Privacy Policy
This Privacy Policy explains how Safyi AI Solutions — the trading name of שארבל סאפיה יעוץ ארגוני, a registered business in Israel ("Safyi", "we", "us") — collects, uses, and protects personal data when you visit our website, contact us, or use our services.
1. Who we are
Safyi AI Solutions provides AI-powered social media management, AI messaging assistants on channels such as WhatsApp, and related business-growth services. For the purposes of applicable data-protection law, we act as a data controller for data we collect directly (for example, when you contact us), and as a data processor for data we handle on behalf of our clients when delivering services to them.
2. Information we collect
- Contact information you provide — such as your name, email address, company, and the content of your messages when you get in touch.
- Client and account information needed to deliver our services — including brand details, content, and the social media accounts or pages you ask us to manage.
- Social platform data accessed through official platform APIs (for example LinkedIn, Meta/Facebook & Instagram, X) when you authorize us to connect an account — limited to what is required to publish and manage content on your behalf.
- Messaging data where a client asks us to run an assistant on a messaging channel such as WhatsApp — the messages exchanged with that business, and the sender's phone number and profile name. See section 5.
- Website usage data — basic, privacy-respecting technical information (such as approximate location and pages viewed) used to keep the site working and secure.
3. How we use information
- To provide, operate, and improve our services, including planning, creating, scheduling, and publishing social media content.
- To communicate with you, respond to enquiries, and provide support.
- To connect to third-party platforms you have explicitly authorized, and to act within the permissions you grant.
- To read incoming messages and generate replies on a client's behalf, where the client has asked us to run a messaging assistant.
- To meet legal, accounting, and security obligations.
4. Social media platform access
When you connect a social media account, you provide informed consent through that platform's official authorization (OAuth), after being shown the specific permissions requested. We request only the permissions needed to manage and publish content on your behalf. We do not post without your approval, and we do not access data unrelated to the service.
Withdrawing consent. You can withdraw your consent at any time by disconnecting our application in the relevant platform's own settings (for LinkedIn: Settings & Privacy → Data privacy → Other applications / Permitted services), or by contacting us. Withdrawing consent stops any further access. Our use of information received from platform APIs adheres to each platform's developer terms, policies, and data-retention requirements.
5. WhatsApp and messaging assistants
Some clients ask us to run an AI assistant on their business WhatsApp number, through Meta's official WhatsApp Business Platform. Where we do, we receive and process the messages their customers send to that number.
What we process. The sender's WhatsApp phone number and profile name, the content and timestamps of messages exchanged with the business, and message delivery status. We retain conversation history so the assistant has context within a conversation and so the business's own staff can read the thread and take over from the assistant at any point.
AI processing. To generate a reply, message content is sent to a third-party AI provider — currently OpenAI, in the United States. It is used to answer that conversation and nothing else. We do not use message content to train AI models, and OpenAI states that data submitted through its API is not used to train its models by default.
Who controls this data. For these conversations the business you messaged is the data controller and Safyi acts as its processor: we handle messages on that business's instructions, for that business alone, and never share one client's conversations with another.
Meta's role, and encryption. Messages travel through Meta's WhatsApp Business Platform and are also processed by Meta under its own terms and privacy policy. Note that when a business chooses to receive messages through the Business Platform, WhatsApp's end-to-end encryption does not protect those messages from the business — the business, and we as its processor, can read them.
If you messaged a business that uses us. You are dealing with that business, not with Safyi, but an assistant we operate may be writing the replies. You can ask for a person at any time and a human at the business can take over the conversation. To access or delete your messages, contact that business directly, or email us at sharbel@safyiaisolutions.com and we will act on the business's instruction. You can also block the number in WhatsApp at any time to stop receiving messages.
Outbound messages. Businesses may send you messages outside an active conversation only using message templates approved by Meta, and only where they have a lawful basis to contact you. We do not send unsolicited marketing on our own behalf.
6. Legal bases for processing
Where applicable, we process personal data on the basis of your consent, the performance of a contract with you, our legitimate interests in operating and improving our services, and compliance with legal obligations.
7. Sharing and disclosure
We do not sell your personal data. We share it only with: (a) service providers and infrastructure partners that help us operate, under appropriate confidentiality obligations; (b) the social media and messaging platforms you authorize; and (c) authorities where required by law.
The main providers we rely on are OpenAI (United States) to generate assistant replies, Convex (United States) for application hosting and data storage, and Meta Platforms for the WhatsApp Business Platform and the social platforms you connect. This list may change as our stack does; we will keep it current here.
8. Data retention and deletion
We keep personal data only as long as needed for the purposes described here or as required by law, and then delete or anonymize it. We handle data obtained through platform APIs in line with each platform's data-retention requirements.
Conversations. Messaging history is retained for as long as the business remains our client, so that its staff can refer back to it. It is deleted when the engagement ends, or sooner on that business's instruction.
Your right to deletion. You may request deletion of the personal data we hold about you at any time by emailing sharbel@safyiaisolutions.com. We will promptly delete content and data collected through a platform's API on your behalf upon your request, when you withdraw your authorization, or when you close your account with us — except where we are required by law to retain it.
9. Security
We use appropriate technical and organizational measures to protect personal data, including access controls, encryption in transit, and the principle of least privilege for platform access.
10. Your rights
Subject to applicable law, you may have the right to access, correct, delete, or restrict the processing of your personal data, to object to processing, and to data portability. To exercise any of these, contact us at the address below.
11. International transfers
We are based in Israel and process data using service providers located in other countries, including the United States (see section 7). Where data is transferred internationally, we take steps to ensure it remains protected in line with this policy.
12. Children
Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect their personal data.
13. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
14. Contact us
For any privacy question or request, contact us at sharbel@safyiaisolutions.com.