Privacy Policy

Ajentis provides AI-powered WhatsApp agents to small and medium businesses. This policy explains what personal data we collect, why, who we share it with, and how you can have it deleted.

1. Who we are

Ajentis is operated by Eran Gepstein, a registered sole proprietor (עוסק מורשה) in Israel, business number 061503785 (“Ajentis”, “we”, “us”). Our website is ajentis.co.il.

Ajentis is a Meta Tech Provider on the WhatsApp Business Platform. We build and operate the software; our business customers own their WhatsApp Business Accounts and the relationship with the people who message them.

2. Who this policy covers

Three groups of people interact with Ajentis, and we treat their data differently:

• Business customers — the businesses (for example law offices, accountants, real estate agencies) that sign up for Ajentis and connect a WhatsApp number to it.
• End users — people who send WhatsApp messages to, or receive messages from, a business customer's WhatsApp number that is powered by Ajentis. For end-user data, the business customer is the data controller and Ajentis acts as a processor on its behalf.
• Website visitors — anyone who browses ajentis.co.il.

3. What we collect

From business customers

• Account details: name, business name, email address, phone number, billing address.
• WhatsApp Business Platform data received through Meta's Embedded Signup: your WhatsApp Business Account ID, business phone number ID, display name, and an access token that lets Ajentis send and receive messages on your behalf.
• Configuration you provide: your business hours, services, FAQs, tone of voice, and any documents or instructions you upload to train your agent.
• Payment-provider credentials (such as PayPlus API keys) if you choose to let your agent generate payment links. These are stored encrypted and used only to create links in your own payment account.
• Usage data: message volumes, agent performance, feature usage, and support correspondence.

From end users

• The WhatsApp phone number and profile name you send messages from.
• The content of messages exchanged with the business, text, voice notes, images and files, and any details you choose to share in the conversation (for example your name, appointment preferences or questions about a service).
• Voice calls handled by an AI agent, where a business customer has enabled that feature: call audio and its transcript.
• Delivery metadata such as timestamps and message status.

From website visitors

• Information you submit in contact or demo forms.
• Technical data collected by cookies and analytics tools, see Cookies and analytics.

4. How we use data

• To deliver the service: receive incoming WhatsApp messages, generate replies with an AI model according to the business customer's configuration, and send those replies through the WhatsApp Business Platform.
• To let business customers see and manage their conversations, hand over to a human, and review what their agent said.
• To create payment links, book appointments or perform other actions the business customer has enabled.
• To operate, secure and improve Ajentis, including monitoring for abuse, debugging, and measuring agent quality.
• To bill business customers and communicate with them about their account.
• To comply with law and with the terms of the platforms we depend on, including Meta's WhatsApp Business Platform policies.

We do not sell personal data. We do not use end-user conversations to train our own or third-party AI models, and we do not use them for advertising.

5. AI processing

Replies are generated by large language models operated by third-party AI providers. To generate a reply, we send the relevant conversation content, together with the business customer's configuration, to one or more of these providers:

• Anthropic (Claude models), text conversations.
• OpenAI (Realtime API), AI voice calls.
• ElevenLabs, converting text to speech and speech to text for WhatsApp voice notes.

These providers process the data under their own terms and privacy policies and may retain content for a limited period for abuse monitoring and to provide the service. They are contractually restricted from using API content to train their models. Where a provider offers zero-retention or reduced-retention options for API traffic, we aim to use them.

AI-generated replies can be wrong. Business customers are responsible for reviewing their agent's behaviour, and every conversation can be taken over by a human.

6. Who we share data with

We share personal data only with providers we need to run the service, each bound to process it solely on our instructions:

We may also disclose data if required by law, to protect the rights and safety of Ajentis, our customers or others, or as part of a sale or transfer of the business (in which case this policy continues to apply).

End-user conversations are, of course, visible to the business customer they were sent to.

7. WhatsApp and Meta

Ajentis uses Meta's WhatsApp Business Platform (Cloud API) and Embedded Signup. When a business customer connects to Ajentis:

• The business creates or selects its own Meta business portfolio and WhatsApp Business Account. The business owns these assets and can manage them in WhatsApp Manager at any time.
• The business grants Ajentis the whatsapp_business_messaging and whatsapp_business_management permissions so that Ajentis can send and receive messages and manage message templates on its behalf. The business can revoke this access at any time in Meta Business Settings.
• Ajentis stores the resulting access token securely and uses it only for the purposes described in this policy.

Our use of data received from Meta complies with the Meta Platform Terms, the WhatsApp Business Terms of Service and the WhatsApp Business Messaging Policy. Messages sent through WhatsApp are also subject to WhatsApp's Privacy Policy.

8. Retention

• Conversation logs, voice notes and transcripts are kept for as long as the business customer's account is active, and deleted within 30 days after the account is closed.
• Business customer account and billing records are kept for the life of the account and thereafter as required by Israeli tax and accounting law (generally seven years for invoices).
• Meta access tokens are deleted immediately when the business disconnects Ajentis or closes its account.
• Payment-provider credentials are deleted immediately when the business removes them or closes its account.
• Website analytics data is retained according to Google Analytics' default settings (currently up to 14 months).

Backups are purged on a rolling basis within 30 days of the primary deletion.

9. Deleting your data

If you are a business customer

Delete your account from the Ajentis dashboard, or email support@ajentis.co.il from the address on your account. We will delete your configuration, conversations, tokens and credentials within 30 days and confirm by email. Disconnecting Ajentis in Meta Business Settings stops further messages immediately but does not by itself delete stored data, please also close your account.

If you are an end user

You can ask the business you messaged to delete your conversation, or contact us directly at support@ajentis.co.il with the WhatsApp number you messaged from and the business's number. We will verify the request, delete your messages from our systems within 30 days, and notify the business customer. Note that the business may keep its own copies (for example in WhatsApp Manager or its CRM) under its own privacy policy.

10. Your rights

Under Israel's Protection of Privacy Law, 5741-1981, and where applicable the EU General Data Protection Regulation (GDPR), you have the right to:

• access the personal data we hold about you;
• correct data that is inaccurate;
• delete your data, subject to legal retention duties;
• object to or restrict certain processing;
• receive your data in a portable format (business customers can export their conversations);
• lodge a complaint with the Israeli Privacy Protection Authority or, for EU residents, your local supervisory authority.

To exercise any of these rights, contact us using the details below. We respond within 30 days.

For EU end users, our legal bases are performance of a contract with the business you are messaging (our customer), our legitimate interest in operating a secure service, and consent where required for analytics cookies.

11. Security

We protect data with encryption in transit (TLS) and at rest, encrypted storage of access tokens and third-party credentials, role-based access limited to what is needed to operate the service, logging of administrative access, and regular review of our providers' security practices. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify affected customers and the relevant authorities as required by law.

12. Where data is stored

Our servers and databases are located in Israel. Some of the providers listed in section 6 process data in the United States or the European Union. Israel is recognised by the European Commission as providing an adequate level of data protection. Where we transfer data from the EU to a provider outside it, we rely on that provider's Standard Contractual Clauses or equivalent safeguards.

13. Cookies and analytics

ajentis.co.il uses essential cookies needed to run the site, and, with your consent, Google Analytics and the Meta Pixel to understand how visitors use the site and to measure our advertising. These tools set cookies and collect your IP address, device information and pages visited. You can withdraw consent through the cookie banner, block cookies in your browser, or opt out via Google's opt-out and Meta's ad preferences.

No analytics or advertising tracking is applied to WhatsApp conversations.

14. Children

Ajentis is a business service and is not directed at children under 18. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it.

15. Changes to this policy

We may update this policy as the service or the law changes. The date at the top shows the latest version. For material changes we will notify business customers by email before they take effect.

16. Contact

Privacy requests

support@ajentis.co.il

Operator

Eran Gepstein, sole proprietor, business no. 061503785

Website

ajentis.co.il