When you register for the Service, we may ask for Personal Information such as your name, email address, or credit card or other billing information. You may also provide at your own discretion certain related information like your personal website name, social media websites, a list of your skills, the date you started using the Service, and a description of yourself. Additionally, as you employ the Sites to create websites, the software continuously saves changes made by you with the server and will document items such as when you are working and saving changes, when you last opened the Designer, when sites are published, or when you perform certain tasks.

We may also retain the contents of any messages you send to us or through the Service, and we may collect information you provide in user content that you post or upload to the Service (“User Content”).

BROSH may use Personal Information provided to operate, improve upon, and personalize the Service, for billing identification and authentication, to contact and communicate with you about the Service and your use of the Service, to support use of the Service, to send marketing materials for research purposes, and to generally improve the content and functionality of the Service.

We may also combine your Personal Information with third-party analytics information to build a broader profile of our individual users so that we can serve you better and provide custom, personalized content and information. Additionally, we may use the Personal Information we collect for identification and authentication and fraud prevention, to analyze Site usage and improve the Service, for internal market research, troubleshooting problems, to enforce our Terms of Service, and as otherwise set forth in this Policy.

Note that we will never email you to ask for your account information. If you ever receive such an email, please forward it to support@brosh.io. For more information about our procedures in this regard, please review our Terms of Service.

We use financial information solely as authorized by you in accordance with the Service. While BROSH does not store your credit card information and will use commercially reasonable efforts to ensure the security of all credit card and all other Personal Information, we expressly disclaim any liability for any unauthorized access to or use of our secure servers and/or any and all personal and/or financial information stored therein, and you agree to hold BROSH harmless for any damages that may result therefrom.

‍b. Information we may receive from and share with third parties

We may now or in the future receive Personal Information about you from third parties. For example, if you access our Site or Service through a third-party connection or log-in or connect an application to BROSH, that third party you connected with may pass certain information about your use of its service to BROSH. This information could include, but is not limited to, the user ID associated with your account, an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that third-party service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service.

BROSH may also share Personal Information with its third-party service providers (such as its credit card processors and hosting partners) to provide the necessary hardware, software, networking, storage, and other service we use to operate the Service and maintain a high-quality user experience. We do not permit our service providers to use the Personal Information we share for their marketing purposes.

‍c. Application integration 

To facilitate the exchange of data between third-party SaaS applications, we may need to store certain information (“App Credentials”) that helps us access these third-party SaaS application accounts on your behalf. We store your App Credentials in an encrypted form.

When we access these third-party applications on your behalf, the third-party application provides us with access to certain data. We will use, store, and disclose this data in accordance with this Policy.

You should note that BROSH shall have no liability or responsibility for the privacy practices or other actions of any third-party applications for which you provide us with App Credentials.

‍d. Log file information

We collect certain technical information from the visitors to our customers’ websites. The information that our web servers log about our Service customers’ site visitors includes Internet Protocol (IP) address; the date/time a webpage or feature is accessed; the user agent string that identifies the browser or operating system to the server; installed fonts; mime-types; browser language and timezone; Silverlight data; installed plugins; HTTP headers; and screen resolution.

BROSH uses this information in order to monitor the volume of our customers’ website traffic. We use this technical information for our own analytical purposes, such as to measure how many customers have used our Service. We may use this information to create new products and / or to improve the exiting products.

We may be required to disclose Personal Information to respond to subpoenas, court orders, and law enforcement or governmental requests or investigations, or to establish or exercise our legal rights or defend against legal claims. We may also share Personal Information if we believe it is necessary in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the physical safety of any person, violations or our Terms of Service, or as otherwise required by law.

We use or may use information collected by cookies, log files, device identifiers and public records:

(a) remember information so that you will not have to re-enter it during your visit or the next time you visit the site

(b) provide custom, personalized content and information

(c) to provide and monitor the effectiveness of our Service

(d) monitor aggregate metrics

(e) diagnose or fix technology problems

(f) help you efficiently access your information after you sign in

(g) to provide advertising to your browser or device, and

(h) automatically update the BROSH application on your mobile devices.

For more information about cookies, please see BROSH’s Cookie Policy.

We may share Personal Information with any member of the BROSH team, which includes any entity that controls, is controlled by, or under common control with BROSH.

