Privacy Policy

Last updated: 2026-07-02

Version: 2.0

1. Introduction

This policy explains what information is collected, how it is processed, and what rights you have. It applies to: (a) use of the handinhandai.com website; (b) conversations with Sasha — my WhatsApp digital assistant; (c) WhatsApp lines the business operates on behalf of its clients (see section 14).

2. Who I Am (Data Controller)

• Name: Alex Guberman
• Business status: Sole proprietor (Osek Patur) no. 323227199
• Address: Ha'Eshel 8, Ramat Gan, Israel
• Email: alexg@handinhandai.com

I am the Data Controller and am personally responsible for how your data is handled.

3. What Sasha Is

Sasha is an AI-powered digital assistant operating on my behalf via WhatsApp. All conversations with Sasha are handled automatically by an AI system, not by a human in real time. I (Alex) may manually review conversation content, primarily when a conversation is escalated to me for follow-up.

At the start of every new conversation, Sasha identifies herself as a digital tool and links to this policy. Continuing the conversation after this disclosure constitutes your consent to the processing described in this document.

4. What Information Is Collected

During your conversation with Sasha, the following information is collected:

• Your phone number (received automatically via WhatsApp)
• Your public WhatsApp name, if set
• Message content — text, images, and files
• Voice messages — automatically transcribed to text by an AI service. Both the audio file and the transcript are processed and stored
• Business information you choose to share during the conversation (business type, needs, budget, timing, etc.)
• Message timestamps

No sensitive financial information (credit card details, bank accounts, ID numbers) is collected. If payment becomes relevant later in our business relationship, it will be handled outside this system.

5. Why Information Is Collected

The information is used only for the following purposes:

• Responding to your inquiries and questions
• Understanding your business needs and assessing fit for the services I offer
• Scheduling a direct consultation call with me
• Maintaining conversation context so Sasha can pick up where we left off

Information is not sold, rented, or transferred to third parties for marketing purposes.

6. Technical Processing Chain

For transparency, these are the parties through which your data passes:

1. Meta / WhatsApp — the platform where the conversation takes place
2. Green API — a third-party service connecting the WhatsApp account to my system
3. My server — a Node.js system hosted on Railway, which processes and stores conversation history in an encrypted database
4. AI processing provider — your message content is sent for processing to either Anthropic (Claude) or OpenAI (GPT), depending on my system's internal routing. Both providers commit to not training their models on your conversation content.

7. International Data Transfer

Some of the providers listed above (Anthropic, OpenAI, Railway, Green API) are located outside Israel, primarily in the United States and the European Union. This means your data is processed abroad as well. These providers operate under industry-standard security frameworks (including SOC 2 or equivalents).

8. Security Measures

The information is protected by the following measures:

• Encryption in transit — all communication between components is over TLS/HTTPS
• Encryption at rest — the database is encrypted at the server level
• Access control — only I (Alex) have access to the data. No employees, contractors, or other third parties
• Backups — performed securely and encrypted
• Incident response — in the event of a data breach, I will take all required action under applicable law and notify affected users in accordance with the law

9. Data Retention

Conversation history is stored in my database for up to 6 months from the last message exchanged with you. After this period, the conversation is automatically deleted. If you contact me again within that window, the clock resets.

Data held by third-party providers (Meta, Green API, Anthropic, OpenAI) is subject to their own retention policies.

10. Minors

This service is intended for adult business owners and professionals only and is not intended for users under 18. I do not knowingly collect data from minors. If you become aware that a minor has interacted with Sasha, please contact me and I will delete the data immediately.

11. Your Rights Under Israeli Privacy Law

Under the Israeli Privacy Protection Law, 5741-1981 (including Amendment 13 of 2025), you have the following rights:

• Right of access — request to see what information is held about you
• Right of correction — request to correct inaccurate information
• Right of deletion — request to delete all information held about you
• Right to withdraw consent — request to stop processing at any time
• Right to complain — file a complaint with the Privacy Protection Authority at the Ministry of Justice: gov.il/privacy-protection

12. How to Exercise Your Rights

You can reach me through either channel:

• Email: alexg@handinhandai.com
• In conversation with Sasha: if you ask to delete your data, stop receiving messages, or exercise any other right — Sasha will recognize the request and pass it to me for personal handling. Sending such a message will immediately halt further messages from Sasha until I process your request.

If contacting by email, please include the phone number used in your conversation with Sasha so I can locate your data. I will respond within 30 days of receiving the request.

Opting out of messages: you can stop receiving WhatsApp messages at any time by replying "STOP" (or "הסר") to any message.

13. The Website: Cookies and Technical Data

handinhandai.com is a static website. It does not use cookies, does not run analytics or tracking tools, and contains no forms that collect personal information. The hosting provider (Cloudflare) may log standard technical data (such as IP addresses) for security and operational purposes, in accordance with its own policies.

14. WhatsApp Lines Operated for Clients

The business also builds and operates smart WhatsApp agents on behalf of its business clients, via Meta's WhatsApp Business Platform (Cloud API). Messages sent to those lines are processed through Meta's platform and are subject to Meta/WhatsApp's own terms and privacy policy. Responses on those lines are generated automatically by AI. On any such line, you can stop receiving messages by replying "STOP" (or "הסר").

15. Changes to This Policy

I may update this policy from time to time. Material changes will be clearly highlighted, and in some cases renewed consent will be requested. Minor changes will be posted on this page with a new "last updated" date at the top.