Privacy Policy

1.Snapshot

A plain-language summary of the full policy below. The full sections control if there is any conflict.

What we collect. Account details, financial and entity data you authorize us to access (for example, from QuickBooks Online, Xero, banking, payroll, and cap-table platforms), documents you upload, communications with Naveh and your assigned team, and standard usage and device information.

Why we collect it. To deliver US entity formation, bookkeeping, monthly close, US tax and cross-border compliance, payroll and People Ops coordination, reporting, and CFO-led finance services, to operate and secure the Services, and to improve our platform.

AI processing. We use AI to categorize transactions, prepare reconciliations, track filing deadlines, and produce drafts that a member of the Naveh finance team reviews before delivery. We do not use your identifiable financial data to train third-party foundation models.

Sharing. We share data with your assigned Naveh team, with vetted subprocessors (cloud hosting, AI providers, accounting, banking and payroll integrations), with partner-delivered service providers you engage through us, and where required by law. We do not sell personal information.

Your rights. Depending on where you live, you may have rights to access, correct, delete, port, or limit how we use your data. See Section 10.

Contact. Questions go to hello@naveh.ai.

2.Who we are

[Naveh International, Inc.] is a [Delaware] corporation with its principal place of business at [address]. Naveh runs the US finance function for companies that operate across borders with a US entity: formation, cross-border compliance, bookkeeping and monthly close, payroll and People Ops coordination, reporting, and CFO-led finance judgment, delivered by one team.

For the Services, Naveh generally acts as a service provider and data processor on behalf of the client company whose financial and entity records are being managed. The client company is the controller of its own records. Where Naveh operates the website itself (for example, marketing, enquiry forms, security logs), Naveh acts as a controller of that information.

3.Who this policy covers

This policy applies to four groups:

• Founders, finance leads, and other employees of client companies that engage Naveh for finance operations and compliance services (“Clients”).
• Members of the Naveh finance team, including CFOs and finance professionals who deliver services through Naveh (“Naveh Team”).
• Visitors to naveh.ai and prospective customers who book a US Finance Review, request information, or are introduced to us by a partner.
• Job applicants, referral partners, and other professional contacts who interact with Naveh.
• Where a section applies only to certain groups, we say so.

4.Information we collect

4.1 Information you provide directly

Identity and contact data. Name, email, phone, role, company, home country, and similar profile fields, including what you provide when you book a US Finance Review.

Entity and setup data. Information about your US entity and its ownership structure, where you are incorporated, any foreign parent or subsidiary, and beneficial ownership details needed for formation and compliance filings such as BOI and Form 5472.

Account and billing data. Billing address, payment method (processed by our payment processor; Naveh does not store full card numbers), and invoice history.

Naveh Team credentials. For members of the Naveh Team: professional history, credentials (CPA, EA, etc.), references, and other materials submitted during onboarding and ongoing engagement.

Communications. Messages, support requests, feedback, recorded calls (where lawful and disclosed at the time), and content you upload.

4.2 Financial and operational data (for Clients)

When you engage Naveh, you authorize us to access and process the financial, entity, and operational data needed to deliver the Services. This typically includes:

• General ledger data from QuickBooks Online, Xero, or similar accounting platforms.
• Bank, credit card, and payment processor transaction data (for example, via direct connections to Mercury, Brex, Ramp, Stripe, and similar).
• Payroll, benefits, contractor, and HRIS data (for example, from Gusto, Rippling, Deel, and similar), including data on employees and contractors in the US and in your home country.
• Cap-table and equity data (for example, from Carta), and formation and corporate records (for example, from Stripe Atlas or Firstbase).
• Intercompany, transfer-pricing, and consolidation data across your US entity and any related foreign entities.
• Vendor invoices, receipts, contracts, tax filings, and supporting documentation that you upload or that we ingest from your tools.
• Revenue, headcount, state-by-state activity, and operating metrics needed for compliance tracking, nexus monitoring, and management reporting.

Some of this information may include personal information about your employees, contractors, customers, vendors, shareholders, or investors, in the US and abroad. You are responsible for having a lawful basis to share that information with Naveh.

