EcomSense®

Privacy Policy

Last updated: April 2026

1. Introduction

Welcome to EcomSense™. This Privacy Policy applies to our public website (ecomsense.ai) and our gated web application (app.ecomsense.ai) (collectively, the "Services"). The Services are owned and operated by Shahar Pitaru and Yaarit Cohen (hereinafter: "the Data Controllers", "we", "us", or "our"), located in Israel.

We are committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services, as well as your rights under applicable global privacy laws, including the General Data Protection Regulation (GDPR), and specific state laws like the CCPA/CPRA.

2. Information Collection and Lawful Basis for Processing

We only collect personal information when we have a legal reason to do so. We collect information in the following ways:

  • SaaS Account Registration & Authentication: To access our web application, users must have an active usage agreement. When creating and authenticating your account, we collect your name, corporate email address, and phone number. Lawful Basis: Performance of a Contract (to provide access to the application as agreed) and Legitimate Interest (to maintain account security).
  • Contact Forms: When you submit an inquiry, we collect your full name, email address, phone number, and the contents of your message. Lawful Basis: Legitimate interest.
  • Newsletter Subscriptions: When you join our mailing list, we collect your email address and name. Lawful Basis: Explicit consent.
  • Browsing Data: We collect your IP address, browser type, device information, pages viewed, and browsing times via cookies and tracking technologies. Lawful Basis: Explicit consent (for analytical and marketing tracking on our public website).

3. Newsletter and Direct Marketing

If you have subscribed to our mailing list, we use your information to send updates, professional content, and marketing offers. We use ActiveTrail as our email marketing processor. Your email is stored securely on ActiveTrail's servers, and they are contractually obligated to protect your data.

Right to Withdraw Consent: You may withdraw your consent at any time by clicking the "Unsubscribe" link at the bottom of any email we send, or by contacting us directly.

4. Use of Cookies and Tracking Technologies

Cookies are small text files stored on your device. We use them to improve functionality and understand how our Services are used.

  • Essential Cookies: Necessary for the Services to function properly and for secure authentication. These are loaded automatically.
  • Analytical and Marketing Cookies: With your explicit consent on our public website, we use Google Analytics to understand user behavior, and Google Tag Manager to share browsing data with advertising partners, including Google, Meta, and LinkedIn.
  • These non-essential cookies and tags will only be activated if you opt-in via our Cookie Banner. You can manage or withdraw your consent at any time through your browser settings or our Cookie Settings.

5. Data Sharing and Third-Party Processors

We do not sell your personal data for monetary compensation. We share your data only with trusted third-party service providers ("Data Processors") who assist us in operating our Services:

  • Clerk: We use Clerk to manage secure user authentication and identity verification for our web application. Your login credentials and basic profile data are processed by Clerk to ensure secure access to your account.
  • Base44: Our website builder and hosting provider. Data submitted through our site is stored on Base44's cloud servers.
  • ActiveTrail: Our email marketing platform.
  • Analytics & Advertising Partners: Google, Meta, and LinkedIn (only with your consent, as detailed in Section 4).

6. International Data Transfers

We operate from Israel, a country recognized by the European Commission as providing an "adequate" level of data protection for European data.

Because we utilize cloud infrastructure and third-party processors (such as Base44, Clerk, Google, and Meta), the data you submit may be transferred to, stored, and processed on servers located outside of your country of residence, including in the United States. We ensure that any such international transfers are protected by appropriate legal safeguards, such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, as mandated by our data processing agreements with these providers.

7. Data Retention

We keep your personal information only for as long as necessary to fulfill the purposes for which it was collected:

  • SaaS Account Data: Retained for the duration of your active usage agreement. Upon termination of the contract or account deletion, we will delete or anonymize your authentication data within 60 days, unless required by law to retain it longer for financial or legal records.
  • Newsletter Data: Retained until you unsubscribe or request deletion.
  • Contact Form Inquiries: Retained for up to 12 months after the communication has concluded.
  • Cookie/Tracking Data: Retained according to the specific expiration dates set by the respective cookies, or until you clear your browser data.

8. Data Security

We implement strict security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of data transmission over the Internet or cloud storage is 100% secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

Depending on your location (including the EEA and UK), you have the following rights regarding your personal data:

  • The right to access: You can request a copy of the personal data we hold about you.
  • The right to rectification: You can request that we correct any inaccurate or incomplete data.
  • The right to erasure ("Right to be forgotten"): You can request that we delete your personal data.
  • The right to restrict processing: You can ask us to block the processing of your data.
  • The right to data portability: You can request your data in a structured, machine-readable format.
  • The right to object: You can object to our processing of your data based on legitimate interests.
  • The right to lodge a complaint: You have the right to complain to your local data protection supervisory authority.

To exercise any of these rights, please contact us using the details below.

10. Notice to California Residents

This section applies specifically to California residents and supplements the information contained in our Privacy Policy. It complies with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and the California Online Privacy Protection Act (CalOPPA).

  • Categories of Personal Information Collected: In the preceding 12 months, we have collected the following statutory categories of personal information: Identifiers (e.g., name, email address, phone number), Internet or other electronic network activity information (e.g., browsing history, IP address), and Professional or employment-related information (corporate details for B2B SaaS access).
  • "Do Not Sell or Share My Personal Information": We do not sell your personal information for monetary compensation. However, we use third-party analytics and advertising tools (such as Google, Meta, and LinkedIn). Under California law, sharing browsing data with these third parties for cross-context behavioral advertising may be considered "sharing" or "selling." California residents have the right to opt out of this practice. You can exercise this right by clicking the "Do Not Sell or Share My Personal Information" link in our website footer or by adjusting your preferences in our Cookie Settings.
  • Do Not Track (DNT) Signals: CalOPPA requires us to let you know how we respond to web browser Do Not Track (DNT) signals. Because there is currently no universally recognized industry standard for recognizing or rewarding DNT signals, our Site does not currently respond to them.
  • Your CCPA Rights: California residents have the right to request access to their data, request deletion of their data, request correction of inaccurate data, and the right to not be discriminated against for exercising these rights. To submit a request, please contact us at the email provided in the Contact Us section.

11. Third-Party Links

The Services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review the privacy policy of any third-party site you visit.

12. Changes to This Policy

We reserve the right to update this Privacy Policy from time to time. Any changes will take effect immediately upon publication on the Site. The "Last updated" date at the top of this page will reflect the most recent revisions.

13. Contact Us

As the Data Controllers, we are responsible for your personal data. For any questions, concerns, or requests to exercise your privacy rights, please contact us at:

Data Controllers: Shahar Pitaru & Yaarit Cohen

Email: info@ecomsense.ai

Mailing Address: Shahar Pitaru, P.O. Box: 24183, 6124101, Israel