Legal

Vinesight Privacy Policy

Effective date: 9 September 2026
Last updated: 9 September 2026

This Privacy Policy explains what personal data we collect through www.vinesight.com (the “Site”) and in the course of marketing and selling our services, how we use it, who we share it with, and the rights you have.

This Policy covers the Site and our marketing communications only. It does not cover the Vinesight narrative intelligence platform (the “Platform”), which is governed by our agreements with customers, except for the notice in Section 2.4.

1. Who we are

The controller of your personal data is:

Vinesight Technology Ltd.
2 Hashlosha Street, Tel Aviv, Israel
Israeli company no. 515909141

Our US affiliate, Vinesight Technologies Inc. (a Delaware corporation, 2093 Philadelphia Pike, #1250, Claymont, DE 19703, United States), acts on behalf of Vinesight Technology Ltd. for sales, marketing, and support in the United States and may process your data as described in this Policy.

General contact: info@vinesight.com
Privacy contact: privacy@vinesight.com

2. Personal data we collect

2.1 Data you give us

Context Data collected
Demo or pricing request form First name, last name, work email address, and anything you add in free-text fields
Emailing us or contacting us by other means Your contact details and the content of your message

You are not required to give us any of this data, but if you do not, we may be unable to respond to your request.

2.2 Data we collect automatically

We do not store server logs. Our content delivery provider (Amazon Web Services) processes technical data such as your IP address and browser and device details transiently in order to deliver the Site, and produces aggregate statistics (device type, operating system, country) that we can view. We do not receive individual-level data from this. The Site does not use cookies, tracking scripts, or similar tracking technologies.

2.3 Data we receive from third parties

  • Business contact data from professional networking sites (for example LinkedIn), data enrichment vendors, and industry directories, used to identify and reach people at organizations that may benefit from our services

  • Referral and partner data where a partner introduces you to us

2.4 Publicly available information processed through the Platform

Separately from the Site, the Platform analyzes publicly available content from social media, news, forums, and other open online sources. This content may include personal data of people who post, share, or are discussed in it, such as usernames, display names, profile information, and the public content of posts.

We process this data as a controller, not as a processor for our customers. Where the GDPR or UK GDPR applies, our legal basis is our legitimate interests in providing narrative intelligence services to our customers, in identifying coordinated inauthentic behavior and information manipulation, and in protecting our customers and the public from harm arising from it. We have assessed those interests against the rights and freedoms of the individuals concerned.

Publicly available content sometimes reveals information falling within the special categories described in Article 9(1) of the GDPR, such as political opinions, religious or philosophical beliefs, trade union membership, health, or sexual orientation. Where we process such information, we do so only where the individual concerned has manifestly made it public, within the meaning of Article 9(2)(e), or where processing is necessary for the establishment, exercise or defense of legal claims, within the meaning of Article 9(2)(f). We do not seek out special category data, and we do not use it to make decisions about individuals.

We do not use the Platform to build profiles of private individuals, and our customer agreements prohibit customers from doing so.

We retain content processed through the Platform for no longer than is necessary to provide the services to our customers, after which it is deleted or aggregated so that individuals are no longer identifiable, unless a longer period is required for the establishment, exercise or defense of legal claims.

If you are a person whose publicly available content has been processed by the Platform, you have the rights described in Section 9, including the right to object under Article 21 of the GDPR. If you object, we will stop processing your content unless we can demonstrate compelling legitimate grounds that override your rights, and we will record the relevant identifiers so that the content is not collected again. Section 9.6 explains how to make a request.

Where the GDPR, UK GDPR, or similar law applies, we rely on the legal bases below.

Purpose Legal basis
Respond to your demo, pricing, or contact requests Performance of a contract or steps at your request before entering into one; legitimate interests (running our business)
Send you marketing communications about Vinesight Consent where required by law; otherwise legitimate interests (promoting our services to relevant professionals)
Secure and maintain the Site and understand aggregate traffic Legitimate interests (keeping the Site secure and performant, and understanding how it is used in aggregate)
Comply with legal obligations, respond to lawful requests, and establish or defend legal claims Legal obligation; legitimate interests
Corporate transactions such as financing, merger, or acquisition Legitimate interests

4. Who we share personal data with

We share personal data only as follows:

  • Our affiliates. Vinesight Technology Ltd. and Vinesight Technologies Inc. share data with each other for the purposes described in this Policy.

  • Service providers who process data on our behalf under contract, including providers of: website hosting and content delivery (Amazon Web Services); cloud infrastructure; customer relationship management and sales tooling; email delivery and marketing automation; and IT, security, and compliance tooling.

  • Professional advisors such as lawyers, accountants, auditors, and insurers.

  • Authorities and other parties where required by law, court order, or a lawful request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

  • Corporate transaction counterparties in connection with any financing, merger, acquisition, reorganization, or sale of assets, subject to confidentiality obligations.

5. International transfers

Vinesight is headquartered in Israel and has operations in the United States. Your data may be transferred to and processed in Israel, the United States, and other countries where we or our service providers operate.

  • From the EEA and UK to Israel: Israel benefits from an adequacy decision of the European Commission and adequacy regulations of the UK, so transfers may proceed without additional safeguards.

