Privacy Policy

This Privacy Policy explains how Unbound American collects, uses, stores, and protects personal data in connection with the UnboundAmerican.com website (the "Website") and the bureaucratic and logistical coordination services we provide (the "Services"). It is designed to comply with the Israeli Protection of Privacy Law, 5741-1981, and its regulations (the "Israeli Privacy Law"), and, to the extent applicable to any data subject located in the European Union or European Economic Area, the General Data Protection Regulation (EU) 2016/679 ("GDPR").

1. Who We Are

UnboundAmerican.com is operated by Reuven Krumbein, trading as Unbound American, an Israeli Osek Murshe (licensed sole proprietor) registered under number 305662157, based in Israel ("Unbound American," "we," "us," or "our"). We provide administrative and logistical coordination services to dual US-Israeli citizens navigating the US citizenship renunciation process. We are not a law firm, and we do not provide legal, tax, or financial advice. For any question about this Privacy Policy or about how we handle your personal data, contact us at info@unboundamerican.com.

2. Personal Data We Collect

Depending on whether you are simply browsing our Website, submitting an inquiry, or engaged as a client, we may collect the following categories of personal data about you:

• Identification data: your full name, and, once you engage our services, your identity document details (e.g., Teudat Zehut, passport, or other government-issued ID) as required for your renunciation appointment
• Contact data: your email address and WhatsApp or telephone number
• Employment status, as provided in our intake form
• Financial situation details, to the extent you choose to share them with us — for example, to help determine which service tier suits your circumstances, or for invoicing and payment purposes. We do not request or require access to your bank, investment, or brokerage accounts, and any broader financial or tax matters remain strictly between you and your own independent advisor
• Identity and supporting documents you provide, or that we help you prepare, for your renunciation appointment (for example, evidence of US nationality, proof of identity, or documentation of a legal name change)
• Correspondence between you and us, including emails, WhatsApp messages, call notes, and — where you have engaged our services and delegated access to a dedicated Gmail account for that purpose — correspondence with the relevant US embassy or consulate conducted through that account
• Payment confirmation data processed through our payment provider; we do not directly collect or store your full card or bank account details
• Limited technical data collected through cookies on our Website, described in Section 9 below

3. Why We Collect It

We collect and use your personal data for the following purposes:

• To respond to your inquiry and, where you choose to proceed, to deliver the Services you have engaged us for
• To communicate with you about your engagement, your documentation, your appointment, and related logistics
• To prepare and manage documentation and to correspond with the relevant embassy or consulate on your behalf, strictly within the scope of the Services and any authorization you have given us
• To process payments for the Services
• To meet our own legal, regulatory, tax, and accounting obligations as an Israeli Osek Murshe
• To maintain the security and proper functioning of our Website

We do not use your personal data for marketing purposes, and we do not sell, rent, or trade your personal data to any third party.

Legal bases under GDPR: where the GDPR applies to you, we rely on the following legal bases for processing your personal data: performance of a contract (or steps taken at your request prior to entering into one), compliance with a legal obligation, our legitimate interests in operating and securing our Website and business (balanced against your rights), and, where applicable, your consent (for example, for non-essential cookies).

4. How We Store Your Data

We store personal data using the following systems, each configured with access controls limiting access to Reuven Krumbein and any authorized staff or contractors bound by confidentiality obligations:

• Google Drive — for storage of documents and files relating to your engagement, with folder-level access permissions restricting visibility to authorized personnel only
• HubSpot — as our customer relationship management ("CRM") system, for storing contact details and a record of our communications and engagement with you
• PandaDoc — for generating, sending, and storing signed service agreements and related documents, including digital signatures

We take reasonable technical and organizational measures, consistent with the safeguards offered by these platforms (including encryption in transit and, where provided by the platform, at rest), to protect your personal data against unauthorized access, loss, or misuse. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

5. Third-Party Processors

We work with a limited number of trusted third-party service providers ("Processors") who process personal data on our behalf, strictly for the purposes described in this Policy. Each Processor is subject to its own privacy policy and terms, and processes data only in accordance with our instructions or as otherwise permitted by applicable law:

