This Privacy Policy ("Policy") explains how brag for me (the "Service"), operated by Shunit Haviv Hakimi ("we", "our" or "us"), collects, uses, and shares personal data when you visit our website or use the Service. Please read this Policy, as it includes important information about your Personal Data. If you do not agree to this Policy, please discontinue and avoid using the Service.
This Policy is integrated into and forms part of our Terms of Service (the "Terms").
For purposes of the Israeli Protection of Privacy Law, 5741-1981 and the regulations under it, we maintain databases in which personal data collected through the Service may be stored, managed and used in accordance with applicable law and this Policy, for the purposes set out below. Consent to this Policy constitutes consent for the purposes of the Protection of Privacy Law and any other relevant law.
You are not legally required to provide us with any Personal Data, and you provide it voluntarily, but without it we cannot make or deliver your video.
"Personal Data" means any information that can be used, alone or together with other data, to identify a living individual, and any information deemed personally identifiable information by privacy laws.
1. Who we are
The Service is operated by Shunit Haviv Hakimi, a sole proprietor based in Israel, who is the data controller of the Personal Data described here. For privacy questions or requests, contact us at support@letsbrag.app.
Creem (Armitage Labs OÜ, Estonia), our reseller and Merchant of Record, handles checkout and payments, and acts as an independent data controller of the billing and payment data it collects, under its own privacy policy. Orders paid for before 6 October 2026 went through Paddle.com instead, under Paddle's privacy policy.
2. What Personal Data we collect
- The Site you submit. The website address you give us, and what is on it. Our AI agent visits the Site's public pages, reads their text, images and layout, and takes screenshots, to make your video. If those pages show Personal Data (a founder's name or photo, for example), it can end up in the agent's working files and in your video.
- Order information. An order ID, the Site address, the video shape you chose, timestamps, progress, and the video, poster and caption we make. We also keep the agent's log of the run and its working files (its plan, and the screenshots and clips it took of the Site), to investigate runs that fail.
- Payment information from Creem. Your email address, the Creem transaction ID, whether the payment went through, and whether it was refunded. We never receive your card details.
- Technical data. Our hosting providers log requests to the website: IP address, browser user agent, pages requested and the time.
- Usage data. We use Cloudflare Web Analytics, which records which pages are visited, the referring site, browser, device type and country. It sets no cookies and does not track you across sites.
- Communication information. When you email us, we collect the Personal Data you provide, including your name, email address, and anything else you choose to include.
We do not knowingly collect, process or disclose any sensitive Personal Data, and ask that you do not submit a Site whose purpose is to publish it.
To the extent the Site you submit contains Personal Data about other individuals, you represent that you have any consents and rights needed for us to process it as described in this Policy.
3. Why we collect and process your Personal Data
We use Personal Data only as described in this Policy. For the avoidance of doubt, in Israel the only legal basis is consent.
Providing the Service. To make and deliver your video and show your Order Page. Legal basis: performance of our contract with you.
Payments and refunds. To connect Creem's payment to your Order, issue refunds, and keep the records tax law requires. Legal basis: performance of our contract with you, and compliance with our legal obligations.
Fixing and improving the Service. To investigate and repair runs that fail, and to analyze the Site's content, your video and the agent's working files to improve the quality and effectiveness of the Service, including by training our AI models. Legal basis: our legitimate interests in providing and improving the Service. Where we use this data to train our AI models, we rely on our legitimate interests, subject to your right to opt out at any time as set out in Section 8 of the Terms.
Integrity and security. To keep the Service secure, and to detect and prevent fraud and abuse. Legal basis: our legitimate interests in the integrity of the Service, and compliance with our legal obligations.
Communications with you. To respond to your requests, questions and feedback. Legal basis: performance of our contract with you, and our legitimate interests in supporting our customers.
Legal compliance and claims. To comply with applicable law, assist law enforcement where required, and exercise or defend legal claims. Legal basis: compliance with our legal obligations, and our legitimate interests.
Marketing emails. We may use the email address you gave at checkout to send you news and offers about brag and related products and services that we believe may interest you. Every such email includes a link to unsubscribe, and you can also opt out at any time by emailing support@letsbrag.app. Even if you unsubscribe, we may still send you emails about your Order. Legal basis: our legitimate interests in promoting the Service, or your consent where the law requires it.
Product analytics. To understand how visitors use our website and improve it. Legal basis: our legitimate interests in improving the Service, or your consent where the law requires it.
We do not sell your Personal Data or use it for third-party advertising.
4. Cookies and similar technologies
Our pages do not currently use advertising or tracking cookies, pixels or similar technologies. The ones involved are:
- Creem's checkout, which opens when you pay, uses cookies and similar technologies it needs to process the payment and prevent fraud.
- Our pages load fonts from Google Fonts, which means Google receives your IP address when you visit.
- Our owner's admin page sets a sign-in cookie for the owner only. It is never set for customers or visitors.
- Cloudflare Web Analytics, whose script counts page visits without setting cookies or tracking you across sites.
If we add analytics, advertising or other tracking cookies that are not strictly necessary, we will update this Policy and ask for your consent first where the law requires it. You can manage or delete cookies through your browser settings.
5. Who we share Personal Data with
- Service providers that help us operate the Service: Anthropic, whose Claude models power the agent (the Site's content passes through their API while your video is made, and Anthropic does not train its models on this data); Modal, which runs the agent and stores videos and Order records; Cloudflare, which serves our domain and provides our website analytics; and Google Fonts.