The Service contains links to websites and applications other than the Service, including websites and applications operated by affiliates and other third parties. This Policy applies only to information collected by the Service.

BROSH does not endorse and is not responsible for the practices of third parties or their websites or applications. We do not determine and are not responsible for the privacy practices or the content of websites or applications operated by third parties. Your browsing and interaction on any third-party website or service, including those that have a link on our website, are subject to that third party’s own rules and policies.

We are not responsible for and we do not control any third parties that you authorize to access your User Content. If you are using a third-party website or service and you allow such a third-party access to your User Content, you do so at your own risk.

Our Service offers publicly accessible blogs and community forums. If you elect to post something in a public area of our Service (e.g. landing pages / web pages), any Personal Information or content that you voluntarily disclose for posting to the Service, becomes available to the public, as controlled by any applicable privacy settings. If you remove information that you posted to the Service, copies may remain viewable in cached and archived pages of the Service, or if other users have copied or saved that information.

To request removal of your Personal Information from our blog or community forum, contact us at support@brosh.io. In some cases, we may not be able to remove all your Personal Information.

From time to time, we post customer testimonials on the Sites which may contain Personal Information. We always obtain the customers’ consent prior to posting their names along with their testimonials. Read our  Terms & conditions  for more information about that.

6. Protection of information

BROSH is committed to ensuring the security of your Personal Information. We use commercially reasonable technological, physical, and administrative security safeguards, such as firewalls and carefully developed security features, to protect the confidentiality and security of your Personal Information within the Service and the Sites. When you enter confidential information (such as login credentials or information submitted from within the Service) we encrypt the transmission of that information using secure socket layer technology (SSL). These technologies, procedures, and other measures are used in an effort to ensure that your data is safe, secure, and only available to you and to those you authorized to access your data. However, no internet, email, or other electronic transmission is ever fully secure or error-free, so you should take care in deciding what information you send to us in this way. BROSH is not responsible for the functionality or security measures of any third party. Read our  Terms & conditions  for more information about that.

We are based in the Israel, but, unless we expressly agree otherwise (including through our Terms), we may host, transfer, and process data, including Personal Information, in the United States, UK, Israel, Germany and in other countries through BROSH and third parties that we use to operate and manage the Service.  These countries may have data protection laws that are different from those of your country of residence. BROSH uses a variety of safeguards, including contractual and technical measures, to protect the data we transfer.

BROSH uses the country that you share with us during sign-up to choose the right datacenter for you that is in order to comply with your local privacy law, If your company is based in United Kingdom (“UK”), European Union (“EU”), European Economic Area (“EEA”) or Switzerland then BROSH will store your personal information in a EU country or in the UK. Only the minimal necessary financially-related information (as required by the israeli law, such as invoices/receipts) will be copied to a secured datacenter in Israel.

We process and store information on behalf of our customers. You may decline to submit any Personal Information through the Service, in which case we may not be able to provide certain services to you.

Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking / recording tools. Note that disabling cookies on your mobile device or browser may prevent us or our business partners from tracking your browser’s activities in relation to the Service. However, doing so may disable many of the features available through the Service. You may opt-out individually for third-party vendors on their websites, but limitations on data sharing may make it difficult or impossible to provide the Service after an opt-out.  You may also opt out of interest-based advertising provided by participating ad servers through the Digital Advertising Alliance (http://optout.aboutads.info/), the Network Advertising Initiative (http://optout.networkadvertising.org/?c=1), or the European Interactive Digital Advertising Alliance (http://www.youronlinechoices.eu). 

California consumers may use the Digital Advertising Alliance’s tool to send requests under the California Consumer Privacy Act (“CCPA”) for a web browser to opt out of the sale of personal information by some or all of that framework’s participating companies by accessing the DAA’s tool here: https://www.privacyrights.info/, or by downloading the DAA’s AppChoices mobile application opt-out here:  https://www.privacyrights.info/appchoices.

The AppChoices app is not limited to opt-outs for CCPA purposes and may be used by anyone to limit the collection of cross-app data for interest-based advertising purposes by participating DAA member companies.

