Privacy Policy

Who controls the data

The site owner and the controller of the database is Shani Gorgov (Shani AI Creator), an exempt sole trader (עוסק פטור) registered in Israel under business number 300585536. For any privacy request — access, correction, deletion, unsubscribing, or more detail about a specific processor — write to shani.creates.ai@gmail.com. I handle these requests personally; the site has no separate data protection officer.

What is actually collected

• The prompts form: the email address you provide, together with your marketing consent tick, the exact consent wording and the time you ticked it.
• WhatsApp contact from the site: the button hands you over to WhatsApp, and the conversation itself takes place there, not on this site.
• Signing a proposal (the /work pages and digital signature): first name, business name, VAT/company number, email address, the signature itself — typed and/or hand-drawn as an image — the terms text signed, the time of signing, the IP address the proposal was signed from, and the browser identifier (User-Agent). The IP and User-Agent are collected as evidence of who signed and when.
• Usage measurement (statistics): if you accepted statistics cookies, Google Analytics 4 collects a browsing identifier, pages viewed, referral source, device and browser type and a truncated IP address. Marketing (Meta Pixel): only if you separately accepted marketing cookies, Meta Pixel collects a browser identifier, pages viewed and action events on the site, such as filling in a form or getting in touch.
• Cookieless measurement: Vercel Analytics counts page views without cookies and without building a personal profile. It runs at all times, including without cookie consent.
• Local settings stored in your browser only: interface language, accessibility settings, whether the intro screen was shown, and your cookie choice.

What the data is used for

• Sending the material you asked for (the prompts) and replying to enquiries. The guides on the site are open and free and require no email.
• Marketing email — only to people who explicitly ticked the consent box on the form.
• Producing a signed proposal, sending it to Shani and to the signer, and keeping a copy as evidence of the agreement.
• Understanding which pages on the site work, and improving the site.
• Campaign measurement and advertising on Meta's networks — only if you accepted marketing cookies.

Email & mailing list

I send marketing email only to people who ticked the consent box themselves. The box is not pre-ticked, and the form will not submit without it. The consent wording and the time of consent are stored alongside the signup. Every message carries an unsubscribe link, and you can also submit a removal request on the unsubscribe page: shani-ai.com/unsubscribe. Alternatively you can simply reply or write to shani.creates.ai@gmail.com and ask to be removed — the request will be honoured and no further messages will be sent. Consent is given freely and can be withdrawn at any time. This right derives from s. 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982.

Cookies and tracking technologies

This site uses cookies — not "may use". Some are functional and stay in your browser only; others belong to third parties and serve measurement and advertising. The cookie notice lets you accept or reject with one click, and the cookie settings (link at the bottom of every page) have two separate choices, each off by default: statistics (Google Analytics only) and marketing (Meta Pixel only). Each tool loads only after you accept its own category; until then it does not run at all. Accepting statistics does not switch on Meta Pixel, and accepting marketing does not switch on Google Analytics. You can change your choice at any time via the "Cookie settings" link at the bottom of every page. The table below lists every cookie and key this site sets:

The processors that handle the data

I do not sell personal information and do not pass it to advertisers. These are all the parties that process data from this site, and what each one receives:

• Vercel Inc. (USA) — hosts and runs the site. Sees every request, including IP address and browser identifier, and provides Vercel Analytics, which counts views without cookies.
• Vercel Inc. (USA), on the SMALL LIGHTS page, hosts the video file.
• Google (Google Analytics 4) — receives browsing data and measurement identifiers, only if you accepted statistics cookies.
• Meta Platforms (Meta Pixel) — receives browsing data and conversion events for advertising and measurement, only if you accepted marketing cookies (a choice separate from statistics, off by default).
• Formspree Inc. (USA) — receives the site's email form (prompts) and unsubscribe requests, and forwards your email address and consent tick to me.
• Supabase Inc. — stores the signed proposal records: name, business name, VAT number, email, the typed signature, terms text, time of signing, IP address and User-Agent.
• Resend — sends the signed proposal email, including the PDF in which the hand-drawn signature, the time of signing and the IP address are embedded, to Shani and to the signer.
• Google Sheets webhook (via an n8n automation) — receives a notification of a signed proposal with name, business name, VAT number, email and time of signing, for my own lead and client tracking.
• WhatsApp / Meta — if you get in touch via the WhatsApp button, the conversation takes place on their platform and under their terms.
• Working partner — some services (for example paid marketing, infrastructure and a chatbot) are delivered together with a working partner. If your enquiry needs such a service, its details (name, contact details and the description of your need) are passed to the partner only to provide that service, and subject to confidentiality.
• Chatbot and automation providers — if I set up a chatbot or automation for you, the tools chosen for the project are given to you in the proposal, and the information about your own customers that they process stays yours.

Transfer of data outside Israel

All of the processors above are international companies, and data is stored and processed on servers outside Israel — primarily in the United States and the European Union. This means the data is also subject to the foreign law applying to those providers, and the level of protection there is not necessarily identical to Israeli law. Using the site, submitting the form or signing a proposal all involve such a transfer.

What happens if you do not consent

• Providing this data is not a legal obligation. You provide it voluntarily.
• If you do not accept statistics and marketing cookies, the site works in full, with no restriction. I simply will not know you visited, and you will not be counted in campaign measurement.
• If you do not tick the marketing consent box, I cannot send you the prompts, because they are delivered by email. The guides on the site are open to everyone with no email and no signup.
• If you do not provide the signing details on a proposal, a signed proposal cannot be produced and the agreement cannot be concluded.
• In any case you can always contact me directly by WhatsApp or email without submitting anything on the site.

How long data is kept

Data is kept for as long as it is needed for the purpose it was collected for: mailing details — until you ask to be removed; signed proposal records — for as long as the agreement or accounting record-keeping duties require; measurement data — under Google's and Meta's own retention policies, as set out in the cookie table. You can request deletion at any point, and I will delete anything I am not legally required to keep.

Data security

The site is served over an encrypted connection (HTTPS), and access to the admin systems and databases is limited to me alone via keys that are never exposed in the browser. That said, no system is completely immune and absolute security cannot be guaranteed.

Your rights

Under the Protection of Privacy Law, 5741-1981, you have the right to review the information held about you, to request its correction if it is incorrect, incomplete or inaccurate, and to request its deletion. You may also withdraw any consent you gave — for email or for cookies — at any time and without giving a reason. For any such request write to shani.creates.ai@gmail.com and I will handle it.

Minors

The site and services are intended for adults (18+). I do not knowingly collect information about minors. If such information turns out to have been collected, it will be deleted on request.

Changes to this policy

This policy may be updated, for instance if a new tool is added to the site. The current version will always be published on this page with its update date, and if a new use requiring consent is introduced, you will be asked to consent again.

Contact

For any privacy question: shani.creates.ai@gmail.com