4.3 Information collected automatically

When you use the Services, we and our service providers automatically collect:

• Device and connection data: IP address, browser type, operating system, device identifiers, and language settings.
• Usage data: Pages visited, features used, clicks, session duration, referring URLs, and timestamps.
• Cookies and similar technologies: See Section 11.

4.4 Information from third parties

Integrations. When you connect a third-party tool, we receive data from that tool based on the permissions you grant.

Public sources. For business development and team sourcing, we may collect information from LinkedIn, company websites, public registries (including state corporate registries), and similar sources.

Referral and introduction partners. Most Clients reach Naveh through an introduction: an investor, a lawyer, an accelerator, or a partner in their home market. If you reach us that way, we may receive your contact details and basic engagement context from the introducing party.

5.How we use information

We use information to:

Provide, operate, and improve the Services, including US entity formation, bookkeeping, monthly close, US federal and state tax compliance, cross-border compliance (including Form 5472 and 5471, BOI, transfer pricing, and consolidation), payroll and People Ops coordination, reporting, and CFO-led finance services.

Map your US setup and prepare a written US Finance Review, whether or not you become a Client.

Assign and route work between AI systems, the Naveh finance team, and the CFO on your engagement.

Run AI workflows that categorize transactions, draft reconciliations, track filing deadlines, generate reporting, and surface anomalies for human review.

Communicate with you about your engagement, filing deadlines, security alerts, and service updates.

Respond to enquiries, deliver the US Finance Review, process applications from prospective Clients and team members, and provide support.

Bill you, collect payments, pass through government filing fees and registered-agent costs at cost, and manage team payouts.

Prevent fraud, abuse, and unauthorized access; enforce our terms; and comply with legal obligations, including US tax, corporate, and anti-money-laundering requirements.

Conduct analytics, measure performance, and develop new features.

Where you have explicitly opted in, produce aggregated, de-identified benchmarking insights. Individual Clients are never identifiable in benchmark outputs, and opting out has no effect on service quality.

We rely on the following legal bases (where applicable under your local law): performing a contract with you; legitimate interests in operating, securing, and improving the Services; legal obligations; and consent (for marketing emails, certain cookies, and benchmarking).

6.How AI is used in the Services

Naveh uses an automated delivery layer to make finance operations faster and more accurate. A finance team reviews the output, and a CFO reviews the engagement. Some specifics:

Where AI is applied. Transaction categorization, reconciliation drafting, filing-calendar and deadline tracking, anomaly detection, document parsing, and narrative drafting for reporting, and similar operational tasks.

Human in the loop. AI-generated work is reviewed by the Naveh finance team before it is delivered to you. Nothing reaches you that a person hasn’t checked.

No training on your data. We do not use your identifiable financial data to train foundation models operated by third parties. Where we work with AI subprocessors, we contractually require that customer content not be used to train their models.

Aggregated learning. We may use de-identified, aggregated patterns (for example, common merchant categorization rules) to improve our internal models. This data cannot reasonably be used to identify a Client.

Limitations. AI outputs can be wrong. Final accountability for delivered work sits with the Naveh finance team and the CFO who review it, not the model.

7.How we share information

We share information only as described below.

7.1 With your Naveh team

To deliver the Services, your financial and entity data is accessible to the Naveh finance team and the CFO assigned to your engagement, and their team members supporting your engagement, under written confidentiality obligations. Naveh delivers the Services as one team; we do not present our internal delivery entities or partner-delivered add-ons to you as separate vendors.

7.2 With subprocessors

We use vetted third-party providers to operate the Services, including:

• Cloud hosting and infrastructure providers.
• AI model providers, under contracts that prohibit training on customer content.
• Accounting, banking, payroll, cap-table, and formation platform integrations that you authorize (for example, QuickBooks Online, Mercury, Brex, Ramp, Gusto, Rippling, Deel, Carta, Stripe Atlas, Firstbase).
• Registered-agent and state filing services used to form and maintain your entity.
• Communications, scheduling, and analytics tools.
• Payment processors and billing providers.
• Identity, fraud prevention, and security services.
• A current list of subprocessors is available on request at hello@naveh.ai.

7.3 With partner-delivered services

Some services available at any tier are delivered by partners rather than by Naveh directly, such as immigration and relocation, R&D tax credits, and recruiting. If you engage a partner-delivered service through us, we share the information needed to deliver it, and that partner’s own privacy practices also apply.

