Privacy Policy

At RAVOT Technologies Ltd. (“RAVOT”, “we”, “our”), we regard privacy not as an afterthought or marketing claim, but as a foundational architectural discipline. Our systems are deliberately engineered around strict data minimization: we collect only the minimal information strictly required to maintain your software session, protect against malicious network attacks, and fulfill legal compliance obligations.

We never sell, broker, or rent your personal information to third parties or marketing networks. We do not deploy surveillance cookies, behavioural trackers, or algorithmic profile aggregators.

In operating the RAVOT application interface, we may collect and process the following categories of data:

• Account Profile Information: When you register an account, we record your verified email address, chosen username, and cryptographic hashes of your credentials.
• Public On-Chain Data: The Base network is a public distributed ledger. Public blockchain addresses, transaction hashes, timestamps, and smart contract interactions associated with your account are inherently public records recorded to the blockchain.
• Security & Session Diagnostics: To safeguard against unauthorized intrusions, credential stuffing, and brute-force attempts, our servers record encrypted session tokens (HTTP-only cookies), hashed device fingerprints for two-factor authentication, and IP addresses strictly used for firewall rate-limiting and audit logging.
• Direct Communications: When you submit messages via our Contact interface or email our support desk, we retain the contents of your inquiry to resolve your request.

To ensure true financial sovereignty and protect your digital assets, RAVOT explicitly enforces the following non-collection invariants:

• We never store or have access to unencrypted private keys or raw recovery phrases.
• We never record plaintext passwords (only salted, argon2/bcrypt-grade cryptographic hashes).
• We never track your web browsing activity outside the ravot.co platform.
• We never collect biometric identifiers, contacts, or device media libraries.

We process personal information under the following legitimate and lawful bases:

• Performance of Contract: To grant you access to your account interface, display on-chain balances, and process requested transfers.
• Legitimate Interests: To detect and prevent fraudulent transactions, defend against DDoS attacks, and preserve system stability.
• Legal & Regulatory Compliance: To comply with statutory requirements, sanctions screening mandates, and lawful requests from regulatory authorities.

All data processed by RAVOT is safeguarded by defense-in-depth security standards:

• Encryption in Transit: All communications between your browser and our servers are encrypted using modern Transport Layer Security (TLS 1.3).
• Encryption at Rest: Database volumes and configuration secrets are encrypted using AES-256 standard encryption.
• Session Isolation: Authentication cookies are strictly configured with HttpOnly, Secure, and SameSite=Lax attributes.

Account data is retained for the duration of your active account lifecycle. If you request account closure, personal identifiers are purged or pseudonymized from our operational systems within 30 days, subject to statutory record-retention requirements.

RAVOT employs only strictly necessary cookies and local storage tokens essential to provide our services:

• ravot_theme: Remembers your light/dark editorial interface preference.
• ravot_session / ravot_admin_session: Encrypted session authentication tokens.
• ravot_balance_privacy: Stores your local client preference for masking sensitive numerical balance displays in public environments.

We do not deploy marketing, tracking, or cross-domain advertising cookies.

Depending on your jurisdiction (including the UK GDPR and EU GDPR), you have specific legal rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold concerning your account.
• Right to Portability: You can export complete transaction records in CSV or generated PDF statement formats directly from the dashboard at any time.
• Right to Rectification: You may update or correct your profile data in the Account Center.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your account profile data by contacting privacy@ravot.co. Please note that confirmed transactions recorded on the Base blockchain are immutable and cannot be altered or erased by any entity.

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer: