Privacy Policy
Last updated: April 14, 2026
1. Who We Are
Handled is operated by Gabriel Rymberg and Guy Rymberg, doing business as The AI Masters ("we," "us," "our"), based in Tel Aviv, Israel. We are the data controllers for your personal data.
For privacy-related inquiries, contact us at contact@handled.team.
2. What Data We Collect
2.1 Account Data
When you sign up, we collect:
- Name and email address
- Company or organization name (if provided)
- Profession or role (collected during onboarding)
2.2 Request Data
When you submit requests, we process:
- The text and files you submit as part of your request
- Conversation history with our intake system
- Deliverables we produce for you
2.3 Payment Data
Payment processing is handled by Stripe, Inc. ("Stripe"), our payment processor. We do not collect, store, or have access to your full credit card numbers or bank account details. Stripe processes and stores payment credentials as a data processor acting on our behalf, subject to Stripe's Privacy Policy. We receive limited billing information (last four digits of your card, card brand, billing address, and transaction records) for account management and support purposes.
2.4 Usage Data
We automatically collect:
- Pages visited and features used on our platform
- Browser type, device type, and operating system
- IP address (used for security and approximate location)
- Timestamps of interactions
2.5 Cookies
We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent you from using the Service.
3. How We Use Your Data
We process your data for the following purposes:
| Purpose | Legal Basis (GDPR) |
|---|---|
| Delivering the Service (fulfilling your requests) | Contract performance |
| Account management and communication | Contract performance |
| Processing payments (via Stripe) | Contract performance |
| Improving the Service and fixing bugs | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal compliance (tax, regulatory) | Legal obligation |
4. AI Processing of Your Data
How AI Processes Your Data
When you submit a request, your data may be processed by third-party AI systems to produce deliverables. Here is what you need to know:
- We do not use your data to train AI models. Your data is used solely to fulfill your specific request.
- We use AI services from providers including Anthropic (Claude) and OpenAI. These providers process your data under their enterprise/API terms, which prohibit them from using your data for training.
- Data sent to AI providers is transmitted securely (encrypted in transit) and is not stored by them beyond the processing window specified in their terms.
- We apply data minimization — we send only the data necessary to fulfill your request, not your entire account history.
5. Who We Share Data With
We share your data only with:
- Stripe — payment processing (data processor under contract)
- AI service providers (Anthropic, OpenAI) — to process your requests (data processors under contract)
- Hosting providers (Vercel, Supabase) — infrastructure (data processors under contract)
- Law enforcement — only when legally required
We do not sell your personal data. We do not share your data with advertisers. We do not provide your data to data brokers.
6. International Data Transfers
We are based in Israel, which has an EU adequacy decision for data protection. Your data may also be processed in the United States by our AI and infrastructure providers. These transfers are protected by Standard Contractual Clauses (SCCs) and the EU-U.S. Data Privacy Framework where applicable.
7. Data Retention
- Account data: Retained while your account is active and for 12 months after cancellation.
- Request data and deliverables: Retained for 12 months after delivery to support revisions and our lifetime build support guarantee. After 12 months, archived and retained for up to 3 years for legal compliance.
- Usage data: Retained for 12 months, then aggregated and anonymized.
- Payment records: Retained as required by tax law (typically 7 years). Transaction records are maintained by us and by Stripe as our payment processor.
8. Your Rights
Depending on your location, you have some or all of the following rights:
Under GDPR (EU/EEA residents)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Limit how we process your data
- Objection: Object to processing based on legitimate interest
- Automated decision-making: We do not make decisions with legal or significant effects based solely on automated processing. Our deliverables involve human review.
Under CCPA/CPRA (California residents)
- Right to know: What personal information we collect and how we use it
- Right to delete: Request deletion of your personal information
- Right to correct: Correct inaccurate personal information
- Right to opt-out of sale: We do not sell personal information, so this right is automatically satisfied
- Non-discrimination: We will not discriminate against you for exercising your rights
To exercise any of these rights, email contact@handled.team. We will respond within 30 days (or sooner where required by law).
9. Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit (TLS) and at rest
- Access controls limiting data access to authorized personnel
- Regular security reviews of our systems and providers
- Incident response procedures
No system is perfectly secure. If we become aware of a data breach that affects your personal data, we will notify you and relevant authorities as required by law.
10. Children
The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email to active subscribers at least 14 days before taking effect. The "Last updated" date at the top indicates the most recent revision.
12. Contact
For privacy inquiries, data requests, or complaints:
contact@handled.team
Gabriel Rymberg & Guy Rymberg
The AI Masters
Tel Aviv, Israel
If you are in the EU and believe your data protection rights have been violated, you have the right to lodge a complaint with your local supervisory authority.