7.4 With other parties

Government and tax authorities: To make the filings you engage us to make, including with the IRS, FinCEN, the Delaware Division of Corporations, and state tax and employment authorities.

Professional advisors: Lawyers, auditors, insurers, and accountants under confidentiality.

Legal and safety: When required by law, legal process, or to protect rights, safety, or property of Naveh, our users, or others.

Business transfers: In connection with a merger, acquisition, financing, or sale of assets, subject to confidentiality and continuation of this policy’s protections.

With your direction: Anywhere else you ask us to share, including with your investors, board, auditors, home-country accountant, or a data room during diligence.

7.5 We do not sell personal information

Naveh does not sell personal information and does not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA) or other US state privacy laws.

8.Data retention

We retain information only as long as needed for the purposes described in this policy, including to provide the Services, comply with legal, tax, corporate, and accounting obligations, resolve disputes, and enforce agreements.

Active engagement data: Retained for the duration of your engagement with Naveh.

Post-termination retention: After your engagement ends, we may retain copies of financial, tax, and corporate records for up to seven (7) years to meet US tax, audit, and record-keeping obligations, after which records are securely deleted or de-identified. Your files are released to you on request, at any time, in a usable form.

Account and contact data: Retained while your account is active and for a reasonable period afterward.

US Finance Review data: If you book a Review and do not become a Client, we retain the information you provided for a reasonable period so we can follow up, then delete it.

Marketing data: Retained until you opt out or after a period of inactivity.

Aggregated, de-identified data: May be retained indefinitely.

Specific retention schedules can be provided on request.

9.Security

Naveh takes security seriously. We maintain administrative, technical, and physical safeguards designed to protect information, including:

• Encryption of data in transit and at rest.
• Role-based access controls, least-privilege provisioning, and audit logging.
• Multi-factor authentication for internal systems.
• Regular vulnerability scanning and security reviews of subprocessors.
• Background checks for personnel with access to client data.

No security program is perfect. If we become aware of a security incident affecting your information, we will notify you in line with applicable law.

10.Your rights and choices

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion (subject to our legitimate retention obligations).
• Port your information to another provider.
• Opt out of certain processing, including marketing emails.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.
• To exercise rights, email hello@naveh.ai. We will verify your identity before responding. We will not discriminate against you for exercising your rights.
• If Naveh processes your data on behalf of a Client (for example, payroll, contractor, or shareholder records), please contact the Client directly. We will support the Client in responding.

10.1 California residents

You have specific rights under the CCPA/CPRA, including the right to know what categories of personal information we collect, the right to delete, the right to correct, and the right to limit use of sensitive personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise rights, email hello@naveh.ai. You may also designate an authorized agent.

10.2 EU/UK/Swiss residents

If you are in the EU, UK, or Switzerland, our processing is governed by GDPR or equivalent law. The legal bases for processing are described in Section 5. We may transfer information to the United States and other countries that may not provide the same level of legal protection. Where we do, we rely on appropriate safeguards such as Standard Contractual Clauses.

10.3 Residents of other countries

Naveh serves companies that operate across borders, and Clients and their personnel may be located in Israel, India, the United Kingdom, or elsewhere. Where the privacy law of your country grants you rights in relation to information we process, you may exercise them by contacting hello@naveh.ai, and we will respond in line with that law.

11.Cookies and analytics

We use cookies, pixels, and similar technologies on naveh.ai to keep you signed in, remember preferences, secure the Services, measure performance, and (with your consent where required) deliver marketing.

You can manage cookies through your browser. Some features may not work without certain cookies. Where required by law, we display a consent banner and honor your choices.

12.Children’s privacy

The Services are not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact hello@naveh.ai.

13.Third-party links and services

The Services may contain links to third-party sites and tools, including the formation, banking, payroll, and cap-table platforms we work alongside. Their privacy practices are governed by their own policies. We are not responsible for the practices of third parties.

14.Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent change. For material changes, we will provide additional notice (for example, by email) before the changes take effect.

15.Contact us

Questions, requests, or complaints about this Privacy Policy:

• [Naveh International, Inc.]
• Attn: Privacy
• [address]
• Email: hello@naveh.ai