Legal

Privacy policy

How we handle personal data, in the two very different roles we play. Last reviewed 3 November 2026.

1. Two roles, two sets of rules

FORTVISION does two different things with data, and the rules differ for each.

  • We are a controller for data about visitors to fortvision.com, people who fill in our forms, and users who hold a FORTVISION account. We decide why and how that data is used. Sections 2–9 apply.
  • We are a processor for data our customers load into or collect through the platform — their contacts, their site visitors, their campaign results. The customer is the controller. We act on their documented instructions under a Data Processing Agreement. Section 10 applies.

2. Who we are

FORTVISION Ltd.
+972-52-3361620
[email protected]

3. What we collect as a controller

Information you give us

Name, company, work email, phone and anything written into a contact, demo-request or job-application form. If you open an account, your credentials and — where you sign in with Google or Facebook — the basic profile those providers pass to us.

Device and connection information

IP address, operating system, browser identifier and other technical details about the system you connect from.

Usage information

Pages visited, referring source, approximate location derived from IP, and how you interact with emails and campaigns we send — when you open them and what you click.

Billing information

For paying customers, what we need to invoice and collect. Card data is handled by our payment processor; we do not store full card numbers.

4. Pseudonymised identifiers

Much of what the platform handles is pseudonymised: cookie identifiers, IP addresses, mobile advertising IDs, browsing and preference history, and in limited cases a hashed email address. On its own this does not tell us who you are. It may still count as personal data under laws such as the GDPR, and we treat it accordingly.

5. Why we use it

  • To answer your enquiry and provide the service you asked for.
  • To operate, secure, troubleshoot and improve the platform.
  • To detect and prevent abuse, fraud and violations of our Terms of Use.
  • To send you material you asked to receive. You can stop this at any time.
  • To meet accounting, tax and other legal obligations.

6. Legal bases

Where the GDPR or comparable law applies we rely on: performance of a contract, for account and service data; our legitimate interest in running, securing and improving the business, balanced against your rights; your consent, for marketing communications and non-essential cookies; and legal obligation, for records we must keep.

7. When we disclose information

  • Service providers. Hosting, analytics, email and message delivery, payment processing and support tooling — under contract, only for the purposes we specify. The ones operating on this website are:
    • Google Tag Manager (Google Ireland Ltd.) — loads our measurement tags. Analytics and advertising tags are held back until you consent.
    • FormSubmit — delivers contact-form and newsletter submissions to our inbox. It receives whatever you type into the form.
    • Google Fonts — serves the typeface. Your IP address is visible to Google when the font loads.
    • Pexels — serves some imagery.
  • Legal process. Where we must comply with a law, regulation, subpoena, court order or other legal process.
  • Protecting rights. Where we reasonably believe disclosure is necessary to investigate or prevent illegal activity, suspected fraud, threats to someone's safety, or violations of our terms.
  • Corporate transactions. In a merger, acquisition or sale of assets, with notice to you.
  • Aggregated or de-identified data. Statistics that cannot reasonably identify anyone.

We do not sell personal data.

8. International transfers

We are based in Israel, which the European Commission recognises as providing an adequate level of protection. Some service providers operate elsewhere. Where a transfer needs a safeguard, we use Standard Contractual Clauses or another mechanism permitted by law.

9. Retention

Enquiry data is kept as long as we need it to respond and for a reasonable period afterwards. Account data is kept for the life of the account plus any statutory retention period. Aggregated statistics may be kept indefinitely, since they no longer identify anyone.

10. Data we process for our customers

When a brand uses FORTVISION, we handle personal data on their behalf. Our role is deliberately limited:

  • We process only on the customer's documented instructions.
  • We do not use their data to build our own marketing lists or profiles.
  • We maintain a sub-processor list and give notice before adding one.
  • We return or delete the data at the end of the engagement, at the customer's choice.
  • We assist the customer in responding to requests from the people whose data it is.

If you interacted with a brand's website and want your data corrected or removed, contact that brand first — they control it. If you cannot reach them, write to us and we will help route the request.

10a. Google user data (Gmail, Google Calendar, Google Sheets, Google Drive)

A FORTVISION user may connect their own Google account to the platform ("Connect Gmail" in Profile → My connections or in the Inbox). The connection is made through Google's sign-in (OAuth) screen, which lists exactly what we ask for. We never see or store your Google password.

