Privacy policy
What personal data we collect, why, who receives it, how long it is kept, and what rights you have.
Contents
- 1. General
- 2. Who is responsible for your data
- 3. What we collect
- 4. Why we use your data
- 5. Do you have to give us data
- 6. Who receives your data
- 7. Transfers outside Israel
- 8. How long we keep data
- 9. Security
- 10. Your rights
- 11. Minors
- 12. Cookies
- 13. Email
- 14. Changes to this policy
- 15. Questions and complaints
1. General
1.1. This policy explains how we handle personal data on Cow, and forms part of the terms of use. 1.2. We act under the Protection of Privacy Law, 5741-1981, as amended by Amendment 13 (in force since 14 August 2025), and the Protection of Privacy (Data Security) Regulations, 5777-2017. 1.3. "Personal data" is data about an identified or identifiable person, such as a name, email address, IP address or device identifier, where it can be linked to them. 1.4. If the Hebrew version and a translation differ, the Hebrew version prevails.
2. Who is responsible for your data
2.1. The controller of the database is the site's operator, whose details appear at the bottom of this page. 2.2. For anything related to privacy, write to privacy@cow.co.il. 2.3. At our current scale we are not required to appoint a data protection officer. If that changes, we will publish their details here.
3. What we collect
3.1. At sign-up: name, email address, password (stored only as a one-way hash, so it cannot be recovered), username, preferred language, your age declaration, and your marketing choice. If you sign up with Google, Google gives us your name, email address and profile picture. 3.2. When you order: the recipient's name, the occasion, the text you wrote to the creator, the sender's name, the age declaration made at payment, and the video once delivered. The text may include information about other people, and you are responsible for being allowed to share it. 3.3. Payments: amount, date, status and the transaction reference at the payment processor. We do not see or store card details. 3.4. Creators: display name, username, bio, photos and intro video, categories, prices and delivery times; details of connected social accounts (channel ID, username and follower count, with read-only permission); bank details for withdrawals; identity and age documents provided for verification; and tax documents. 3.5. Activity on the site: posts, comments, likes, follows, reviews and reports. 3.6. Technical data: IP address, browser and device type and sign-in times, stored with each signed-in session for security. To count visits to creator pages we keep only a one-way hashed value that is deleted automatically and cannot identify you. 3.7. Cookies and browser storage, as set out in the cookie policy. 3.8. We do not ask for sensitive data such as health, origin, political opinions, religion, sexual orientation or criminal record. Please do not include such data in a request to a creator.
4. Why we use your data
4.1. To provide the service: run your account, process orders, take payment, deliver videos and pay creators. 4.2. To keep the service safe: screen content, handle reports, enforce the age limits and prevent fraud and impersonation. 4.3. To verify identity, age and ownership of social media accounts. 4.4. To send service messages about orders, payments and account security. 4.5. To send marketing email, only to people who agreed in advance and declared they are 18 or over. 4.6. To answer enquiries and improve the service. 4.7. To meet legal obligations, such as bookkeeping and tax reporting, and to respond to a competent authority or a court order.
5. Do you have to give us data
5.1. You are under no legal obligation to give us data. You give it voluntarily. 5.2. Without some of it we cannot provide the service: without a name and email address you cannot open an account; without the order details the creator cannot record; and without identity verification and bank details a creator cannot be paid. 5.3. Consent to marketing email and to non-essential cookies is given separately, is not a condition of using the service, and can be withdrawn at any time. 5.4. We make no automated decisions about you with legal effect, apart from automatically blocking text that breaks the content rules. If you think text was blocked by mistake, write to us. 5.5. We do not sell personal data or pass it to advertisers.
6. Who receives your data
6.1. The creator you ordered from: your name, the recipient's name and the request details. The creator does not receive your email address, payment details or your orders from other creators. 6.2. Other users: what you publish publicly, such as posts, comments and reviews, together with your display name. A video is shown publicly only if you allowed it when ordering. 6.3. Providers who work for us, under agreements requiring them to use the data only for the service they provide us, keep it confidential and secure it: • Grow (Meshulam), Israel: card payments and refunds. • Brevo, France: sending email. • Google, United States: sign-in with Google, for those who choose it. • Hosting and storage providers, where the site, database and files are hosted. 6.4. Professional advisers, such as accountants and lawyers, as needed. 6.5. A competent authority, under a court order or legal demand, or where needed to prevent real danger to a person. 6.6. If the business is transferred to another body, the data will be transferred provided the recipient undertakes to follow this policy. We will give notice in advance.
