This Privacy Policy explains how BotLink ("BotLink", "we", "us") collects, uses, and protects information when you use our WhatsApp AI assistant platform available at bot-link.com (the "Service"), in accordance with the Israeli Protection of Privacy Law, 5741-1981, including Amendment No. 13 which entered into force in August 2025. By using the Service you agree to this policy.
BotLink provides businesses with an AI-powered assistant that answers customer messages on WhatsApp, captures leads, schedules appointments, and manages orders and property listings. Our customers ("Business Owners") connect their own accounts and configure their own bots. In relation to end-customer conversation data, the Business Owner is the owner/controller of the database and BotLink acts as a processor on their behalf.
The collection and processing of information is carried out with your consent and/or as necessary to provide the Service you requested and/or to comply with legal obligations, in accordance with the Protection of Privacy Law, 5741-1981 (including Amendment No. 13). Providing information depends on your free will, but without some of it we will not be able to provide the Service.
The following section is provided in English as required for Google API verification.
If a Business Owner chooses to connect their Google Calendar, BotLink requests access to the Google Calendar events scope (https://www.googleapis.com/auth/calendar.events) and the owner's email address, solely to:
BotLink's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to others except as needed to provide the calendar feature, comply with law, or as part of a business transfer. We only access the specific events BotLink creates on your behalf.
Limited Use & AI/ML: BotLink does not use, transfer, or sell Google user data to develop, improve, or train generalized or foundational artificial-intelligence or machine-learning models. Google Calendar data is used solely to create, update, and delete the user's own booking events as described above. Our AI features operate only on the business's own WhatsApp conversation content, never on data obtained from Google APIs.
Connecting Google Calendar is optional. You can disconnect at any time from BotLink Settings, or revoke access at myaccount.google.com/permissions. Disconnecting stops future sync and removes our stored access token.
When a customer sends a voice note to a bot, the audio may be transcribed to text by OpenAI (speech-to-text) so the assistant can understand and respond. The audio and transcript are stored as part of the conversation history so the Business Owner can review it. If the Business Owner enables voice replies, short bot replies may also be converted to speech (text-to-speech via OpenAI) and sent as WhatsApp voice notes.
The website may use cookies and measurement tools (such as Google Analytics) to operate the site, analyze usage, and improve the experience. You can block or delete cookies through your browser settings, but this may affect some functionality.
We do not sell personal data. We share data only with service providers that help us run the Service, under appropriate confidentiality and data-protection terms, including:
Message content processed by OpenAI may be processed outside Israel (for example in the United States). See section 14 on international transfers.
If a Business Owner connects a CRM or registers a webhook (including via BotLink Connect), BotLink sends the event types the owner enables — for example new leads, lead updates, messages, hot-lead alerts, handoffs, bookings, or orders — to the destination URL they configure. That destination is chosen and controlled by the Business Owner. Disconnecting the integration or disabling events stops future delivery. The Business Owner is responsible for how that third party handles the data.
Marketing content ("advertising material") will only be sent after we receive your consent, in accordance with Section 30A of the Communications (Telecommunications and Broadcasting) Law, 5742-1982. Every message will include a simple opt-out option, and removal requests will be honored.
We keep personal and conversation data for as long as your account is active or as needed to provide the Service, or as required by law, after which we delete or anonymize it. Voice recordings are retained for up to 12 months. Data processed on behalf of a customer is handled according to their instructions and for the duration of the engagement.
We use industry-standard measures to protect data, including encryption in transit, encryption of sensitive credentials at rest (including WhatsApp session material and API tokens), hashed passwords, and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.
In accordance with the law, you have the right to review the data held about you, to request correction of inaccurate, incomplete or outdated data, to request deletion (subject to legal exceptions), and to withdraw consent to marketing at any time. To exercise these rights, contact us at the address below. End customers of a Business Owner should contact that business first for requests about their conversation data; BotLink will assist the Business Owner as processor.
Some infrastructure and AI providers may store or process information outside Israel (including the United States). For any such transfer we act in accordance with the provisions of Israeli law regarding the transfer of information outside the country's borders.
The Service is intended for businesses and is not directed to minors under 18. We do not knowingly collect data about minors without the consent of a guardian.
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.
Questions or requests about this policy or your data: [email protected].