Privacy Policy: WhatsApp Bot for Clinics

• The phone number you wrote from on WhatsApp, as provided by Meta.
• The content of the messages you send to the bot and its replies.
• Details you provide when requesting an appointment: full name, age, chosen treatment, and the days and times that suit you.
• Voice messages you send to the bot. The recording is converted to text, and the bot replies based on the text. The recording itself is not stored. The text is stored like a written message and deleted after 24 hours.

The bot does not ask about health, pregnancy, medication or illnesses, and you do not need to send it such information. These questions are left for the health declaration at the clinic itself.

• To answer your questions based on the information the clinic provided.
• To pass an appointment request, or a question the bot cannot answer, to the therapist so they can get back to you.
• Age is needed so the clinic knows whether the treatment suits your age, and whether a parent must consent and be present (under 18).
• To send the therapist a daily summary of inquiries and a reminder about inquiries not yet handled.
• To prevent abuse, for example a daily message limit and blocking abusive messages.

We keep as little information as possible, for a short time:

• Conversation content is stored without your phone number. Instead, a one-way code is stored, from which the number cannot be recovered.
• Your phone number is stored only for the therapist's summary, so they can get back to you.
• All of this information is deleted automatically after 24 hours.
• When a conversation is handed over to the therapist, or a sender is blocked for abusive messages, only the one-way code is kept, for up to 30 days, so the bot does not reply during that time.
• The messages themselves also remain in the clinic's WhatsApp, as with any WhatsApp conversation. This is the clinic's responsibility and is subject to WhatsApp's policies.

The information is not sold and is not shared for advertising. It is shared only with the providers that operate the bot, and only as needed:

• Meta (WhatsApp Business Platform): delivering WhatsApp messages.
• Cloudflare: the server and database where the bot runs and the information is stored for the short period described above, and the service that converts voice messages to text.
• Anthropic: the AI model (Claude) that drafts the replies. Under Anthropic's terms, information sent this way is not used to train its models and is retained only for a limited period.
• The clinic's therapist: receives appointment requests, questions passed to them and the daily summary.

Some of these providers' servers are located outside Israel, so the information may be processed and stored outside Israel, by providers that are committed to protecting it.

Most information is deleted within 24 hours anyway. To request immediate deletion of all information the bot holds about you:

• Email dina.krinitsky@dsynapse.com with the subject "Delete my bot data".
• Include the phone number you wrote from and the name of the clinic.
• The information will be deleted within 7 days at the latest, and you will receive a confirmation email.
• Messages kept in the clinic's own WhatsApp can be deleted on request directly by the clinic.

Under the Privacy Protection Law, you may:

• Review the information stored about you.
• Ask to correct information that is wrong, incomplete or outdated.
• Ask to delete your information.
• Ask to talk to a person instead of the bot. Each clinic sets a word or button that hands the conversation to the therapist.

Messages reach the server over an encrypted connection, and the server verifies that each message really came from Meta. Access to the server and keys is restricted. No system is completely secure, but we take reasonable measures to protect the information.

We may update this policy from time to time, for example when the bot gains a new capability. The current version will always appear on this page, with its update date.