7. Transfers outside Israel
7.1. Some of our providers store or process data outside Israel, for example Brevo in the European Union and Google in the United States. 7.2. Transfers follow the Protection of Privacy (Transfer of Data to Databases Abroad) Regulations, 5761-2001: to countries with equivalent data protection laws, such as EU member states, or to a provider that has contractually undertaken to protect the data at a level no lower than Israeli law and not to transfer it onwards.
8. How long we keep data
8.1. We keep data only as long as it is needed for the purpose it was collected for, or as long as the law requires. 8.2. Account details: while the account is active, and up to 12 months after it is closed, to handle later enquiries. 8.3. Payment records, receipts and earnings records: seven years, under bookkeeping and tax rules. 8.4. Videos: while the buyer's account is active. They are deleted when the account is closed, unless legal proceedings require keeping them. 8.5. Security logs: up to 12 months. 8.6. Records of consent to the terms and to marketing: as long as needed to prove the consent was given. 8.7. At the end of the period the data is deleted, or processed so that no person can be identified from it.
9. Security
9.1. We act under the Protection of Privacy (Data Security) Regulations, 5777-2017. 9.2. Our measures include encrypted connections (HTTPS), one-way hashing of passwords, need-to-know access permissions, logging of admin actions, backups and periodic reviews. 9.3. We do not store card details. 9.4. No system is completely secure. We undertake to take reasonable, accepted security measures. 9.5. We will report a serious security incident to the Privacy Protection Authority as the regulations require, and notify those affected when the law or the Authority requires it.
10. Your rights
10.1. Access: you may review the data we hold about you (section 13 of the Law). We will answer within 30 days. 10.2. Correction and deletion: if data about you is inaccurate, incomplete, unclear or out of date, you may ask us to correct or delete it (section 14 of the Law). If we refuse, we will explain why. 10.3. Unsubscribing: you can stop marketing email with the unsubscribe link in every marketing email, in your settings, or by writing to us. 10.4. Closing your account and deleting data: you can ask us to close your account and delete its data. We will delete it, apart from what the law requires us to keep (mainly payment records, section 8.3). 10.5. A copy of your data: on request we will send you a copy of the data you gave us, in a common file format. 10.6. How to ask: write to privacy@cow.co.il from the address registered to your account. So that we do not give data to someone else, we may ask you to verify your identity. There is no charge. 10.7. If our answer does not satisfy you, you may complain to the Privacy Protection Authority at the Ministry of Justice.
11. Minors
11.1. The service may not be used under age 13. If we learn that we collected data about a child under 13, we will delete it. You can tell us at privacy@cow.co.il. 11.2. Users aged 13 to 17 may use the service only with a parent's or guardian's consent. Minors cannot order or pay, and cannot open a creator profile. 11.3. We do not send marketing email to minors or build marketing profiles of them. 11.4. A parent or guardian may ask to review, correct or delete the account of a minor in their care.
12. Cookies
12.1. We use only the cookies and browser storage the site needs to work, such as the sign-in cookies and the record of your cookie choice. There are currently no analytics or advertising cookies on the site. 12.2. If we add such cookies in the future, they will run only after you agree to them in the cookie banner. Full details are in the cookie policy.
13. Email
13.1. Marketing email is sent only to people who agreed to it in advance and explicitly, under section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982. 13.2. Every marketing email is marked "advertisement" (פרסומת), includes the sender's details and includes an unsubscribe link. 13.3. Unsubscribe requests take effect immediately and free of charge. 13.4. Service messages, such as order confirmations, delivery updates or security alerts, are not marketing, and are sent as long as the account is active.
14. Changes to this policy
14.1. We may update this policy from time to time. Every version is dated. 14.2. We will give advance notice of a material change on the site and by email and, where the law requires, ask for your consent again.
15. Questions and complaints
15.1. For any privacy question, request or complaint: privacy@cow.co.il. We will answer within 30 days at most. 15.2. You may also contact the Privacy Protection Authority.
- Operator
- TODO: השם המלא של בעל העסק
- Exempt dealer no.
- TODO: מספר עוסק פטור
- Address
- TODO: רחוב, מספר, עיר
- hello@cow.co.il
Last updated: 24 September 2026