Privacy Policy

Last Updated: June 4, 2026

This Privacy Policy explains how Answr LTD ("Answr", "we", "us") collects and processes personal data when you use Answr — a WhatsApp assistant that helps businesses reply to their customers — and when you visit our website.

We aim to handle personal data in line with the Israeli Protection of Privacy Law, 5741-1981 and the regulations made under it (including the 2025 reform known as Amendment 13). For visitors in the EEA or UK, references below to "controller", "processor" and "data subject rights" should be read in their GDPR sense.

Website: https://www.answrhq.com
Contact: support@answrhq.com

1) Who We Are and Our Two Roles

Answr plays two different roles depending on the data:

We Are the Controller

For personal data of the business owners who open an account with us, and for visitors to our website, Answr is the controller and decides how that data is used, as described in this Policy.

We Are a Processor

For the messaging data we handle on behalf of a business — the conversations between a business and its own customers — the business is the controller and decides what data is collected, how it is used, and how long it is kept. Answr processes that data only on the business's instructions and only to provide the Service.

2) Data We Process

2.1 Account and Business Information

Owner name, email address, phone number, business name, preferred language, country (auto-detected from your connection), and the business information you choose to share with the Service.

2.2 Messaging and Platform Data

When a business connects a platform such as WhatsApp, we process on its behalf:

  • inbound messages and media sent by the business's customers,
  • replies generated or assisted by the Service,
  • message metadata such as timestamps, message identifiers, sender display name and phone number,
  • business knowledge the owner teaches the Service.

To produce a reply, voice messages may be transcribed to text and shared media may be analyzed. This content can include whatever a customer chooses to send; businesses are responsible for not introducing data they are not permitted to process (see our Terms of Service).

2.3 Technical Data

IP address, device and online identifiers, log and diagnostic data, and approximate location derived from your IP address. Under Amendment 13 these are treated as personal data.

2.4 Website and Cookies

Our website uses cookies and similar technologies. See our Cookie Policy for details and your choices.

3) Purposes and Legal Bases

We process personal data for the following purposes:

  • providing, operating and supporting the Service — to perform our contract with you;
  • generating replies and maintaining the business's knowledge base — on the instructions of the business;
  • security, prevention of fraud and abuse, debugging and improving reliability — our legitimate interests;
  • website analytics and any marketing — based on your consent;
  • complying with legal obligations and defending legal claims.

Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing already carried out.

4) Platform Data Use Commitments (Meta)

Answr explicitly commits that:

  • Platform data is processed only to provide the Service to the relevant business.
  • Platform data is not used for advertising.
  • Platform data is not sold, licensed, or shared with third parties, except service providers acting on Answr's behalf as described below.
  • Platform data is not combined to build user profiles across businesses.

5) Automated Generation of Replies (AI)

Replies are produced by automated systems ("AI") using the business's own knowledge and the conversation context. Please note:

  • The business owner controls the assistant: the owner enables or disables it, sets its tone, defines topics it must not handle, sets when it replies, and can pause it or take over any conversation at any time.
  • AI output may be inaccurate or incomplete. The business is responsible for the messages sent through the Service.
  • We do not use platform data to train general-purpose AI models. Service improvements rely on aggregated, anonymized, or operational data.
  • Each business's conversations are processed in isolation and are not used to build cross-business profiles.
  • The Service drafts and sends customer-service messages; it does not make automated decisions that produce legal or similarly significant effects on individuals.

6) Service Providers and Data Sharing

We share personal data only with service providers that process it on our behalf under contract, and only as needed to run the Service:

  • cloud hosting, database and file storage providers that store account and messaging data;
  • AI providers that generate replies, embeddings, voice transcriptions and media analysis;
  • content-ingestion providers used when an owner shares a link or file to teach the Service;
  • the messaging platforms a business connects (such as the Meta / WhatsApp Business Platform);
  • website analytics providers (see the Cookie Policy).

We may also disclose data to authorities or other parties where required by law, or to protect the rights, property or safety of Answr, our users, or others. Answr does not sell personal data and does not share it for third-party advertising.

7) International Data Transfers

Our service providers process data on infrastructure located outside Israel, including in the United States and other countries. Where personal data is transferred outside Israel, we rely on a lawful basis under the Israeli Privacy Protection (Transfer of Data Abroad) Regulations — such as contractual data-protection commitments comparable to Israeli law, the recipient operating under an adequate protection regime, or your consent. Transfers to the European Economic Area are supported by Israel's EU adequacy status.

8) Data Retention

Account and messaging data are kept while your account is active and for as long as needed to provide the Service. Certain operational data is pruned on a rolling basis (for example, raw incoming webhook payloads are cleared within a short period and then deleted, and messages that are not customer-service related are removed shortly after processing).

After an account is closed, we delete or anonymize personal data within a reasonable period, unless we must keep it to comply with law, resolve disputes, or enforce our agreements (limited billing and audit records may be retained for these purposes). Businesses may request earlier deletion.

9) Your Privacy Rights

Under the Israeli Privacy Protection Law you may:

  • request access to the personal data we hold about you (Section 13);
  • request correction or deletion of data that is inaccurate, incomplete, unclear or out of date (Section 14);
  • withdraw consent where processing is based on consent; and
  • ask to be removed from any direct-marketing list.

Send requests to support@answrhq.com. We respond to access and correction requests within 30 days, as required by law, and may take proportionate steps to verify your identity.

If you are a customer of a business that uses Answr: that business is the controller of your conversation data, so please send your request to the business directly. Answr will assist the business as required by law.

10) Security

We apply technical and organizational measures appropriate to the data, including encryption of data in transit, encryption of stored access credentials, access controls, separation of each business's data, and activity logging. No system can be guaranteed to be completely secure.

11) Security Incidents

If we become aware of a security incident affecting personal data, we will act in accordance with applicable law. This includes notifying the Israeli Privacy Protection Authority within 72 hours where required, and informing affected individuals or the relevant business without undue delay where the incident is likely to create a high risk to their rights.

12) Children's Data

The Service is intended for businesses and for adults aged 18 and over. It is not directed to children, and businesses must not use it to process the personal data of minors without a lawful basis and any parental consent required by law.

13) Compliance Status

Answr does not claim certification or compliance with specific regulatory frameworks unless explicitly stated in writing. Use of the Service does not, by itself, make a business compliant with the laws that apply to it.

14) WhatsApp and Meta Platforms

Meta and WhatsApp act as independent controllers for platform-level data they hold. Answr is not responsible for platform enforcement actions, including the suspension or banning of phone numbers.

15) Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above and, where appropriate, provide additional notice.

16) Contact

For privacy questions or to exercise your rights, contact Answr LTD at:

support@answrhq.com