• Controller: Polytown Media Ltd., 7 HaPelach, Tel Aviv, ISRAEL
• Privacy contact: privacy@ronenbekerman.com
• EU/UK representative: None currently appointed.

• Account data: name, username, email address, password (hashed), profile details, avatar, and any bio or links you add.
• Google sign-in data: if you sign in with Google, we receive your name, email address, and basic profile information from your Google account. We use this only to create and authenticate your account. We do not request access to your Gmail, Drive, Calendar, contacts, or any other Google data.
• Content you upload: images, project showcases, descriptions, tags, comments, challenge entries, and any metadata attached to your files.
• Job board data: information you submit when posting or applying to listings.
• Technical data: IP address, device and browser type, online identifiers, cookies, and approximate location (these are treated as personal data under GDPR and Israeli law).
• Usage and analytics data: pages viewed, interactions, and similar information collected via cookies and analytics tools, subject to your cookie consent.

When you join, we review new accounts so that practicing archviz professionals can be recognised and upgraded to Member without waiting. This is the same review a human moderator would perform — the automation just does it sooner, so you can engage with your account faster. It may take into account your public professional presence — for example, a portfolio or studio site publicly associated with you. An automatic review can only ever fast-track you: it either grants Member access or passes your account to a human for a closer look — it never rejects anyone on its own. If you have questions about how your account was assessed, contact us at privacy@ronenbekerman.com.

We use strictly necessary cookies to run the Site and, with your consent, analytics cookies (Mixpanel) and our support-chat widget (Gist). Non-essential cookies are not set until you consent. See our Cookie Policy for details and how to change your choices at any time.

We share personal data only as needed to run the Site:

• Hosting and platform providers: Base44 (application, authentication, database, and content hosting) and similar infrastructure providers acting as our processors. Base44 injects its own platform-level analytics (including Mixpanel, observed on the base44.app domain) to measure use of the Base44 platform; this is governed by Base44's own policies and is outside our control.
• Image hosting and delivery: Cloudinary, which stores and serves the imagery in every Showcase — both what you upload as a Member and the imagery carried over from the legacy ronenbekerman.com archive. Your browser loads these images directly from Cloudinary, so your IP address and browser details reach it as part of delivering the page. Cloudinary acts as our processor and is not used for analytics or advertising.
• Google: for Google sign-in authentication.
• Analytics providers: Mixpanel and Base44's first-party app analytics, subject to consent. These receive only a hashed identifier, never your name or email.
• Email delivery: Resend (our email provider for service emails such as account and claim notifications, and for campaign emails). To send these and confirm they reach you, Resend processes your email address and records delivery events — including delivered, opened, clicked, and bounced. This is operational rather than consent-gated analytics: our lawful basis is legitimate interest in confirming that important service emails are delivered and seen. To target campaign emails to the right people, Resend also records which broadcast group your contact belongs to (for example, whether you are a visitor or a member), and we update that grouping as your account status changes. This grouping is organizational only and never overrides your unsubscribe choice — whether an email is actually sent to you is always governed by your subscription and opt-out settings. Resend acts as our processor.
• Support chat: Gist (getgist), subject to consent (Marketing & support chat). To run a support conversation, Gist receives your name and email so our team can identify and reply to you — unlike our analytics providers, which only ever get a hashed identifier. Active only after you opt in.
• Video embed providers (click-to-load): YouTube (Google) and Vimeo, when a Showcase includes an embedded video. No data reaches either provider until you click play on that specific video — the page shows only a placeholder naming the provider until then. When you click, the provider's player loads and your IP address, device and browser details reach it, and it may set its own cookies, under its own privacy policy. We use each provider's privacy-enhanced mode (youtube-nocookie.com; Vimeo's Do-Not-Track player option), and your click applies only to that video in that session — it is never stored as a site-wide consent.
• Web fonts: Google Fonts (served from Google's CDN); your IP address is shared with Google to deliver the fonts. (We plan to self-host fonts to remove this transfer.)
• Public display: content you choose to publish, along with your username/avatar, is visible to other users and the public by design.
• Legal and safety: authorities or third parties where required by law or to enforce our terms or respond to copyright notices.

We do not sell your personal data.

We operate from Israel and use providers that may process data in the EU, the US, and elsewhere. Where we transfer personal data internationally, we rely on appropriate safeguards (such as adequacy decisions or Standard Contractual Clauses) as required by GDPR and Israeli law.

We keep account data for as long as your account is active and for a reasonable period afterwards as needed for legal, security, and operational purposes. Uploaded content is kept until you delete it or close your account, subject to backups and legal-hold exceptions.

Depending on where you live, you have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent at any time. EU/UK users may lodge a complaint with a supervisory authority; Israeli users may contact the Privacy Protection Authority.

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to delete it, to correct it, and to opt out of "sale" or "sharing" — though we do not sell or share your personal information as those terms are defined.

To exercise any right, contact privacy@ronenbekerman.com. We will respond within the timeframes required by applicable law.

The Site is not intended for children under 16. We do not knowingly collect data from children under that age. If you believe a child has provided us data, contact us and we will delete it.

We use reasonable technical and organisational measures to protect your data. No system is perfectly secure, but we work to keep your information safe and will notify you and the relevant authorities of a breach where required.

We may update this policy. We will post the new version here with a revised "Last updated" date and, for material changes, provide additional notice.

Questions about this policy or your data: privacy@ronenbekerman.com.