Effective August 14, 2026 · Version 1.0

Privacy Policy

Digitise LLC and Digitise LTD (“Digitise”, “we”, “us”) operate DigitiseOS, an internal business operating system and limited customer portal. This policy explains how we handle personal information and financial-account data.

Information we collect

We collect account identity and contact information, employment and business records, application activity and security logs, customer and supplier records, and information submitted through our services. When an authorized administrator connects a financial institution through Plaid, we receive account identifiers, balances and transaction data needed for bookkeeping and reconciliation. We do not receive or store online-banking credentials.

How we use information

We use information to authenticate users, operate and secure DigitiseOS, deliver contracted services, perform accounting and reconciliation, maintain audit trails, prevent fraud, support users, comply with law and improve reliability. We do not sell personal information or financial-account data.

Sharing and service providers

Access is limited by role, legal entity and business need. We share information only with authorized personnel, professional advisers, authorities where legally required, and vetted processors that support hosting, authentication, communications, monitoring and financial connectivity. Plaid’s handling of data is also governed by the applicable Plaid privacy notices and the user’s financial institution.

Security

We use mandatory multi-factor authentication, least-privilege access, encryption in transit and at rest, centralized secrets management, logging, vulnerability scanning, patch management, session revocation and documented incident response. No security measure eliminates all risk.

Retention and deletion

We retain data only for the documented business, contractual and legal period. Plaid access tokens are deleted when a connection is removed; synchronized financial records are retained for the applicable accounting period unless deletion is legally permitted. Security logs, support records and backups follow defined schedules. At the end of a retention period, data is securely deleted or irreversibly anonymized.

Your choices and rights

Subject to applicable law, individuals may request access, correction, deletion, restriction or a copy of their personal information, and may object to certain processing. Authorized administrators can disconnect financial accounts at any time. Some records may be retained where accounting, tax, fraud-prevention or legal obligations require it.

International processing and children

Our providers may process information in the United States, Israel and other locations subject to contractual and legal safeguards. DigitiseOS is a business service and is not directed to children.

Changes and contact

We will publish material changes on this page and update the effective date. Privacy and security requests may be sent to privacy@digitise.co.il. Business correspondence may also be sent through the contact form on our website.