Privacy Policy
Last updated: July 21, 2026
The "Kesher Kasher" service delivers your WhatsApp messages to your email. By its nature, the system processes personal content — so we treat your privacy as a core commitment, not a legal clause. This document explains transparently what we store, why, with whom, and what your rights are under Israel's Protection of Privacy Law, 5741-1981. This English version is provided for convenience; in case of any discrepancy, the Hebrew version prevails.
1. What Information We Store
- Message content and metadata: message text, sender names, group names and send times. This storage is required to render the "conversation pages" in your email — showing the most recent messages in a chat as context for each email.
- Media files (images, documents, voice notes): stored in order to deliver them to your email and deleted automatically after 30 days.
- WhatsApp connection credentials (linked-device credentials): stored encrypted with AES-256-GCM. We do not store your WhatsApp password — no such password is ever transmitted to us.
- Admin-area account: email address and password — the password is stored as a one-way hash only, never as plain text.
- Billing data: processed by the payment provider; we do not store credit-card numbers on our servers.
2. What We Do Not Do
- We do not read, analyze or "mine" the content of your messages beyond what is required to provide the service itself.
- We do not sell or rent personal information to anyone.
- We do not show ads, and we do not use your content for marketing purposes or for training models.
3. Sub-Processors
To provide the service we rely on established infrastructure providers, acting as data processors on our behalf:
- Service servers and database: hosted in the European Union (EU).
- Email sending and receiving: Amazon SES (AWS, EU region).
- Media file storage: secure cloud storage, with automatic deletion after 30 days.
4. AI Features — Only When You Enable Them
Two features of the service use external artificial-intelligence providers, and they are off by default or active only at your choice:
- Voice-note transcription — audio files are sent for transcription to OpenAI (Whisper).
- Daily group summary ("what you missed today") — the message content of the relevant groups is sent for summarization to Anthropic.
Message content is transferred to these providers only when you have enabled the feature. Turning the feature off stops the transfer immediately.
5. Cookies
The admin area uses a single authentication cookie only, whose purpose is to recognize you between visits. The site has no tracking cookies, no advertising cookies and no third-party analytics tools.
6. Data Security
- Transport encryption (TLS/HTTPS) for all communication with the service, and encryption at rest for sensitive data.
- WhatsApp connection credentials are encrypted with AES-256-GCM, with the encryption key kept separate from the data.
- Full separation between user accounts (isolated multi-tenancy).
- Employee access to data — limited to what is strictly necessary, for support and operations.
7. Data Location and Backups
Data is stored on servers in the European Union. Regular encrypted backups are made for resilience and recovery, also in Europe. Data deletion also applies to backup copies as part of the regular backup cycle.
8. Data Retention and Deletion
- Media files — deleted automatically after 30 days.
- Long-term message archive — kept only if you explicitly enabled it in the settings.
- On account closure — all account data, including message content and connection credentials, is deleted within 30 days.
9. Your Rights
Under the Protection of Privacy Law, 5741-1981, you have the following rights:
- Access — to receive information about the data stored about you.
- Correction — to request correction of inaccurate or outdated information.
- Deletion — to request deletion of information, subject to retention obligations under law.
To exercise these rights, write to us: info@kesher-kasher.co.il. We will respond promptly, and no later than the deadlines set by law.
10. Changes to This Policy
We will update this policy from time to time. Material changes — for example, adding a sub-processor that processes message content — will be announced in advance by email or in the admin area.
11. Contact
For privacy matters: info@kesher-kasher.co.il