responsible
Rotem Alaluf is responsible for the personal information collected through this website, with assistance from an authorized team. References to “we,” “us,” and “our” mean the website operator and that team. This policy applies to this website, not to Wand AI or other websites linked from it.
Operator location: United States.
Postal contact: info@rotemalaluf.com
For privacy questions or requests, contact the team at info@rotemalaluf.com. This address is for data and privacy matters.
Information we collect
Book registration requires your name, email address, and profession or role. You may also provide your organization. We send a one-time verification code to the email address and release the book only after that code is entered successfully. We also record the registration date, verification status, your choice about future updates, the wording and policy version associated with that choice, and basic records needed to provide the download and manage preferences. Repeat registrations may be recorded. Please provide your own information and do not include sensitive personal details in the profession field.
If you contact us about your information, we receive your message and the contact details you provide. Hosting infrastructure also processes technical information such as IP addresses, browser information, requested pages, timestamps, and error information. The application uses a protected, pseudonymous identifier derived from an IP address to limit abuse; it does not add the raw IP address to your reader profile.
Why we use it
We use registration information to administer access to the free digital edition, understand the professional interests of our readership, keep a record of preferences, and protect the website. The profession and optional organization fields help the team understand who is reading the work and, when updates are requested, make those updates relevant. We do not use it to make automated decisions with legal or similarly significant effects.
We use your email to send the one-time access code needed to verify book registration. Only when you separately opt in will your email also be used for optional essays and updates about AI labor, the agentic economy, and related work. That choice is not required to obtain the book. We may send a necessary response to a privacy or support request regardless of update preferences.
Your choice about updates
The updates checkbox is optional and is not preselected. A book registration is not, on its own, consent to future updates. You can withdraw your choice using the unsubscribe option in an update or by contacting the privacy team. Withdrawing does not affect access to the book or processing that was lawful before withdrawal. If you register again, we do not automatically reverse a previous unsubscribe.
Legal bases, where required
Where applicable data-protection law requires a legal basis, we rely on our legitimate interests in administering a requested book download, understanding our readership, responding to requests, and protecting the website, taking your rights into account. We rely on consent for optional email updates and on legal obligations when we must retain or disclose particular information. You may object to processing based on legitimate interests. Supplying registration details is voluntary, but the download-registration service cannot be used without the required fields and successful email verification; the rest of the website remains readable.
Who can access the information
Access is limited to authorized team members and service providers needed to operate the website, host and protect its data, or deliver communications you request. The website is designed to be hosted on GoDaddy. Postmark processes email addresses and message-delivery information to send verification codes and optional reader updates, including unsubscribe and suppression handling. We do not sell reader information, rent email lists, or share personal information for cross-context behavioral advertising.
Information may also be disclosed when required by law, to respond to lawful requests, or where reasonably necessary to protect legal rights, safety, and the security of the website. Any provider used to process reader data on our behalf must be subject to appropriate privacy and security arrangements.
Where information is processed
Information may be processed in the operator’s location and in other countries where hosting, support, or delivery providers operate. Those countries may have different data-protection laws. Where a regulated international transfer is involved, we use appropriate safeguards required by applicable law, such as approved contractual protections. Contact the privacy team for information about the providers, processing locations, and safeguards that apply to your data.
Retention
Reader-registration records are scheduled for deletion from active storage after two years without a new registration. Automated housekeeping runs when the service or the private reader dashboard is used; a scheduled housekeeping task can also run it daily. Verification codes expire after 10 minutes. Download links expire after 24 hours and associated access tokens are removed after expiry. Application rate-limit records and expired staff-session files are normally removed during housekeeping after two days.
A minimal, protected identifier may be kept after an unsubscribe or deletion so that a later registration does not silently add the same address back to updates. Correspondence, legal requirements, security investigations, and consent disputes may require different retention periods. Hosting access logs and backup copies follow the retention arrangements of the hosting service and are not part of the active reader list. We restrict the use of retained backups and keep information only as long as needed for those purposes.
Cookies and other technologies
The public website does not use advertising pixels, third-party analytics, cross-site tracking cookies, or third-party font services. Public book registration does not use a persistent reader account or browser-storage profile. Strictly necessary session cookies are used for authorized staff signing in to the private administration area. The hosting provider may operate additional security and infrastructure functions. Copying the biography accesses your clipboard only after you select the copy action.
Security
We use access controls, HTTPS, protected private storage, and encryption of stored reader records. Download links are time-limited. No system is completely secure; please do not send sensitive information through the profession or organization fields. The free PDF can be copied after it is downloaded; the registration process is not digital-rights-management protection.
Your rights
Depending on the law that applies to you, you may be entitled to access, correct, delete, or receive a copy of your personal information; restrict or object to certain processing; withdraw consent; or complain to the relevant data-protection authority. You may also have rights relating to sale or advertising-related sharing, which this website does not carry out. To make a request, use the privacy contact above and include the email address you registered with. We may need to verify your identity before releasing or changing personal information and will respond within applicable legal time limits.
Children and external websites
The registration service is intended for an adult readership and is not directed to children under 16. If you believe a child has submitted information without appropriate authorization, contact the privacy team so it can be reviewed and, where appropriate, deleted.
Links to LinkedIn, YouTube, Wand AI, and other websites open independent services with their own privacy practices. Reading their policies is your choice before interacting with them.
Changes
We may update this policy when the website, its providers, or its data practices change. The effective date above identifies the current notice. Where required, we will provide additional notice or obtain consent before materially changing how information is used.