Customers may update, delete, or change your Personal Information you have provided BROSH by logging in to the Service and providing such additional information or deleting such information where applicable. If you are not our customer and would like to gain access to, or request deletion of, information we have collected, please contact us at support@brosh.io. We will use commercially reasonable efforts to respond to such queries within a reasonable time. BROSH has no direct relationship with the individuals or companies (“End Users”) with whom you may interact using the Service. Any such End Users seeking access to, or who would like to correct, amend, or delete data which may be stored in the Service should direct their query to the applicable BROSH customer acting as the data controller for such information.

10. Data retention 

BROSH will retain Personal Information we process on behalf of our customers or collect directly from our customers for as long as needed to provide Service to our customers, subject to our compliance with this Policy, or as required or permitted under the applicable law. We may further retain and use this Personal Information as necessary to comply with our legal obligations; maintain accurate accounting, financial, and other operational records; resolve disputes; and enforce our agreements. We have established internal policies for the deletion of data from customer accounts following termination of a customer’s subscription to the Service.

11. Children's Personal Information

BROSH does not knowingly collect any Personal Information from children under the age of 13. If you are under the age of 13, please do not submit any Personal Information through our Service. We encourage parents and legal guardians to monitor their children’s internet usage and to help enforce our Policy by instructing their children never to provide Personal Information on our Service without their permission. If you have reason to believe that a child under the age of 13 has provided Personal Information to BROSH through our Service, please contact us, and we will use commercially reasonable efforts to delete that information from our databases.

12. Your California privacy rights
 

This section applies only to California residents. Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), below is a summary of the Personal Information categories, as identified and defined by the CCPA (see California Civil Code section 1798.140 (o)), that we collect, the reason we collect your Personal Information, where we obtain the Personal Information, and the third parties with whom we may share your Personal Information. We generally collect the following categories of Personal Information about you when you use our Site or services identifiers such as a name, address, unique personal identifier, email, phone number, your device’s IP address, software, and identification numbers associated with your devices; 

• protected classifications, such as gender; 
• commercial information such as records of products or services purchased, obtained, or considered by you; 
• Internet or other electronic information regarding your browsing history, the webpage visited before you came to our Site, length of visit and number of page views, click-stream data, locale preferences, your mobile carrier, date and time stamps associated with transactions, and system configuration information;
• audio recordings of your voice to the extent you call us, as permitted under applicable law; 
• professional or employment-related information.

We generally do not collect education-related or biometric information, geolocation information, or inferences about your preferences, characteristics, behavior and attitudes. For more information about the Personal Information we collect and how we collect it, please refer to Sections 1 and 2, above. 

We collect your Personal Information for the business purposes described in Section 2, above. The CCPA defines a “business purpose” as the use of Personal Information for the business’s operational purposes, or other notified purposes, provided the use of Personal Information is reasonably necessary and proportionate to achieve the operational purpose for which the Personal Information was collected or another operational purpose that is compatible with the context in which the Personal Information was collected. 

The categories of third parties with whom we may share your Personal Information are listed in Section 2, above.

If you are a California resident, you have rights in relation to your Personal Information; however, your rights are subject to certain exceptions. For instance, we cannot disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the Personal Information, your account with us or the security of our network systems.

• Right Against Discrimination - You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.
• Right to Know - You have the right to request in writing: (i) a list of the categories of personal information, such as name, address, email address, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties' direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, you have the right to request: (i) the categories of personal information we have collected about you, (ii) the categories of sources from which personal information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared personal information, and (v) the specific pieces of personal information we hold about an individual. You have the right to request a copy of the specific Personal Information we collected about you during the 12 months before your request.
• Right to Delete - You have the right to request us to delete any Personal Information we have collected from you or maintain about you, subject to certain exceptions.

To assert your right to know or your right to delete your Personal Information, please contact us according to the “Contact Us” section below. To verify your identity, we may ask you to verify Personal Information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.

• Right to Opt-Out of Selling. As described in this Privacy Policy, in certain situations we may share your Personal Information with certain third parties for our marketing or other purposes. To the extent such sharing is considered a “sale” under the CCPA, as a California resident you have the right to opt-out of such sharing. If you would like us to no longer share your Personal Information in this way, you can opt-out by visiting the following web page: Do Not Sell My Info. If you opt-out, we may be unable to offer you some of our Services which require sharing of Personal Information.