  • From the EEA, UK, or Switzerland to the United States or other countries without adequacy: we rely on the European Commission’s Standard Contractual Clauses (with the UK Addendum and Swiss amendments where applicable).

  • From Israel to other countries: we transfer data in accordance with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001.

You can request a copy of the relevant transfer mechanism using the contact details in Section 1.

6. How long we keep personal data

We keep personal data only as long as needed for the purposes described in this Policy. Our general retention periods are:

Data Retention
Demo, pricing, and contact inquiries 24 months from last interaction, unless a commercial relationship follows
Marketing contacts Until you unsubscribe or object, then suppressed on a do-not-contact list
Server logs and site statistics Not retained by Vinesight. Aggregate statistics are available from our content delivery provider for up to 60 days.
Publicly available content processed through the Platform (Section 2.4) No longer than is necessary to provide the services to our customers, then deleted or aggregated so that individuals are no longer identifiable, unless a longer period is required for the establishment, exercise or defense of legal claims
Records needed for legal, tax, or audit purposes As required by applicable law, typically 7 years

7. How we protect personal data

We maintain appropriate technical and organizational measures to protect personal data against unauthorized access, loss, alteration, and disclosure, having regard to the nature of the data and the risks involved. These include encryption in transit and at rest, role-based access controls, logging and monitoring, vendor due diligence, and periodic review of our security program. Vinesight Technology Ltd. maintains the database security measures required under the Israeli Protection of Privacy Law, 5741-1981 (as amended, including by Amendment 13) and the Protection of Privacy (Data Security) Regulations, 5777-2017.

If a security incident affects personal data, we will assess it promptly and, where required by applicable law, notify the competent authority and the affected individuals without undue delay. Where the GDPR or UK GDPR applies, we will notify the competent supervisory authority within 72 hours of becoming aware of a notifiable breach, and will notify affected individuals where the breach is likely to result in a high risk to their rights and freedoms. Where Israeli law applies, we will report severe security incidents to the Privacy Protection Authority and notify affected individuals where the Authority so directs or where otherwise required. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Cookies and similar technologies

The Site does not use cookies or similar tracking technologies.

The Site does not respond to “Do Not Track” signals because it does not track visitors.

9. Your rights

9.1 Everyone

You can unsubscribe from marketing emails at any time using the link in the email or by contacting us. You can also contact us to ask what data we hold about you, to correct it, or to ask us to delete it.

9.2 European Economic Area, United Kingdom, and Switzerland

You have the right to:

  • access your personal data and receive a copy

  • rectify inaccurate or incomplete data

  • erase your data in certain circumstances

  • restrict processing in certain circumstances

  • receive your data in a portable format

  • object to processing based on legitimate interests, including profiling, and to direct marketing at any time

  • withdraw consent at any time, without affecting processing that took place before withdrawal

  • lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). A list of EU authorities is at edpb.europa.eu. In Switzerland this is the Federal Data Protection and Information Commissioner (edoeb.admin.ch).

9.3 Israel

Under the Protection of Privacy Law, 5741-1981, as amended (including by Amendment 13, in force from August 2025), you have the right to access data held about you in our databases, to request correction or deletion of data that is inaccurate, incomplete, unclear, or out of date, and to opt out of direct marketing. If your publicly available content has been processed through the Platform, you may also object to that processing as described in Section 2.4, and we will handle your objection in the manner set out there. You may lodge a complaint with the Privacy Protection Authority (gov.il/en/departments/the_privacy_protection_authority).

9.4 California and other US states

Depending on where you live, you may have the right to know what personal information we collect, use, and disclose; to access it; to correct it; to delete it; to opt out of the sale or sharing of personal information and of targeted advertising; and not to be discriminated against for exercising these rights.

We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under California law. You may designate an authorized agent to make requests on your behalf. We will verify requests by matching the information you provide with data we already hold.

In the preceding 12 months we collected the categories of personal information described in Section 2 for the purposes described in Section 3 and disclosed them to the categories of recipients described in Section 4.

9.5 Other jurisdictions

If you are located elsewhere, you may have similar rights under local law. Contact us and we will respond in accordance with the law that applies to you.

9.6 How to exercise your rights

Email privacy@vinesight.com with the subject line “Privacy request”. Tell us which right you are exercising. If your request relates to content processed through the Platform, please provide the account name, handle or URL concerned so that we can locate it. We may need to verify your identity before acting. We will respond within the time required by applicable law, and in any event within one month where the GDPR or UK GDPR applies. We may extend that period by up to two further months for complex or numerous requests, and will tell you if we do.

10. Children

The Site and our services are directed at professionals and organizations. We do not knowingly collect personal data from anyone under 18 through the Site.

The Site may link to third-party websites. Those third parties have their own privacy practices, which we do not control.

12. Changes to this Policy

We may update this Policy from time to time. We will post the revised version on the Site with an updated “Last updated” date.

13. Contact us

Vinesight Technology Ltd.
2 Hashlosha Street, Tel Aviv, Israel
info@vinesight.com
privacy@vinesight.com