Legal

Audit consent & data handling

Last updated:

This page explains exactly what happens during Siach's free WhatsApp business audit (the "Audit"), what we do with your data, and the risk you accept. When you tick the consent box in the audit request form, you confirm that you have read it and agree to it on behalf of your business.

This document is published in English and Hebrew, with a Russian translation for convenience. For users in Israel, if the versions conflict, the Hebrew version prevails.

1. What happens in the Audit

  1. You ask for the Audit in the form on our website. We contact you on WhatsApp or by email to agree a time, and we sign a non-disclosure agreement (NDA) with your business before anything is connected.
  2. You connect for about 15 minutes. At the agreed time you scan a code with your business's WhatsApp app, the same way you would link WhatsApp Web. This links a temporary session that runs in a closed environment.
  3. We pull recent chats and disconnect. The session reads your recent one-to-one chats with customers. When the pull is complete, usually within 15 minutes, we log the session out.
  4. We analyse and send you a report. We turn the chats into aggregated figures and send you the report on WhatsApp. The raw chats are deleted within 7 days of the scan.

2. The temporary WhatsApp Web connection, and its risk

The Audit connects to your account through a temporary WhatsApp Web session. This is not an official WhatsApp or Meta integration, and it is not provided, approved or supported by WhatsApp or Meta. WhatsApp's terms restrict automated or unofficial access to accounts, so like any unofficial connection it carries a small risk: WhatsApp could log the session out, ask you to verify the number again, or, in rare cases, temporarily or permanently restrict the number.

We keep that risk as low as we can: the session is short, it only reads chats, it never sends a message, changes a setting or contacts anyone, and it is logged out as soon as the pull is complete. But we cannot remove the risk, and we cannot reverse a decision WhatsApp makes about your account.

By ticking the consent box you confirm that you understand this risk and accept it knowingly, and that you are authorised to connect this WhatsApp account and to share its chats with us for the Audit. If the number is critical to your business and you do not want to take this risk, do not connect it: ask us about sending an export file instead (see section 9).

3. What we collect, and what we do not

  • We collect your recent one-to-one chats with customers: the message text, timestamps, whether and when each message was answered, and the phone numbers and profile names of the people in those chats.
  • We do not collect group chats, your contacts list, calls, payment data, or chats older than the period we agree with you. We do not send messages from your account and we never contact your customers.
  • From the request form we also keep the business name, your name, email, mobile number, business type and the time of your consent.

4. How we analyse the chats

  • The chats are processed in a closed environment that is used only for audits. Access is limited to Siach's founder, under the NDA.
  • Before chats are sent to our AI model provider, Anthropic (Claude), we remove phone numbers and customer names wherever we can. Under Anthropic's commercial terms, data sent through its API is not used to train its models.
  • The analysis produces aggregated figures: response times, the share of chats answered late or not at all, enquiries outside your opening hours, where conversations ended without a sale, recurring questions, and estimates of revenue left on the table and of the return of an AI agent.

5. Aggregated insights only

The report shows numbers and patterns, never individual conversations: no customer names, phone numbers or quotes. We do not report on groups so small that a customer could be recognised. The report's money figures are estimates, explained in the report, not a promise of results.

6. How long we keep data

  • Within 7 days of the scan: the raw chats and every working copy are deleted.
  • The aggregated report: kept for as long as it is useful to you and for up to 24 months, unless you ask us to delete it sooner.
  • Your form details: kept for up to 24 months after our last contact, unless you become a customer.

7. Confidentiality

We sign an NDA with your business before the scan. We never sell your data, never use your chats to train AI models, never use them for advertising, and never contact the customers who appear in them. We share data only with the service providers listed in our Privacy Policy, and only to run the Audit.

8. Your customers' privacy

The chats belong to your business. For the Audit, your business is the controller of the chats and Siach processes them on your behalf and on your instructions, as described in our Privacy Policy. You are responsible for being allowed to share them with us for this purpose. Because we keep the raw chats for at most 7 days and report only aggregated figures, the impact on your customers is kept to a minimum.

9. Your right to withdraw, and the alternative

  • Before the scan: tell us and we cancel the Audit and delete your form details. Nothing is connected until you scan the code yourself.
  • During the scan: you can end the session at any moment from your phone: open WhatsApp, go to Linked devices and log out of the session.
  • After the scan: email [email protected] and we delete the raw chats immediately if they are still held, and the report and your form details if you ask. See Data deletion.
  • Prefer not to connect? Ask us about sending an export file of selected chats instead. The analysis, the NDA and the 7-day deletion apply in the same way.

Withdrawing your consent does not affect processing that already took place.

10. Contact

For any question about the Audit or your data, contact us:

Business
Siach
Country
Israel
Email
[email protected]