- Payment processor. Creem (and Paddle for orders paid for before 6 October 2026), which acts as an independent data controller of your billing and payment data.
- Regulators, courts, or law enforcement, as we believe necessary to respond to legal processes, protect rights and safety, or prevent illegal activity.
- Business transfers. A buyer, successor or new legal entity, if the Service is sold, transferred, reorganized or incorporated.
- Auditors and advisers, such as accountants and lawyers, to meet our legal obligations and manage disputes.
- With your consent, for any other purpose disclosed when you give it.
Anyone who has your Order Page's link can see your video. Keep the link private if you want the video to stay private.
We do not sell your Personal Data, and we do not share it for cross-context behavioral advertising.
6. International data transfers
Our providers store and process data in various jurisdictions, including the United States, the European Economic Area, the United Kingdom and Israel. These countries' data protection rules may differ from those in your country. We take appropriate measures to ensure our transfers of Personal Data comply with applicable data protection laws.
To the extent that the GDPR or UK GDPR applies, we only transfer Personal Data to recipients that are located in the EEA or the UK; located in countries approved as providing an adequate level of data protection (Israel is one); or that have entered into agreements ensuring an adequate level of data protection, such as standard contractual clauses.
7. How long we keep your data
We retain Personal Data as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements, bearing in mind the need to delete outdated, unused information at the earliest reasonable time. In particular:
- Videos: at least seven (7) days after they are made. We may delete them after that, so download yours.
- Order records, agent logs and working files: as long as we need them to answer questions and handle refunds. Logs and working files are deleted with their Order.
- Payment and tax records: as long as tax law requires, up to seven years.
- Emails with us: as long as we need them to help you.
- Marketing list: your email address stays on it until you unsubscribe. After that, we keep only a record that you opted out, so we don't email you again.
To have your Order and its Personal Data deleted, email support@letsbrag.app with your Order Page link. On a valid request, we will use reasonable efforts to permanently remove your Personal Data from our systems without undue delay, and in any event within one month, except where we are legally required or otherwise permitted to retain it (for example, billing records, legal claims, fraud prevention, or compliance with applicable law).
8. Your rights
Depending on where you live, you have some or all of the following rights regarding your Personal Data:
- Access: to confirm whether we process Personal Data about you, and to receive a copy of it.
- Correction: to ask us to correct inaccurate or incomplete Personal Data.
- Deletion: to ask us to delete your Personal Data.
- Portability: to receive your Personal Data in a form you can move to another service.
- Restriction and objection: to ask us to limit, or to object to, how we use your Personal Data.
- Model training opt-out: to stop us using your Order's data to train our AI models, as set out in Section 8 of the Terms.
- Withdrawal of consent: to withdraw consent at any time, without affecting processing done before you withdrew it.
- Complaint: we will respond within 30 days for requests made under the GDPR or Israeli law (extendable by a further two months where necessary). If you are unsatisfied with our response, you may lodge a complaint with your data protection supervisory authority (in Israel, the Privacy Protection Authority) or appeal to a court in the State of Israel.
- Non-discrimination: we will not treat you differently for exercising any of these rights.
- Rights of Israeli residents: under the Protection of Privacy Law, 5741-1981, you may review, yourself or through a representative or legal guardian, any Personal Data about you stored in a database. If it is inaccurate, incomplete, unclear or outdated, you may ask the database owner to correct or erase it. If the database owner declines, they must notify you in the manner prescribed under the regulations, and you may appeal the refusal in accordance with them. If Personal Data in a database is used for direct marketing, you may ask in writing that Personal Data about you be deleted from that database.
9. How to exercise your rights
To exercise any of the rights above, email support@letsbrag.app with your Order Page link. You may use an authorized agent to submit a request on your behalf if you give the agent written permission signed by you.
We may ask for additional information to verify that the Order is yours before fulfilling your request. Where permitted by law, we may charge a reasonable fee for, or refuse, a request that is manifestly unfounded or excessive. Where fulfilling a request would adversely affect the rights of others, we will address it to the maximum extent possible.
10. Minors
The Service is not intended for anyone under 18. We do not knowingly collect Personal Data from minors. If you are under 18, you may not use the Service and should not provide any Personal Data to us. If you believe a minor has provided us with Personal Data, contact support@letsbrag.app and we will delete it.
11. Security
We have implemented appropriate technical and organizational measures designed to protect your Personal Data. The website is served over HTTPS, Order Page links are long and random so they cannot be guessed, and each run happens in its own isolated sandbox that receives only the key it needs to call the AI model.
No method of transmitting or storing data over the internet is completely secure, and we cannot guarantee absolute security. If you notice a risk or a security issue, please report it to support@letsbrag.app so we can resolve it as soon as possible.
12. Changes to this Policy
We may update this Policy from time to time. The current version is always posted on this page, with the date it was last updated. If we change this Policy in a significant way, we will post a notice on our home page seven (7) days before the change takes effect, unless the change is required by law, in which case it takes effect as that law requires.
13. Contact us
If you have any questions, concerns, or complaints about this Policy or how we process your Personal Data, or wish to exercise your rights, contact Shunit Haviv Hakimi, Israel, at shunit@letsbrag.app or support@letsbrag.app.
14. Controlling version
This Policy is drafted in English, which is the original and controlling version. Any translation is provided for convenience only, and in the event of any discrepancy, the English version prevails.