Privacy Policy

Last updated: November 2, 2026

AI Business Assistant (“the Service”) is a WhatsApp-based automated customer support service operated by Alex Shatsky (“we”, “us”, “our”).

This Privacy Policy explains how personal information is collected, used, processed, retained, and protected when you communicate with the Service.

1. Information we process

When you send a message to the Service on WhatsApp, Meta delivers a webhook to our application. From that webhook, the current application handles:

• Your WhatsApp phone number, for text messages the Service accepts.
• The text of those messages. Text is trimmed and limited in length before it is used.
• The message identifier and timestamp.
• Information you choose to include in the message, such as a product name or a support question.

The current application does not read your WhatsApp profile name. It does not keep earlier messages to reuse as a conversation history. Images and other non-text messages are not sent to the assistant.

Delivery-status notices may arrive in the same webhook. The application counts them. It does not store the status payload.

The webhook is sent by Meta’s servers. The application does not receive your device’s IP address from WhatsApp.

2. How we use information

We process this information to:

• Receive and respond to customer inquiries.
• Provide automated assistance with products and services.
• Understand a request and generate a relevant response.
• Maintain the reliability and security of the Service.
• Prevent the same incoming message from being answered twice.
• Investigate technical problems and comply with applicable legal obligations.

3. Artificial intelligence

The Service uses OpenAI’s API to generate automated responses.

For a text message that the Service answers, the application sends OpenAI the text of that message and a fixed instruction that describes the assistant’s role. It does not send your phone number. It does not send a stored transcript of earlier messages.

The request sets store: false on OpenAI’s Responses API. That setting asks OpenAI not to store the response for later retrieval through the API. It does not, by itself, establish that OpenAI retains no information under any circumstances. This Service does not include a separate zero-retention agreement with OpenAI.

Automated responses may contain inaccuracies and should be verified before you rely on them for a purchase or a technical decision.

4. Service providers

The Service uses:

• Meta Platforms / WhatsApp Business Platform, to receive your message and to send the reply.
• Cloudflare, to host the webhook, to hold a message briefly in a queue, and to store a small processing record described below.
• OpenAI, to generate the reply text.

The reply sent back through WhatsApp includes the reply text and your phone number, because that is how WhatsApp delivers a message to you.

These providers process information under their own terms and policies. We do not use an advertising network, and these legal pages do not set analytics cookies or load third-party tracking scripts.

5. Data retention

The application does not keep a database of conversations.

While a text message is waiting to be answered, or waiting to be retried, Cloudflare Queues holds a job that contains the message identifier, phone number, message text, and timestamp. After the job succeeds, the application acknowledges it so it can be removed. If processing keeps failing, the job can move to a dead-letter queue, which holds the same kind of payload. The application does not set its own retention period for these queues. Cloudflare’s published default is four days on the Workers Paid plan, configurable up to 14 days, and 24 hours on the Workers Free plan.

To avoid answering the same message twice, the application stores a processing state (“in progress” or “done”) and a time, under that message’s identifier. That record does not include the message text or the phone number. The application does not set an expiry, so the record remains until it is deleted.

The software contains a helper that can store a message identifier, not the message content, for seven days. The current webhook path does not call that helper. A key written by an earlier version would expire seven days after it was written.

Application log lines are written without message text and without phone numbers. The hosting platform also keeps its own request and security logs. We do not control how long those providers keep them, and this policy does not claim that a platform trace is empty of every technical detail.

6. Security

We use HTTPS, webhook signature verification, and restricted credentials. Application logs are written so that message text and phone numbers are not fields in those log lines.

No internet service can guarantee absolute security.

7. Your choices and rights

Depending on applicable law, you may request access to, correction of, or deletion of your personal information, or object to certain processing.

You may stop messaging the Service at any time. Instructions for a deletion request are on the data deletion page.

8. Data deletion

To request deletion of personal information processed by the Service, email alexandr.shatsky@gmail.com.

We may ask for enough information to see that the request is about your own data. There is no index from a phone number to stored message text, because the application does not keep that archive. Records that only mark a message identifier as processed cannot be found from a phone number alone.

We will assess the request and respond in accordance with applicable law. Some information may remain with Meta, OpenAI, or Cloudflare for their own retention periods, or where the law requires us to keep it.

9. Children’s privacy

The Service is for general customer inquiries and is not directed at children. We do not intentionally solicit personal information from children.

10. Changes to this policy

We may update this Privacy Policy when the Service, the law, or our data practices change. The date at the top of this page will change when we do.

11. Contact

Operator: Alex Shatsky

Email: alexandr.shatsky@gmail.com

Country: Israel