1. Who we are
Gravion Group LTD (קבוצת גראביון בע״מ), a private company registered in Israel under company number 517340758, with its registered office at 18 Shai Agnon St., Ra’anana 4338018, Israel, is responsible for the personal information described in this policy (the controller). You can reach us about privacy at privacy@gravion-group.com.
2. Information we collect
Contact form: your name, email address, phone number (optional) and your message.
Marketing consent: whether you agreed, in the contact form or the AI assistant, to receive news and offers from us, and when.
AI assistant: the messages you write in the chat. If you ask us to contact you, the assistant also passes on your name, phone number or email, and the business details you share, such as company, industry, company size, role, the tools you use, what you need, timeline and budget.
Gravion products that link to this policy: account identifiers and sign-in information, the data you enter (for example portfolio holdings, transactions and watchlists), preferences and messages you send to an AI assistant in the product.
Technical information: IP address, device and browser type, access times and service logs that our hosting providers record to run and protect the service.
Website usage, only if you accepted analytics cookies: the pages and sections you view and for how long, how far you scroll, the links and buttons you click and where on the page you click, your device and browser type, your approximate location determined from your IP address, and AI assistant events such as opening the chat or sending a message, without the message text, and a recording of your visit; form fields and the AI assistant conversation are hidden from it.
Source of your visit: campaign tags in the link you followed (UTM), the referring website and the first page you opened. They are passed on with your request so we know which campaigns bring enquiries. If you accepted analytics cookies, your request also includes a link to the recording of your visit.
3. Cookies and browser storage
The website does not use advertising cookies. Website usage statistics are collected only if you choose "Accept" in the cookie notice. Until you choose, or if you choose "Necessary only", the website loads no analytics and sends nothing to our analytics provider.
If you choose "Accept", our analytics provider PostHog keeps an identifier in a cookie and in your browser storage, so it can link your visits and record them. You can change your choice at any time with "Cookie settings" at the bottom of every page; when you withdraw consent, the recording stops and PostHog's cookies and identifiers are removed; only a note of your refusal stays in your browser.
The website also keeps your language preference in a cookie for up to a year and your cookie choice in your browser, and, for the current session, the source of your visit, your place on the page and the AI assistant conversation, so they survive a page reload. This copy in your browser is removed when you end the conversation in the chat or close the browser tab; that does not delete copies that have already left your browser, which are described under "The AI assistant" and "How long we keep information".
To choose the language a page opens in and the languages the switcher offers, the website determines your country from your IP address each time a page opens (our hosting provider Vercel does this) and keeps only the list of those languages in a cookie until you close the browser; the website does not store the country itself.
4. How we use information and whether you must provide it
We use information to answer your enquiry and prepare for a conversation with you, to provide and secure the website and products, to improve them, to understand how visitors use the website and which campaigns bring enquiries, to prevent misuse and to meet legal obligations.
Providing information is voluntary and there is no legal obligation to do so. Without contact details we cannot reply to you, and product features cannot work without the information they require.
5. Legal bases for visitors in the European Union
Where the EU General Data Protection Regulation (GDPR) applies, we rely on these legal bases: steps you ask us to take before a possible contract, to answer your enquiry and prepare an offer; performance of a contract, for product accounts and the services we provide; your consent, for analytics cookies, website statistics, visit recordings and news and offers; our legitimate interest in running, protecting and improving the website and in knowing which campaigns bring enquiries, for the source of your visit and service logs; and legal obligations, where the law requires us to keep or disclose information.
6. News and offers
We send news and offers about Gravion services by email, phone or messenger only if you ticked the consent box in the contact form or the AI assistant. The box is never ticked in advance, and declining does not affect how we handle your request. If you give an email address, we first send it a one-time email with a confirmation link, and we add the address to our mailing list only after you confirm.
You can withdraw your consent at any time: reply "stop" to any of our messages, use the unsubscribe link in an email, or write to privacy@gravion-group.com. We keep a record of your choice and when you made it.