• PayPal — payment processing for Service fees
• PandaDoc — preparation, delivery, storage, and digital signature of service agreements and related contracts
• Make — workflow automation connecting our intake, CRM, and document systems (for example, routing a new inquiry into our CRM)
• HubSpot — customer relationship management, as described in Section 4
• Google Workspace (Drive and Gmail) — document storage and email communication, including the dedicated Gmail account used for embassy or consulate correspondence, as described in Section 4
• Netlify — hosting of the UnboundAmerican.com website
• Google Analytics (Google LLC) — website analytics
• Meta Platforms Inc. — advertising pixel and conversion tracking

Cross-border data transfers. Several of our Processors are based outside Israel and the European Economic Area, principally in the United States. Where we transfer personal data to such Processors, we rely on the safeguards made available by those Processors (such as their participation in recognized data protection frameworks or their standard contractual data processing terms) to protect your data consistent with the requirements of the Israeli Privacy Law and, where applicable, the GDPR's rules on international transfers.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy:

• If you engage our Services, we retain your personal data for the duration of your engagement and for seven (7) years thereafter, in order to meet Israeli tax and accounting record-keeping obligations
• If you submit an inquiry but do not proceed with our Services, we retain your personal data only for as long as reasonably necessary to respond to your inquiry, and will delete or anonymize it within a reasonable period thereafter, unless you ask us to retain it for a specific reason or we are required to retain it by law
• We may retain personal data for a longer period where necessary to establish, exercise, or defend legal claims

7. Your Rights Under Israeli Privacy Law

If you are an individual whose personal data we hold, you have the following rights under the Israeli Protection of Privacy Law, 5741-1981, and its regulations:

• The right to be informed that your data is held in our databases, and of the purposes for which it is used
• The right to access the personal data we hold about you
• The right to request correction of personal data that is incorrect, incomplete, unclear, or outdated
• The right, in certain circumstances, to request that we stop using your data for particular purposes, including direct marketing (noting that we do not use your data for marketing in any event, per Section 3)

To exercise any of these rights, contact us using the details in Section 10 below.

8. Your Rights Under GDPR (EU/EEA Residents)

If you are located in the European Union or European Economic Area, you additionally have the following rights under the GDPR, to the extent applicable:

• Right of access to your personal data
• Right to rectification of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"), in certain circumstances
• Right to restrict processing of your data, in certain circumstances
• Right to data portability, where technically feasible
• Right to object to processing based on our legitimate interests
• Right to withdraw consent at any time, where processing is based on consent (such as non-essential cookies), without affecting the lawfulness of processing before withdrawal
• Right not to be subject to a decision based solely on automated processing, including profiling, that produces legal or similarly significant effects. We do not currently engage in such automated decision-making

To exercise any of these rights, contact us using the details in Section 10 below. We will respond to your request within the timeframes required by the GDPR.

9. Cookies and Tracking

Our Website uses strictly necessary cookies required for it to function and remain secure, and, where applicable, a cookie that records your cookie consent preference. We use cookies and similar tracking technologies to understand how visitors use our website and to support our advertising efforts. Specifically: Google Analytics 4 collects anonymized data about page views, session duration, traffic sources, and form submissions. Meta Pixel tracks page views and form submission events to support Facebook and Instagram advertising. Both tools are activated only when a visitor clicks Accept on our cookie consent banner. Visitors who click Decline are not tracked by either tool. You may change your preference at any time by clearing your browser's cookies and site data and revisiting the site.

10. How to Contact Us

If you have any question about this Privacy Policy, wish to exercise any of the rights described above, or have any other privacy-related request, please contact us at: info@unboundamerican.com. We aim to acknowledge and respond to privacy requests within thirty (30) days.

11. Right to Lodge a Complaint

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint:

• In Israel, with the Privacy Protection Authority (הרשות להגנת הפרטיות), part of the Israeli Ministry of Justice
• If you are located in the European Union or European Economic Area, with the data protection supervisory authority in your country of residence, place of work, or the place of the alleged infringement

We would, however, appreciate the opportunity to address your concern directly before you do so — please contact us first using the details in Section 10.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or applicable law. The effective date at the top of this Policy indicates when it was last revised. We encourage you to review this Policy periodically.