Galant
Back to home

Privacy Policy

Last updated: October 2026

This is an English translation of our Hebrew privacy policy, which is the primary version.

1. Who we are

Galant is a business of Eliya Ovadia (exempt dealer, "osek patur") that builds and runs Hebrew WhatsApp bots for small businesses such as clinics and therapists. Contact: [email protected].

This policy applies to: (a) the website galant.co.il and enquiries sent to us; (b) the bot service we run for businesses.

This policy was written in line with the Israeli Privacy Protection Law, 5741-1981, as amended by Amendment No. 13 (in force from 14.8.2025), and the Privacy Protection (Data Security) Regulations, 5777-2017.

2. Who is responsible for your information

  • On the website and for enquiries businesses send us: Galant is the database controller.
  • In the bot service: the business you are messaging (for example the clinic or therapist) is the controller of the information, and Galant is a "holder" that processes the information on its behalf and according to its instructions. Questions and requests about this information are best sent to the business first. If you contact us, we will pass the request to the business and help it handle it.

3. What information is collected

On the website and in enquiries to us:

  • Details you give us by form, email or WhatsApp: name, phone, email, business name and the content of your enquiry.
  • Business customers: contact details, billing details and the business information needed to set up the bot.
  • Technical data: IP address, browser type and access times, collected through Cloudflare for security and performance.
  • Cookies: the website uses only necessary cookies and does not use analytics or advertising tools.

In the bot:

  • Name, phone number and the requested appointment time.
  • The content of the messages you send the bot, needed to understand your request and reply.
  • Technical data from WhatsApp, such as message ID, send time and delivery status.

What the bot does not collect: the bot does not ask for medical information, diagnoses, medication, ID numbers or card details. Please do not send such information in the chat. If you send it anyway, the bot will ask you not to go into detail and will refer you to the business directly.

4. Why we use the information

  • Answering enquiries and booking appointments for the business you contacted.
  • Notifying the business owner of a new appointment or enquiry.
  • Operations, security and troubleshooting.
  • On the website: answering enquiries, giving quotes, managing our relationship with business customers, issuing receipts and meeting our legal obligations.

We do not sell information, we do not send marketing messages of our own to people who use the bot, and we do not build profiles.

5. Do you have to give us information

There is no legal obligation to give us information; giving it depends on your wishes and consent. If you do not give a name, phone and requested time, we cannot book an appointment through the bot. You can contact the business directly. If you do not give contact details on the website, we cannot get back to you.

6. Artificial intelligence and automated replies

The bot is an automated system, not a person. Your messages are processed by Anthropic's Claude model to understand your request and write a reply. The bot performs only administrative actions, such as showing free times and booking an appointment, and at any point you can ask for a reply from a person at the business. Under Anthropic's commercial terms, content sent through the API is not used to train models.

7. Who the information is shared with

  • The business you contacted, which receives the appointment details and the conversation.
  • Sub-processors that help us provide the service:
    • Vultr: hosting of the server that runs the bot (n8n). Location: Israel (Tel Aviv).
    • Meta Platforms (WhatsApp Business Cloud API): carrying WhatsApp messages. Location: USA and other countries.
    • Anthropic (Claude API): understanding messages and writing replies. Location: USA.
    • Google (Google Calendar): recording the appointment in the business's calendar. Location: USA and other countries.
    • Cloudflare: DNS, attack protection and secure traffic for the website and server. Location: global network.
  • Competent authorities, only when the law requires it.

Each business's information is kept separately and is not shared with other businesses that use the service.

8. Transfers abroad

Our server is in Tel Aviv, but Meta, Anthropic, Google and Cloudflare also process information outside Israel, mainly in the USA. We transfer information abroad in line with the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and to providers that have committed in their terms to protect the information.

9. How long information is kept

  • Bot conversation history: up to 30 days on Galant's server, then deleted.
  • Appointment details: in the business's calendar, according to the business's policy.
  • Technical logs: up to 30 days.
  • Information held by Meta, Anthropic, Google and Cloudflare: according to their retention policies.
  • Website enquiries: up to 24 months from the last enquiry. Accounting records: for the period tax law requires.
  • When a business stops using the service: we delete its customers' information from our servers within 30 days.

10. Information security

We act in line with the Privacy Protection (Data Security) Regulations, 5777-2017: access to the system is limited to Galant only, two-factor authentication, encryption in transit, security updates, backups and separation between different businesses' information. Businesses that use the service have no access to the system that runs the bot. No security is perfect; if a security incident happens, we will notify the business concerned and act as the law requires.

11. Your rights

  • To see the information about you.
  • To correct information that is wrong, incomplete or out of date.
  • To have it deleted, where the law provides for it.
  • To ask to stop receiving marketing messages, if any were sent.
  • To file a complaint with the Privacy Protection Authority (gov.il).

To use a right: for information in the bot, contact the business or us; for the website, write to [email protected]. We may ask to verify your identity. We will reply within the time the law sets.

12. Minors

The service is meant for adults booking appointments. Booking an appointment for a minor should be done by a parent or guardian.

13. Privacy contact

Privacy enquiries: [email protected].

14. Changes to this policy

We will update this policy from time to time. Material changes will be published on the website, and business customers will be notified by email.

15. Contact

Galant, Eliya Ovadia, exempt dealer. Email: [email protected]. Website: galant.co.il.