Introduction
This Privacy Policy is intended to clearly and transparently explain how we collect, use, share, store, and protect personal information of users on our website and app (hereinafter: "Services"). We take information security and privacy protection very seriously. Since we deal with sensitive financial, insurance, and pension information, information security and privacy protection are core values and management priorities for us. We operate according to Privacy-by-Design and Security-by-Design principles.
Commitment to Information Security and Privacy
Given that our activities include consolidating, processing, and presenting sensitive financial, insurance, and pension information, we view information security and privacy protection as core values. We operate according to Privacy-by-Design and Security-by-Design principles and implement organizational and technological protection measures, as well as a security risk management program, employee training, and incident response procedures. However, as is customary in the industry, there is no absolute security, and we continuously work to reduce risks and improve.
Who We Are
We are R.R.T Technologies Ltd. (Company No. 516588266), operating under the trade name "Shavve".
The Data Protection Officer/Information Security Officer (DPO) is the Data Controller.
Our address: Oppenheimer 2, Floor 4, Science Park, Rehovot.
For inquiries regarding privacy and information security, you can contact us at support@shavve.io. You can also send reports of vulnerabilities and/or security incidents to this address.
Registered database number in the database registry: 700073392, Database name: Shavve Information Database.
Types of Information We Process
To provide the services, improve them, and comply with legal requirements, we process the following categories of information. Examples are provided for illustration only; not every field will be collected in every case.
• Basic Identification and Communication Details
Full name, email, phone number, preferred language, settlement/city, as well as correspondence with us through any communication channel (such as email, chat, phone) and documentation of your requests.
• Account and Registration Details
Username, encrypted password/authentication mechanism, internal user ID, profile preferences (e.g., currency/categories), consent status and consent documentation.
• Usage Data and Online Identifiers
User-Agent address, IP (sometimes also Mac Address), device type/model and operating system, device/advertising identifiers (when enabled), Cookie/SDK identifiers, usage events, viewed pages, response times, crashes and errors, and log files for security purposes and troubleshooting.
• App Permissions and Metadata
Push tokens, camera/files/location permissions (if you choose to grant them and for clear functional purposes), technical information necessary for feature operation (e.g., app version).
• Financial Information Retrieved with Your Consent
Open Banking – Account details, balances, transactions/movements (including currency amount, date, description, provider/terminal, MCC when available), standing orders, cards, credit frameworks, loans/mortgages (amounts, interest rates, indexing, fees), savings/deposits, and more – all according to the data baskets and permissions you chose.
Statutory Bodies – Data from "The Insurance Authority" and "The Pension Clearing House", such as product details, management fees, memberships/deposits, tracks, accumulation and history, relevant documents – according to power of attorney/attachments you signed.
Additional Financial Providers – Insurance/pension/investment/credit card companies and asset managers – including reports, certificates, and product information, as you authorized us to retrieve.
• Financial Documents
Account statements, deposit/charge certificates, tax certificates and annual reports (as you provided or authorized to retrieve).
• Information Relating to Third Parties
For example, spouse in joint account or beneficiaries; information relating to these requires their consent and approval, and you must have the official consents from them.
• Data You Upload on Your Own Initiative
Files/images/certificates (for example receipts, reports, account statements, ID photos), free notes, custom fields, and other information you provide to us directly.
• Derived Data and Analytical Products
Automatic tagging and classification (for example expense/income cataloging), normalization, management fee calculation, usage indicators and statistics, simulations and insights (including forecasts), and aggregate metrics for service improvement. Analytical products are intended for informational accessibility and do not constitute investment advice/marketing investments/portfolio management.
• Billing and Payment Data
Subscription details, billing history, payment methods as transmitted through secure payment processors. We do not store complete credit card details with us; tokenization is performed by the payment processor, subject to its policy.
• Security and Operational Data
Access logs, login attempts, security events, session identifiers, infrastructure monitoring data, and activity documentation required for protection, incident investigation, and compliance.
• Public/Commercial Sources (within legal limits)
Basic information from public or commercial sources for verification or completion purposes (as necessary and permitted).
• Special Categories of Information
We do not knowingly request or process sensitive data as defined in law (such as biometric data, political opinions, religion, medical information) unless required by law or provided by your initiative with explicit consent. Financial information is considered sensitive data and we apply strict protection measures to it.
• Information Disclosure Obligation and Non-Disclosure
Disclosure of certain information is a condition for providing services (for example contact details and retrieval permissions). Without this data, we may not be able to provide parts of the service. Other information is voluntary – you can choose not to disclose, but the user experience may be affected.
• Information About Others You Provide
If you provided us with information about a third party (for example power of attorney/joint account holder), you declare that you have legal authority to share the information with/about them, and that you informed them about data processing according to this policy.
Note: This document contains important legal information. For a complete presentation of all sections, please contact us at support@shavve.io or refer to the full document.
Contact Us
For questions or inquiries regarding the privacy policy, please contact us:
Email: support@shavve.io
Address: Oppenheimer 2, Floor 4, Science Park, Rehovot