7. The AI assistant
The assistant is an automated system. Your chat messages are sent to Google (Gemini API) to generate replies. We use Google’s paid service, whose terms do not allow Google to use these messages to improve its products. Google does keep the messages and replies for a limited period, currently 55 days, solely to detect abuse and to meet legal disclosure requirements. When you agree to be contacted, a summary of the conversation, your contact details and the conversation transcript are sent to the Gravion team and kept as described under "How long we keep information". Ending the chat or closing the tab does not delete these copies.
Please do not enter sensitive information, confidential passwords or information about other people into the chat. The assistant does not make decisions about you; our team reviews every request.
8. Who receives information
Authorised Gravion staff, and service providers that process information on our behalf and only for the purposes above: Vercel (website hosting and checking that requests to the chat and forms come from a browser, not an automated script), PostHog (website usage statistics and visit recordings, stored in the European Union), Google (the AI assistant), Resend (email delivery and our mailing list), Slack and ClickUp (handling requests within our team), Amazon Web Services (hosting and storage for Gravion products) and market data providers where a product feature needs them.
We may also disclose information where the law requires it, or to protect our rights, our users or the service. We do not sell personal information.
9. International transfers and security
Some of our providers store or process information outside Israel, including in the United States and the European Union. Where information is transferred abroad, we rely on the safeguards required by Israeli law. For information from the European Union: the European Commission recognises Israel as providing an adequate level of protection, and transfers to providers in other countries, such as the United States, rely, depending on the provider, on the European Commission’s standard contractual clauses or on the provider’s certification under the EU–US Data Privacy Framework. On request we will tell you which safeguard applies to a given provider. We use access controls and other reasonable technical and organisational measures to protect information, but no system can be completely secure.
10. How long we keep information
Enquiries, chat transcripts and related correspondence: up to 24 months after our last contact if no cooperation follows; if we work together, for the term of the cooperation and then for as long as the law requires us to keep business records.
A chat that does not end in a request for us to contact you: we do not store it; Google keeps the messages for the period described under "The AI assistant".
Product data: while your account is active; after it is closed, or earlier on your request, we delete it within 30 days, unless the law requires us to keep it. Backup copies are overwritten in the normal backup cycle and are not used to restore data you asked us to delete.
Website usage statistics: up to one year; visit recordings: up to 30 days; service logs: a short period, as a rule no longer than 30 days.
A record of your marketing consent or its withdrawal: while you are subscribed and, after you withdraw, for as long as we need it to honour your choice and to show when you gave and withdrew consent, but no longer than seven years.
After that we delete or anonymise the information. You can ask us to delete it earlier by writing to privacy@gravion-group.com.
11. Your rights
Under applicable data protection laws, including the Israeli Protection of Privacy Law, you may ask to see the personal information we hold about you and ask us to correct or delete information that is inaccurate, incomplete, unclear or out of date. You can also ask us to stop contacting you at any time.
If the GDPR applies to you, you may also ask us to erase your information where the GDPR gives you that right (for example, when we no longer need it, when you withdraw your consent, or when you successfully object to the processing), object to processing based on our legitimate interests, ask us to restrict processing, receive the information you gave us in a portable format, and withdraw your consent at any time without affecting processing before the withdrawal. If we cannot erase something because the law requires or allows us to keep it, we will tell you why.
Send requests to privacy@gravion-group.com. We may ask for information to confirm your identity. If you are not satisfied with our response, you may contact the Israeli Privacy Protection Authority or the data protection authority in your country (in Romania, ANSPDCP; in the Republic of Moldova, CNPDCP).
12. Changes to this policy
We may update this policy when our services or the law change. If a change significantly affects how we use your information, we will make it clear on the website.
13. Contact
Gravion Group LTD (company number 517340758), 18 Shai Agnon St., Ra’anana 4338018, Israel. Privacy questions and requests: privacy@gravion-group.com.