Privacy Policy

This Privacy Policy explains how Roman Manilov, an Israeli exempt dealer (Osek Patur) based in Netanya, Israel — operating as Autias (“Autias”, “we”, “us”) — collects, uses, stores, and protects personal data when you visit autias.com (the “Site”) or use our AI agent, WhatsApp Business automation, and CRM integration services (the “Services”).

1. What data we collect

a) Site visitors and leads

• Contact form data: name, email, phone number (with country code), company name, and the message you send us.
• Website AI assistant chats: the messages you exchange with the assistant on our Site.
• Instant demo (“Try your AI”): the business niche you select and the messages you type into the self-serve demo. The demo is anonymous (no sign-up) and keyed to a random session identifier; please avoid entering real personal data, as your input is sent to our AI provider to generate the example reply.
• Technical and analytics data: IP address, device and browser information, pages viewed, and advertising/analytics identifiers collected via cookies and similar technologies, including the Meta Pixel and the Meta Conversions API (see Section 6).

b) Business clients

• Account and billing contact details, contractual information, and the business information you provide so we can configure your AI agent (services, prices, FAQs, business rules).
• Access credentials and tokens you grant for systems we integrate on your behalf (e.g., Meta Business assets, CRM, calendar). Credentials are stored in a dedicated secret manager, never in plain text.

c) End Users (our clients’ customers) — processed on the client’s behalf

• WhatsApp phone number, profile name, message content, and message metadata (timestamps, delivery status) needed to operate the client’s AI agent, take bookings, and record leads in the client’s CRM.
• We do not use End User data for our own marketing, do not sell it, and do not combine it across different clients.

2. Why we process it (purposes and legal bases)

3. AI processing — disclosed plainly

Our Services use large language models to generate responses. Conversation content (Site assistant chats and, for deployed agents, End User messages) is sent to our AI infrastructure provider(s) — Anthropic (Claude) and Cloudflare — strictly to generate the reply and operate the agent. We configure agents with a narrow business scope, they identify themselves as assistants, and they always provide a path to a human. We do not permit our providers to use this data to train their general models where such controls are available, and we apply data minimisation throughout.

4. Where data is stored and for how long

• Infrastructure: our application data is stored with Cloudflare (databases and object storage), encrypted at rest. Message delivery runs on Meta’s WhatsApp Business Platform (Cloud API).
• Conversation logs of deployed agents: retained for up to 90 days for quality supervision, support, and client reporting, then deleted or anonymised into aggregate statistics, unless the client instructs otherwise or law requires longer retention.
• Instant demo sessions: ephemeral. The session is held only in temporary cache and auto-expires within about 24 hours; it is never written to our CRM and is not used for marketing. Rate-limiting counters tied to your IP are kept for up to 24 hours for abuse prevention.
• Lead and client records: kept for the duration of our relationship and as required by Israeli tax and accounting law.
• Media files of End Users (e.g., photos) are not stored by default.
• Data may be processed outside Israel (e.g., EU/US data centres of our sub-processors) with appropriate safeguards.

5. Who we share data with (sub-processors)

We share data with these providers only as needed to deliver the Services, under their respective data-protection terms. We do not sell personal data.

6. Cookies and the Meta Pixel

The Site uses cookies and the Meta Pixel / Conversions API to understand Site usage and measure our advertising on Facebook and Instagram. You can control cookies in your browser settings; opting out of advertising cookies does not affect use of the Site. For Meta’s own processing see Meta’s Privacy Policy.

7. Your rights

Under the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13) and, where applicable, the EU/UK GDPR, you may request: access to your data, correction, deletion, restriction or objection to processing, and withdrawal of consent. To exercise these rights, email privacy@autias.com or see our Data Deletion Instructions. We respond within 30 days. If you are an End User of a business that uses Autias, we will assist that business in fulfilling your request and forward it to them where they are the controller.

8. Security

We apply data minimisation, encryption at rest and in transit, secret management for credentials, access on a need-to-know basis, webhook signature verification, and audit logging. No system is perfectly secure; if a breach affecting your data occurs, we will act in accordance with applicable law, including notification duties under Amendment 13 where they apply.

9. Children

The Site and Services are intended for businesses and persons aged 18+. We do not knowingly collect data from children.

10. Changes

We may update this Policy. The “Last updated” date above reflects the current version; material changes will be highlighted on this page.

11. Contact

Roman Manilov (Autias) · Netanya, Israel · privacy@autias.com