FORTVISION's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access, and the one thing each permission is used for:

  • Send email on your behalf (gmail.send) — emails you write or schedule in FORTVISION (one-to-one outreach, sequences, replies from the Inbox) are sent from your own Gmail address, so they land in your real Sent folder and thread normally.
  • Read your email (gmail.readonly) — shows replies to those emails and the threads with your contacts inside the FORTVISION Inbox, and lets the platform match an incoming reply to the contact it belongs to.
  • Modify your email (gmail.modify) — marks a thread read, archives it or saves a draft reply you asked the platform to prepare. We never delete your mail and never send anything you did not ask to send.
  • Calendar (calendar.readonly, calendar.events) — checks when you are busy so your booking page offers only free slots, and writes the meetings booked through it into your calendar with a Google Meet link.
  • Google Sheets and Google Drive (spreadsheets, drive.file) — when you turn on a scheduled export, the platform writes a spreadsheet into your own Drive. drive.file only reaches files the platform itself created.
  • Postmaster Tools (postmaster) — reads the deliverability statistics Google publishes for your own sending domains.

What we do not do with Google user data:

  • We do not use it for advertising, for building profiles, or for training machine-learning or AI models that are not part of the feature you asked for.
  • AI features that touch Google user data (for example "Draft a reply" in the Inbox) send the text of that one thread, when you ask, to the commercial APIs of our AI providers (Anthropic, OpenAI), whose API terms exclude customer content from model training. We do not use raw or derived Google user data to develop, improve or train any AI or machine-learning model, and we do not transfer it to any service that would.
  • We do not sell it, and we do not share it with third parties except the sub-processors that host and run the platform (section 10), under contract, for that purpose only.
  • No person at FORTVISION reads your mail or calendar, unless you ask us to for support, it is needed for security or to comply with law, or the data has been aggregated so it no longer identifies anyone.

Storage and retention. We store the OAuth refresh token Google issues, the address of the connected mailbox, and the metadata of the messages the platform sent or displayed (recipient, subject, date, thread id and a short preview), so the Inbox and the tracking work. Message bodies are fetched from Google when you open a thread and are not kept as a copy of your mailbox. Tokens are encrypted at rest and are used only by the platform's own servers.

Revoking access. Click Disconnect next to the mailbox in Profile → My connections, which deletes the stored token at once, or remove FORTVISION from your Google account permissions. Either way the platform stops reaching your Google account immediately; the sent-message history it already recorded stays in your workspace until the workspace owner deletes it, or you ask us to (section 12).

11. Suggested notice for our customers

Customers may wish to include wording of this kind in their own privacy policy:

"We use marketing and personalisation technology provided by FORTVISION Ltd. When you interact with our site or our campaigns, FORTVISION may collect information that qualifies as personal data under applicable law, including cookie identifiers, IP address and browsing activity, in order to deliver and measure the experience on our behalf. For more on how FORTVISION collects and uses this data, see fortvision.com/privacy-policy."

12. Your rights

Depending on where you live, you may ask us to give you access to your data, correct it, delete it, restrict or stop processing it, or provide it in a portable format. You may withdraw consent at any time — that does not affect processing already carried out. Write to [email protected]. We will verify your identity before acting and respond within the time the law allows. You may also complain to your local supervisory authority, or in Israel to the Privacy Protection Authority.

13. Marketing communications

Every marketing email carries an unsubscribe link that works. Messaging channels honour the opt-out keyword for that channel. Unsubscribing from marketing does not stop service messages about your account.

13a. Consent for cookies and tags

Non-essential cookies and tags are blocked until you allow them. We use Google Consent Mode, so measurement tags receive a signal reflecting your choice rather than firing regardless. You can change or withdraw that choice at any time through Cookie settings in the footer.

14. Cookies

Cookies and similar technologies are covered in our Cookie policy.

15. Children

Our services are for businesses. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, tell us and we will delete it.

16. Security

We use encryption in transit and at rest, role-based access controls, and permission boundaries between workspaces. No system is perfectly secure. If a breach occurs that meets the legal threshold, we will notify affected parties and the relevant authority as required.

17. Changes

We post updates on this page and change the review date at the top. Where a change materially affects you, we give notice in advance.

18. Contact

[email protected] · [email protected]
FORTVISION Ltd.