מדיניות פרטיות — MyAgnt

MyAgnt ("we", "the Service") is an AI employee-team service for small businesses, operating primarily over WhatsApp. Operated by Carolina Erijman. Contact: Flowmart.co@gmail.com. Website: myagnt.io. This policy applies to subscribing business owners ("Owner") and to their customers who message the business on WhatsApp ("Customer"). The Hebrew version above is the binding version; this English version is provided for convenience and for Google's review.

1. Data we process

• WhatsApp messages — conversation content between a Customer and the business, received via Meta's WhatsApp Business Platform.
• Contact details — name, phone number, and details a Customer shares in conversation for the purpose of the service.
• Appointments — times, duration, status, linked to the business and Customer.
• Owner business data — business settings, working hours, services and prices, as provided by the Owner.
• Google Calendar data — only if the Owner connects a Google Calendar (see Section 5).

We do not collect data for advertising and do not scan data that is not needed to operate the Service.

2. Purposes

Providing the Service itself (replying to Customers on WhatsApp on the business's behalf, scheduling and reminding about appointments, day-to-day business assistance as configured by the Owner); service memory (remembering relevant facts from conversations to serve Customers better); security, abuse prevention, and legal obligations. We do not sell personal data and do not use it for third-party advertising.

3. AI processing

The Service uses Anthropic's language models via their commercial API to understand messages and draft replies. Under Anthropic's commercial terms, API inputs and outputs are not used to train Anthropic's models by default. We do not train models on your data, and data obtained from Google is not used to train or improve any artificial-intelligence models.

4. Retention

• Memory facts derived from end-customer conversations (e.g., a stated preference): retained up to approximately 90 days, then expire automatically.
• Owner configuration and business data: retained while the account is active.
• Appointments and message history: retained while the account is active, as the business's operational records.
• On account closure or upon request, data is deleted except where retention is legally required.

5. Google Calendar data — what we access, use, store, and share

If an Owner chooses to connect their Google Calendar (explicit consent via Google's OAuth screen):

• What we read: the Owner's calendar list (so they can choose which calendar(s) to connect), free/busy times, and event times — solely to compute real availability before booking an appointment.
• What we write: appointment events created by the Service, into the single calendar the Owner designated. By default an event contains minimal content: the service name + the Customer's first name only. No phone number, no last name, no conversation content. The Owner may choose a more private level ("busy" only) or, with explicit informed opt-in, a more detailed one.
• What is never sent to the calendar: conversation content, internal notes, or contact details beyond the Owner's configured level.
• Storage: we store a sync copy of busy/free times and event times to compute availability, and encrypted access tokens. Disconnecting stops the sync; the Owner can also revoke access at any time via Google security settings.
• Sharing: Google user data is not transferred to any third party except as necessary to provide or improve the Service's user-facing features, to comply with applicable law, or as part of a merger/acquisition with prior notice — and never to advertisers or data brokers.

Limited Use disclosure: MyAgnt's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Sharing — processors

We share personal data only with the sub-processors that operate the Service:

Each is contractually bound to data protection. Beyond that, only where required by law.

7. Security

Per-business data isolation at the database level (each business can only access its own data), encrypted transport (HTTPS/TLS), and encrypted storage of access tokens. No system is perfectly secure, but we follow industry-standard practices.

8. Your rights

Under Israel's Protection of Privacy Law, 5741-1981 (as amended), you may access data held about you, request correction of inaccurate data, and request deletion. Customers may contact us directly or through the business that served them. Contact: Flowmart.co@gmail.com.

9. Changes

We will update this page upon any material change; the "Last updated" date will reflect it.