Book a demo ENעב

Legal

Privacy Policy

Last updated:

This Privacy Policy explains how Siach ("Siach", "we", "us") collects, uses and protects personal data when you visit siach-ai.com, when a business uses Siach, and when you message a business that uses Siach on WhatsApp.

This document is published in English and Hebrew. For users in Israel, if the two versions conflict, the Hebrew version prevails.

1. Who we are

Siach provides AI agents that answer WhatsApp messages on behalf of businesses, together with a CRM in which those businesses manage their conversations and leads (the "Service"). Our contact details are at the end of this policy.

2. Our role

  • Website visitors and prospective customers. When you browse our website or contact us, we decide how your data is used. We are the controller of that data.
  • Businesses that use Siach. We are the controller of the account and billing data of the businesses we work with and of the people who use their accounts.
  • People who message a business that uses Siach. When you write to a business on WhatsApp and that business uses Siach, the business decides why and how your conversation is processed. The business is the controller, and Siach processes the data on its behalf and on its instructions, as a processor (service provider). Requests about those conversations can go to the business or to us; see section 11.

3. The data we process

3.1 WhatsApp Business Platform data

When a business connects its WhatsApp number to Siach through Meta's WhatsApp Business Platform, we receive and process, on that business's behalf:

  • your WhatsApp phone number and the profile name you have set in WhatsApp;
  • the content of the messages exchanged with the business, including text, images, voice notes, documents and locations you choose to send;
  • message metadata, such as message identifiers, timestamps and delivery and read status;
  • information you share in the conversation and that the business records in its CRM, for example the products you are interested in, your size, order details, the stage of your enquiry and notes added by the business's staff.

We do not receive your WhatsApp contacts, your other chats or any conversation you have with businesses that do not use Siach.

3.2 Store data

If a business connects its online store (for example Shopify), we process the product catalogue, prices, stock levels and, where needed to answer a customer, order information such as order number, status and the name and contact details on the order.

3.3 Business account data

For the businesses we serve: company and contact details, the names, email addresses and roles of account users, settings, billing information, and records of support requests.

3.4 Website and enquiries

If you contact us through the website or by email, we receive what you send us, such as your name, store name, email address or phone number and your message. Our web servers keep standard technical logs (IP address, browser type, date and time of the request) for security and to keep the site running.

4. How we use data

  • To provide the Service: to receive messages, generate and send replies on the business's behalf, show product information, hand conversations to the business's staff, and record leads in the business's CRM.
  • To support and maintain the Service, investigate problems and respond to the business's instructions.
  • To keep the Service secure, prevent abuse and spam, and comply with WhatsApp Business Platform policies.
  • To manage our relationship with the businesses we serve, including billing and service communications.
  • To answer enquiries sent to us and arrange demos.
  • To comply with the law and to establish, exercise or defend legal claims.

We do not sell personal data, we do not use conversation content for advertising, and we do not use the content of a business's conversations to train general-purpose AI models.

5. AI-generated replies

Siach uses large language models to draft and send replies. To generate a reply, the relevant part of the conversation and the business's own information (such as its catalogue and policies) are sent to an AI model provider that processes them only to produce that reply, under contractual terms that do not allow it to use the data to train its models. Each business configures how Siach introduces itself and when a conversation is handed to a person. AI replies can contain mistakes; businesses can review conversations in the CRM at any time.

Where data protection laws such as the EU and UK GDPR apply, we rely on: the performance of a contract (to provide the Service to businesses and to answer your requests); our legitimate interests (to secure and improve the Service and to communicate with business contacts), balanced against your rights; your consent where it is required; and compliance with legal obligations. For conversations processed on behalf of a business, the business is responsible for having a lawful basis, including the opt-in required by WhatsApp. We also process personal data in accordance with the Israeli Protection of Privacy Law, 5741-1981 and the regulations under it.

7. Who we share data with

  • Meta Platforms (WhatsApp). Messages are sent and received through the WhatsApp Business Platform. Meta processes this data under its own terms; see the WhatsApp Business Policy and the WhatsApp Privacy Policy.
  • Service providers that host and operate the Service for us: cloud hosting and storage, AI model providers, email delivery and customer support tools. They may only process data on our instructions and must protect it.
  • Store platforms that a business chooses to connect, such as Shopify.
  • The business you messaged, which can see your conversation and the lead record in its CRM.
  • Authorities or other parties when the law requires it, or to protect the rights, safety or property of our users, the public or Siach.
  • A successor in the event of a merger, acquisition or sale of assets, subject to this policy.

An up-to-date list of our sub-processors is available on request at hello@siach-ai.com.

8. International transfers

Our service providers may process data outside your country, including outside Israel and the European Economic Area. Where this happens we rely on appropriate safeguards, such as adequacy decisions or standard contractual clauses, as required by the applicable law.

9. How long we keep data

  • Conversation and CRM data are kept for as long as the business keeps its Siach account, unless the business deletes them sooner or a deletion request is fulfilled. When an account is closed, the business has 30 days to export its data; we then delete it from our active systems, and from backups within a further 60 days.
  • Business account and billing records are kept for as long as the account is active and afterwards for the period required by tax and accounting law.
  • Website enquiries are kept for up to 24 months after our last contact, unless they become a customer relationship.
  • Technical logs are kept for up to 90 days, unless needed longer to investigate a security incident.

10. Security

We protect data with technical and organisational measures appropriate to the risk, including encryption in transit, access limited to the people who need it to run the Service, authentication for account users, and logging of administrative access. No system is completely secure; if a breach affects your personal data we will notify the affected business, and you or the authorities where the law requires it.

11. Your rights

Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict certain processing, to data portability, and to withdraw consent at any time. To exercise these rights, email hello@siach-ai.com. If your request is about a conversation with a business that uses Siach, you can also contact that business directly; if you contact us, we will verify the request and handle it together with the business. We answer requests within 30 days. To ask for your WhatsApp conversation data to be deleted, see Data deletion.

You can stop a business from messaging you at any time by blocking it in WhatsApp or asking the business to opt you out.

You also have the right to complain to a data protection authority, such as the Israeli Privacy Protection Authority or the supervisory authority in your country.

12. Children

The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children under 16 for our own purposes.

13. Cookies

Our website does not use advertising or cross-site tracking cookies. If we add analytics in the future, we will update this policy and, where required, ask for your consent first.

14. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "last updated" date, and notify businesses of material changes in advance.

15. Contact

For any question about this policy or your personal data, contact us:

Company
Siach
Email
hello@siach-ai.com