Last modified: November 2026
Brava Security Inc., and its subsidiaries (“Brava”, “we“, “our” or the “Company“, and their affiliates) respects the privacy of its users and website visitors, and is committed to protecting personal information, which means any information that relates to an identified or identifiable natural person and (hereinafter, “Personal Data”), you may share with us. We also protect our followers, vendors, service providers, partners and others who contact us (these and any others with respect to whom we collect personal data, shall collectively be referred to as “users” or “you” or “Data Subjects”).
This policy and notice (the “Privacy Policy“) explains the types of information we may collect from you or that you may provide when you visit our website, https://www.brava.security, our social media pages, or you may provide us with such data in the course of business transactions, sales and support. We are transparent about our practices regarding the information we may collect use, maintain, and process and describe our practices in this policy and notice. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.
Brava aims to process only adequate, accurate and relevant data limited to the needs and purposes for which it is gathered. We also aim to store data for the period necessary to fulfill the purpose for which the data is collected.
Brava only collects data in connection with a specific legitimate business purpose and only processes data in accordance with this Privacy Policy.
When you sign up to our website, or in processing data for our users we collect several categories of personal data. Personal Data which is being gathered consists of any details which are personally identifiable provided consciously and voluntarily by you through your use of the website (as described below):
Identifiable Data: This may include your name (first and last), email address, phone numbers, postal address or other identifier by which you may be contacted online or offline as well as payment and billing details, billing address, login credentials, your Brava account username and password and usage details, and other information you may choose to provide to us.
You do not have any legal obligation to provide any information to Brava, however, we may require certain information in order to provide any services and products. If you choose not to provide us with certain information, then we may not be able to provide you with some or all of the services.
We collect Personal Data through your use of our website. In other words, when you are using the website, we are aware of it and gather, collect and record the information relating to such usage, either independently or through the help of third-party services as detailed below. This includes technical information and behavioral information such as the User’s Internet protocol (IP) address used to connect your computer to the Internet, your uniform resource locators (URL), operating system, type of browser, browser plug-in types and versions, screen resolution, Flash version, time zone setting, the User’s ‘clickstream’ on the website, the period of time the User visited the website, methods used to browse away from a page, and any phone number used to call our User service number. We likewise place cookies on your browsing devices (see section ‘Cookies’ below), though you may block these.
We collect Personal Data required to provide services when you register interest and/or open an account. In addition, we collect your Personal Data, when you provide us such information by entering it manually or automatically, or through your use of our website, facilities and services, or in connection with site visits, in the course of preparing a contract, or otherwise in engaging with us.
We will use Personal Data to provide and improve our services to our Users and others and meet our contractual, ethical and legal obligations, including for example:
We keep Personal Data in servers which controlled by Brava through reputable cloud-service providers in the US.
We may transfer personal data from the EEA to Israel, where it may be accessed, or to the United States, where it may be stored, for the following purposes:
Transfers of personal data from the EEA to Israel are subject to the European Commission's adequacy decision for Israel, to the extent applicable.
For transfers to the United States, we take measures required by applicable data protection laws to ensure appropriate protection of personal data and data subjects' rights. These may include relying on the EU-US Data Privacy Framework, or entering into the European Commission's standard contractual clauses with the recipient. Where required, we assess the circumstances of the transfer and implement supplementary safeguards. You may contact us at privacy@brava.security for further information about the safeguards applicable to a particular transfer or to request a copy, subject to appropriate redactions.
In accordance with applicable privacy laws, we will only retain personal data for as long as is necessary for the purposes outlined in this policy or as required by law.
Specifically:
We may also retain personal data to meet any audit, compliance and business best-practices.
Data with respect to which Brava is the Processor may be deleted only on action and/or instruction of the Controller, except where such data must be retained by us, in our judgment, as above.
Data that is no longer retained may be anonymized or deleted. Likewise, some metadata and statistical information concerning the use of our services are not subject to the deletion procedures in this policy and may be retained by Brava. We will not be able to identify you from this data. Some data may also be retained on our third-party service providers’ servers until deleted in accordance with their privacy policy and their retention policy.
We take great care in implementing, enforcing and maintaining the security of the personal data we process, whether as Processor or as Controller. Brava implements, enforces and maintains security measures, technologies and policies to prevent the unauthorized or accidental access to or destruction, loss, modification, use or disclosure of personal data.
We likewise take steps to monitor compliance of such policies on an ongoing basis. Where we deem it necessary in light of the nature of the data in question and the risks to data subjects, we may encrypt data. Likewise, we take industry standard steps to ensure our website and services are safe.
Note however, that no data security measures are perfect or impenetrable, and we cannot guarantee that unauthorized access, leaks, viruses and other data security breaches will never occur.
Within Brava, we endeavor to limit access to personal data to those of our personnel who: (i) require access in order for Brava to fulfil its obligations, including also under its agreements, and as described in this Privacy Policy , and (ii) have been appropriately and periodically trained with respect to the requirements applicable to the processing, care and handling of the Personal Data, and (iii) are under confidentiality obligations as may be required under applicable law.
Brava shall act in accordance with its policies and with applicable law to promptly notify the relevant authorities and data subjects in the event that any personal data processed by Brava is lost, stolen, or where there has been any unauthorized access to it, all in accordance with applicable law and on the instructions of qualified authority. Brava shall promptly take reasonable remedial measures.
Brava respects Data Subjects' rights, which may vary depending on their jurisdiction.
If, for any reason, a data subject wishes to modify, delete or retrieve their Personal Data, they may do so, where applicable, by contacting Brava as detailed below.
Data subjects in the EU: We enable privacy rights under generally accepted data protection laws, including the GDPR as follows: Rights to data portability; Rights to access data; Right to rectify data; Right to rectify data; Right to object to processing; Right to erase data.
Additionally, Data Subjects have the right to lodge a complaint, with a data protection supervisory authority in the place of their habitual residence.
Data Subjects' rights under other jurisdictions might differ from the rights as depicted above, for more information about your rights as a Data subjects and how to exercise them please contact us at: privacy@brava.security.
Note that Brava will have to undertake a process to identify a data subject exercising their rights. Brava keeps details of such rights exercised for its own compliance and audit requirements. Please note that Personal Data may be either deleted or retained in an aggregated manner without being linked to any identifiers or Personal Data, depending on technical commercial capability. Such information will continue to be used by Brava.
Note, that data subject rights cannot be exercised in a manner inconsistent with the rights of Brava employees and staff, with Brava proprietary rights, and third-party rights.
Brava does not sell personal information or share personal information for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”).
We use certain analytics and website functionality technologies, as described in Section 8 (Cookies and External Links), to operate, maintain and improve our Website.
If our practices change in the future, we will update this Privacy Policy and provide any notices, choices and opt-out mechanisms required under applicable law.
Before we can respond to any CCPA requests, we will need to verify that you are who you say you are. Verification is important for preventing fraudulent requests and identity theft.
The verification process depends on which type of request you make. For requests to access specific information or requests to delete information, we may require a higher level of verification. Typically, identity verification will require you to confirm certain information about yourself based on the information we have already collected. For example, we may ask you to reply from the email address we have on file for you that is associated with your name. If we cannot verify your identity, we cannot fulfill requests to exercise any rights accorded to you by CCPA.