Ranalystix

Privacy Policy

Version US-2026-10-25.6.

1. Who we are and what this covers

This Privacy Policy explains how Orly Roah & Co. Ltd., a company organised in Israel (company no. 514087774) ("we") handles personal information in connection with the Ranalystix service for business customers in the United States, the product site, and our communications. Contact: support@ranalystix.com.

2. Two roles

  • Account information (the people who register and use the service for a business, and the people who write to us): we decide how it is used.
  • Customer content (the documents your business uploads and the figures derived from them, including any personal information about employees or others that they contain): we process it only on your business's behalf and instructions, as its service provider and processor, under the Customer Data Addendum. Requests about customer content go to the business that uploaded it.

3. What we collect

  • Identifiers and contact details — name, business name, business email, role; provided by you.
  • Billing information — billing contact and invoice details; card details, if any, are handled by our payment processor and are not stored by us.
  • Support communications — what you write to us and how to reach you.
  • AI-helper questions — the text you type, the name of the screen and the last message shown.
  • Service and security records — sign-in times, the actions recorded in your account's activity log, error reports, and the IP address and device information sent by your browser, used to run and secure the service.
  • We do not collect Social Security numbers, card numbers or precise location, and ask you not to upload them.

4. What we do NOT do

  • No selling or sharing. We do not sell personal information and do not "share" it for cross-context behavioural advertising, and have not done so in the past 12 months.
  • No tracking technologies. The service and the product site use no advertising cookies, no third-party tracking pixels, no session-replay or keystroke-recording scripts and no third-party analytics. They use only cookies and storage strictly necessary to sign you in, keep your session and remember your settings.
  • No training. Customer content is not used to train any AI model, ours or anyone else's.
  • No profiling or automated decisions about individuals with legal or similarly significant effects.

5. Why we use it

To provide, secure and support the service; to bill; to communicate about your account, renewals and changes; to improve the guides and the reliability of the service using aggregated records that do not include document content; and to comply with law and enforce our agreements.

6. Who receives it

Only service providers bound by contract to use it solely for us: Microsoft Corporation, which hosts the service on Microsoft Azure in the United States (East US region) and stores customer content there, encrypted, in each customer's separate space; signs you in through Microsoft Entra External ID, which receives your email address and sign-in details only; and delivers the service's emails through Azure Communication Services. Paddle.com Market Limited, our online reseller, sells the subscription to you as merchant of record and processes the payment; it receives your billing details and never your documents. Anthropic, PBC, the AI helper's language-model provider, receives the AI-helper question only, never your documents or figures, and does not use it to train its models. We may disclose information when the law requires it, to protect rights and safety, or in a merger or sale of the business subject to this Policy.

7. Where it is processed

The service is operated by a company whose personnel may be located in Israel and is hosted in the United States. Information may be accessed from outside the United States by our personnel and providers under safeguards described in this Policy.

8. Retention

Customer content: for the subscription. At any time, and for 30 days after the subscription ends, you can download all your content as one file from the application (Settings → Subscription) and close the account there. Thirty days after closing, your space is deleted from our systems, and from backups within a further 14 days as the backup rotates; a record that the deletion took place is kept, without the content (Customer Data Addendum). Account information: for the subscription and as long as the law requires afterwards (billing records — seven years). Support messages and AI-helper questions: 24 months. Security records, including the document access log: up to 12 months unless needed to investigate an incident.

9. Security

We use administrative, technical and physical safeguards appropriate to financial documents, including: each customer in a separate space of its own, with a second isolation layer that blocks access from one space to another; encryption in transit and at rest; access restricted to authorised personnel bound by confidentiality; two-step (multi-factor) verification for every sign-in, by customers and by our personnel alike; automatic sign-out after 30 minutes without activity; an access log in which every opening, download and export of a document is recorded and which the account owner can see for its own space; daily backups; and a written incident-response procedure. No method is perfectly secure. If a breach affects your information we will notify you as the law requires.

10. Your privacy rights (US states)

Depending on your state of residence (including California, Colorado, Connecticut, Virginia and other states with comprehensive privacy laws), you may have the right to know and access the personal information we hold about you, to correct it, to delete it, to obtain a copy in a portable format, and to opt out of sale, sharing, targeted advertising and significant profiling (which we do not do). You will not be discriminated against for exercising a right. To make a request, email support@ranalystix.com with the subject "Privacy request"; we will verify your identity with information we already hold and respond within 45 days (extendable as the law permits). An authorised agent may act for you with written permission. If we deny a request, you may appeal by replying to our decision; we answer appeals within the period the law sets. For customer content, we will pass your request to the business that uploaded it.

California notice at collection. The categories in Section 3 are collected for the purposes in Section 5, are not sold or shared, and are kept as Section 8 describes. We do not use or disclose sensitive personal information for any purpose that would require a right to limit.

11. Children

The service is for businesses and is not directed to anyone under 18. We do not knowingly collect children's information.

12. Where the service is offered

The US product is offered to businesses in the United States. It is not offered in the European Union, the European Economic Area or the United Kingdom.

13. Changes

We will notify you of a material change at least 30 days in advance and ask for renewed acceptance where required. The version you accepted is recorded.