RightFlow Privacy Policy
RightFlow is built for sensitive employment and payroll workflows. This page explains what we collect, why we collect it, how we protect it, and how we handle privacy obligations under applicable Israeli privacy law.
Privacy approach
This policy is designed to stay legible: what enters the workflow, why it is processed, who helps deliver the service, how long information is retained, and what rights you can exercise in relation to your personal data.
Data sales
Never sold
Processing
Only for requested workflows
Deletion
Support-assisted requests
What we collect
We process documents and information you upload or provide through the service, such as employment contracts, payslips, pension statements, Keren Hishtalmut statements, account details, contact details, and workspace activity needed to operate the service securely and reliably.
Why we process it
We use your data only to extract contract terms, compare payroll obligations against actual contributions, generate discrepancy reports, support the workflows you explicitly request, secure the platform, troubleshoot issues, and maintain service quality.
Data sharing
We do not sell your data. We share it only with infrastructure, hosting, storage, security, analytics, and processing providers needed to deliver the service securely and reliably, and only under contractual, technical, and organizational safeguards appropriate to the sensitivity of the data.
Retention and deletion
Documents and extracted data are retained while your workspace is active and for a limited period afterward where needed for backup recovery, security monitoring, legal compliance, fraud prevention, or dispute handling. You can request deletion through support, subject to legal, security, and operational retention requirements.
Controller identity and Israeli privacy law
RightFlow is the controller of the personal data processed through this service for the purposes described in this policy. We handle personal data in accordance with applicable Israeli privacy and data protection requirements, including the Protection of Privacy Law, 1981, related regulations, and guidance issued by the Israeli Privacy Protection Authority (הרשות להגנת הפרטיות), as well as other applicable legal obligations relevant to employment and payroll workflows.
Your rights
You may request access to personal data about you, ask us to correct inaccurate or incomplete information, and request deletion where legally and operationally possible. We may retain information where required to comply with law, protect legitimate interests, maintain security, or resolve disputes. Requests can be submitted through support.
International processing and cross-border transfers
Some service providers that help us host, secure, or process data may store or process information outside Israel. Where cross-border transfers occur, we use them only as needed to provide the service and subject them to contractual, technical, and security safeguards appropriate to the nature of the information and the services involved.
Data controller details and contact
If you have questions about this policy, want to exercise a privacy right, or need help with a deletion or correction request, you can contact us using the support and security channels listed below. If RightFlow operates through a specific legal entity for your workspace or contract, that entity will be the relevant contracting party and controller for the applicable processing relationship.