Privacy Policy

Overview

FORTVISION Ltd (“FORTVISION”, “we”, “us”, “our”) is a marketing technology company headquartered in Tel Aviv, Israel. We operate the website fortvision.com and provide both a self-serve SaaS platform and fully managed marketing services to businesses worldwide.

This Privacy Policy explains what personal data we collect, why we collect it, how we process and protect it, and what rights you have regarding your information. It applies to all visitors of our website, users of our platform, and clients of our managed services.

By accessing our website or using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of our website and services.

Data We Collect

We collect the following categories of personal data depending on how you interact with FORTVISION:

Category	Examples	When Collected
Account Data	Full name, email address, phone number, company name, job title, billing and payment information	When you create an account, request a demo, or subscribe to our services
Usage Data	Features accessed, configuration choices, campaign settings, login timestamps, interaction patterns within the platform	Automatically when you use our SaaS platform
Technical Data	IP address, browser type and version, operating system, device identifiers, screen resolution, referring URLs, cookies and similar tracking technologies	Automatically when you visit our website or use our platform
Marketing Data	Campaign performance metrics, conversion events, audience segment data, ad spend and attribution data, email engagement metrics	When we deliver managed marketing services on your behalf

We do not intentionally collect sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data). If you believe we have inadvertently collected such data, please contact us immediately at privacy@fortvision.com.

How We Use Your Data

We process your personal data for the following purposes:

• Service delivery: To provide, maintain, and operate our SaaS platform and managed marketing services, including account management, campaign execution, reporting, and customer support.
• Platform improvement: To analyze usage patterns, diagnose technical issues, develop new features, and improve the overall performance and user experience of our platform.
• Communications: To send you service-related notifications, respond to your inquiries, provide onboarding guidance, and — with your consent — send marketing communications about our products and services.
• Compliance and legal obligations: To comply with applicable laws and regulations, respond to lawful requests from public authorities, enforce our terms of service, and protect our rights, privacy, safety, or property.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities.
• Analytics and research: To conduct aggregated, anonymized analytics to understand market trends and improve our service offerings.

Our legal bases for processing under GDPR include: performance of a contract, legitimate interests (improving our services and preventing fraud), compliance with legal obligations, and your consent where applicable.

Sharing Your Data

We do not sell, rent, or trade your personal data to third parties. We may share your data only in the following circumstances:

• Service providers: We work with trusted third-party providers who assist us in operating our platform and delivering services. These include cloud infrastructure providers (Microsoft Azure, Google Cloud Platform, Amazon Web Services), payment processors, email delivery services, analytics tools, and customer support platforms. All service providers are bound by strict data processing agreements and are only permitted to process your data on our behalf and in accordance with our instructions.
• Legal requirements: We may disclose your data if required to do so by law, regulation, legal process, or governmental request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal data.
• With your consent: We may share your data with third parties when you have given us explicit consent to do so.

When we share data with service providers located outside of the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on adequacy decisions.

Security

We take the security of your personal data seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

• Encryption: All data is encrypted in transit using TLS 1.2+ and at rest using AES-256 encryption across all storage systems.
• SOC 2 aligned practices: Our security controls are aligned with SOC 2 Type II standards, covering security, availability, processing integrity, confidentiality, and privacy.
• Infrastructure: Our platform runs on enterprise-grade cloud infrastructure provided by Microsoft Azure, Google Cloud Platform, and Amazon Web Services, with servers primarily located in Europe and the United States.
• Access controls: We enforce role-based access controls (RBAC), multi-factor authentication (MFA) for internal systems, and the principle of least privilege across our organization.
• Regular audits: We conduct regular security assessments, penetration testing, and vulnerability scanning to identify and remediate potential risks.
• Incident response: We maintain a documented incident response plan and will notify affected users and relevant authorities of any data breach in accordance with applicable law.

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

Your Rights

Depending on your location, you may have certain rights regarding your personal data:

European Economic Area (EEA) — GDPR

If you are located in the EEA, you have the following rights under the General Data Protection Regulation:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You can request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: You can request that we limit the processing of your personal data in certain circumstances.
• Right to data portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You can object to the processing of your personal data based on our legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

Israel has been recognized by the European Commission as providing an adequate level of data protection under GDPR Article 45, which facilitates the lawful transfer of personal data from the EEA to Israel.

California — CCPA / CPRA

If you are a California resident, you have the following rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to know: You can request information about the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request the deletion of your personal information, subject to certain exceptions.
• Right to opt out: You can opt out of the sale or sharing of your personal information. FORTVISION does not sell personal information.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
• Right to correct: You can request that we correct inaccurate personal information.

Other Jurisdictions

If you are located in another jurisdiction with applicable data protection laws, you may have similar rights. We are committed to honoring data subject rights in accordance with applicable local laws.

To exercise any of these rights, please email us at privacy@fortvision.com. We will respond to your request within 30 days (or sooner if required by applicable law). We may ask you to verify your identity before processing your request.

Contact

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

FORTVISION Ltd
121 Dvora HaNevi'a St, 29th Floor
Tel Aviv-Yafo, Israel
privacy@fortvision.com

If you are located in the EEA and believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with your local supervisory authority.

This Privacy Policy may be updated from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you by email or through our platform.