California consumers may also use the Digital Advertising Alliance’s tool to send requests under the California Consumer Privacy Act (“CCPA”) for a web browser to opt out of the sale of personal information by some or all of that framework’s participating companies by accessing the DAA’s tool here: https://www.privacyrights.info/, or by downloading the DAA’s AppChoices mobile application opt-out here:  https://www.privacyrights.info/appchoices.  

The AppChoices app is not limited to opt-outs for CCPA purposes and may be used by anyone to limit the collection of cross-app data for interest-based advertising purposes by participating DAA member companies.

In addition, under California Civil Code Sections 1798.83–1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties.

If you are a California resident and would like a copy of this notice, please submit a written request to: support@brosh.io or by mail. 

13. Processing of Personal Information under Israeli Law

If you are located in Israel, or if BROSH processes personal information of individuals in Israel, we comply with the requirements of the Israeli Privacy Protection Law, 5741-1981, including its Amendment No. 13 (2024) and all applicable regulations issued by the Israeli Privacy Protection Authority (PPA).

Data Controller and Contact Details
For purposes of the Israeli Privacy Law, the data controller and/or database owner is ZAAPIT AS Ltd (trading as BROSH), with offices located at 87 Weizmann St., Kfar Saba 4464213, Israel.
You may contact our Privacy Protection Officer (Data Protection Officer) at:
📧 support+privacy@brosh.io
📬 87 Weizmann St., Kfar Saba 4464213, Israel

Purpose and Legal Basis of Processing
We collect and process personal information for the purposes described in this Privacy Policy, including the provision of our software services, user account management, support, and service improvement.
When processing information subject to Israeli law, we rely on one or more lawful bases for processing as permitted by the Israeli Privacy Protection Law — including the consent of the data subject, fulfillment of contractual obligations, compliance with legal requirements, or legitimate business interests consistent with privacy rights.

Rights of Israeli Data Subjects
Under Israeli law, individuals whose data is processed by BROSH have the right to:

• Access personal data held about them in BROSH’s databases.

• Request correction, deletion, or blocking of personal data that is inaccurate, incomplete, unclear, or outdated.

• Withdraw consent to processing where consent is the legal basis.

• Receive information about the purpose of processing, the types of data held, and to whom the data has been disclosed.
  Requests can be submitted to our Privacy Protection Officer via the contact details above.
  BROSH will respond in accordance with the timelines and procedures set out in the Israeli Privacy Protection Law.

Sensitive Information and Database Obligations
If BROSH maintains a database that includes sensitive personal information (such as health, biometric, genetic, religious, or financial data) or that exceeds thresholds defined by the Privacy Protection Authority, BROSH will comply with all registration or notification obligations under Amendment 13 and maintain adequate technical and organizational security measures to safeguard such data.

Data Transfers outside Israel
Where personal information is transferred outside Israel, BROSH ensures that the receiving country provides an adequate level of protection as required under Israeli law, or that appropriate contractual or organizational safeguards are in place to protect the data.
Such transfers are performed only for the purposes outlined in this Privacy Policy and in accordance with applicable Israeli data protection requirements.

Security and Breach Notification
BROSH applies strict data security controls designed to protect personal information against unauthorized access, loss, or misuse.
In the event of a personal data breach involving Israeli data subjects, BROSH will assess whether notification to the Israeli Privacy Protection Authority and affected individuals is required under applicable law and will act accordingly.

We may, in our sole discretion, modify or update this Policy from time to time. If we make any material changes to this Policy, we will endeavor to notify you by email or by posting a prominent notice on the Sites prior to the change becoming effective. We encourage you to periodically review this page for the latest information on our privacy practices. Your continued use of the Service constitutes your acceptance to such changes to this Policy. If you do not accept the terms of this Policy, you should immediately discontinue use of the Service

BROSH may assign or transfer this Policy, and your user account and related Personal Information, to any person or entity that acquires all or substantially all of the business, stock or assets of, or is merged with BROSH. We may also transfer or assign such information in the course of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, or similar transactions or proceedings, provided that the recipient of such information will continue to be bound by the terms of this Privacy Policy.

If you have questions regarding this Policy or about the privacy practices of BROSH, please contact us by email at support@brosh.io, or by mail. 

‍