Skip to main content
Back to Home

Privacy Policy

Last updated: June 17, 2026

1. Introduction

Meged Solutions ("the Platform," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Tivoo, our real-estate deal management platform for consultants and agencies (the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. This Policy provides general information and is not legal advice; an agency using the Service should consult its own counsel about its obligations.

The data covered by this Policy falls into two roles. Meged Solutions is the data controller for the data we determine the use of, such as consultant account and registration details, usage and log data, and marketing data on our public pages. For the personal data that a consultant or agency enters about its own customers (buyers and sellers), their contact details, and lead-funnel notes, that agency is the controller and Meged Solutions acts only as a holder and processor on its behalf, processing that data solely to provide the Service and retaining it as the agency directs. If an agency holds data about you, that agency, and not Meged Solutions, is the controller of that data. See Section 9 for how to exercise your rights regarding it.

2. Information We Collect

2.1 Personal Information

We collect personal information that you or your agency provide, including:

  • Consultant Account Information: Name, email address, and agency or organization details, processed through our authentication provider when you register
  • Customer Data: Personal and contact details of the buyers and sellers a consultant enters, together with lead-funnel notes and deal-related information
  • Property Data: Details of assets and properties, including address, price, photos, and sketches that consultants upload
  • Communications: Messages, notes, and support requests you send through the Service

2.2 Automatically Collected Information

When you access the Service, we automatically collect certain information, including:

  • Device Information: Browser type, operating system, and device identifiers
  • Usage Data: Pages visited, features used, and actions taken
  • Log Data: IP address, access times, and referring URLs

3. Subprocessors and Third-Party Services

We use trusted subprocessors and third-party services to operate the Service. Each service has its own privacy practices and policies:

3.1 Clerk (Authentication and Organizations)

We use Clerk for consultant authentication and organization management. Clerk processes your email address, name, and authentication credentials. For more information, see Clerk's Privacy Policy.

3.2 Vercel (Hosting and Storage)

Our Service is hosted on Vercel, and we use Vercel Blob to store property photos, sketches, and documents. Vercel is a US-based provider and may process data under appropriate safeguards. For more information, see Vercel's Privacy Policy.

3.3 Neon (Database)

We use Neon (PostgreSQL) to host the database that stores customer, property, deal, and partner records. Your data is stored securely in Neon's infrastructure. For more information, see Neon's Privacy Policy.

3.4 Meta (Advertising and Measurement)

On our public marketing pages, and solely after you accept marketing cookies, we may use the Meta Pixel and the Meta Conversions API to measure advertising performance and build remarketing audiences. This functionality is currently disabled. When enabled, we would share hashed identifiers (such as your email address and phone number), your IP address, browser user agent, and the Meta cookies _fbp and _fbc. The identifiers are hashed before the data leaves our servers. The Meta Pixel runs only on our public marketing pages and never inside the authenticated app or on public property pages. For more information, see Meta's Privacy Policy.

3.5 Resend (Email)

We use Resend to send transactional emails, such as account notifications, invitations, and property-page links. Resend processes recipient names, email addresses, and the content of those messages to deliver them. Resend is a US-based provider and may process this data under appropriate safeguards. For more information, see Resend's Privacy Policy.

3.6 Freemius (Billing and Subscriptions)

We use Freemius to manage subscriptions, trials, and payments. Freemius processes billing contact details and payment information as our payment processor; we do not store full card details on our own systems. For more information, see Freemius's Privacy Policy.

3.7 Anthropic (AI Assistant)

The in-app AI assistant is powered by Anthropic's Claude models, accessed through the Vercel AI SDK. When you use the assistant, the relevant excerpts of your own organization's data and your question are sent to Anthropic to generate a response. The assistant is read-only and is scoped strictly to the data of your own organization, as described in Section 14. For more information, see Anthropic's Privacy Policy.

4. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve the Service
  • Process and manage consultant accounts and subscriptions
  • Enable management of customers, properties, deals, and partners
  • Send administrative communications and updates
  • Respond to your inquiries and support requests
  • Monitor and analyze usage patterns to improve user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

  • Within Your Organization: Information is shared among members of your agency or organization as determined by organization administrators
  • Subprocessors: With the subprocessors and third-party vendors who perform services on our behalf (as described in Section 3)
  • Legal Requirements: When required by law, regulation, or legal process
  • Protection of Rights: To protect our rights, privacy, safety, or property
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • Public Property Pages: Property information that a consultant chooses to publish on a public property page is shown to anyone with the link, as described in Section 15

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction, consistent with the Protection of Privacy (Data Security) Regulations, 5777-2017. These measures include:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication mechanisms
  • Access controls and role-based permissions, with organization-level separation of data
  • Regular security assessments and access logging

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

7. Data Retention

We retain personal information for as long as the consultant account is active or as needed to provide the Service. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When data is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and the controlling agency's instructions.

8. International Data Transfers

Some of our subprocessors, such as Vercel, Neon, Clerk, Resend, Freemius, and Anthropic, are US-based companies and may access or process personal data from outside your country of residence under appropriate safeguards. These countries may have different data protection laws than your country.

By using the Service, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place for such transfers.

9. Your Rights

Depending on your location, and consistent with the Protection of Privacy Law, 5741-1981 (including Amendment 13) and GDPR-style protections, you may have the following rights:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Objection: Object to certain processing of your information
  • Restriction: Request restriction of processing

If your personal data was entered by an agency that uses Tivoo (for example, because you are its customer, buyer, or seller), that agency is the controller of that data. Please direct your access, correction, and deletion requests to that agency, and Meged Solutions will assist it as the processor. For data held in Israel, these rights derive from the Protection of Privacy Law, 5741-1981 (the right to access under Section 13 and to correct under Section 14).

To exercise these rights regarding data for which we are the controller, please contact us.

10. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us.

13. Governing Law

This Privacy Policy is governed by the laws of the State of Israel. Any disputes arising from this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Ramla, Israel.

14. The In-App AI Assistant

Tivoo includes an AI assistant powered by Anthropic's Claude models (see Section 3.7). The assistant answers questions only over your own organization's data, such as your customers, properties, deals, and partners, and it operates in read-only mode: it can summarize and surface your data but cannot create, change, or delete records on your behalf.

The assistant cannot access another organization's data, and we do not use the content of your data to train third-party models. Your questions and the relevant data excerpts are sent to Anthropic solely to generate the response you requested.

15. Public Property Pages and Location Privacy

Consultants can publish public property pages (under /p/) that may display property photos, price, and the city or neighborhood. The exact street address, floor, and apartment number, together with map links, are shown only when the consultant explicitly enables that option for a given property. Branded pages display the agency's identity, while partner links are unbranded.

Anyone with the link to a public property page can view the information published on it. Consultants are responsible for deciding what to publish and for not exposing sensitive location details without a lawful basis. We do not run marketing or advertising trackers on public property pages.