Privacy Policy

Who we are

Yonatan HQ is an operations platform operated by Yonatan Gross, a sole proprietor (Osek Murshe) registered in Israel. For data we hold about our own customers and contacts, we act as the data controller. When we process messages on behalf of a business client that uses our platform to reach its customers (our "Tech Provider" role), we act as a processor for that client, who is the controller of its customers' data.

Information we collect

We collect only what we need to operate communications and provide our services:

• Contact details — name, WhatsApp / phone number, and email address.
• Message content — the messages you exchange with us or with a business that uses our platform, including any media you send.
• Service details — order, appointment, scheduling, and support information related to the conversation.
• Technical data — limited delivery and diagnostic metadata (e.g. message timestamps and delivery status) used to operate the service.

How we use information

We use personal data to:

• Send and receive WhatsApp and email messages — order/appointment confirmations, scheduling, support replies, and service notifications.
• Route inbound messages to the right operator or automation and maintain conversation history so we can provide continuous support.
• Operate, secure, and improve the service, and comply with our legal obligations.

Messaging channels and processors

We send and receive WhatsApp messages through the Meta WhatsApp Business Platform (Cloud API), and transactional email through Resend. These providers process message data on our behalf as our service providers, under their own terms and privacy policies. We share personal data with such processors only as needed to deliver the service.

How we store and protect data

Message and contact data is stored in our own PostgreSQL database, used solely to operate your conversation and provide our services. Access credentials and secrets are kept in a dedicated secrets manager and are never stored in our source code. We restrict access to authorized operators only.

Sharing and disclosure

We do not sell, rent, or trade personal data, and we do not share it for third-party advertising. We disclose personal data only to: (a) the service providers (processors) described above; (b) the business client on whose behalf you contacted us, where applicable; and (c) authorities where required by law.

Data retention

We keep personal data only as long as needed to operate the conversation and provide our services, and to meet legal obligations — for example, records required by Israeli tax law are retained for the period the law requires. When data is no longer needed, we delete or anonymize it.

Your rights and choices

You can ask us to access, correct, or delete the personal data we hold about you, and you can opt out of non-essential messages at any time by replying to a message or contacting us. To request deletion, see our Data Deletion page or email hello@yonyon.ai.

Children

Our services are intended for businesses and adults. We do not knowingly collect personal data from children.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above.

Governing law

This Privacy Policy is governed by the laws of Israel.