Privacy Policy

Scope

This policy is designed to cover Assistyca’s current family assistant, its web pages and its WhatsApp messaging workflows as of October 13, 2026. It is reviewed at least annually and whenever material product, legal, or processing changes require an update.

Assistyca is generally a controller for the account, billing, security, support, and website administration data it holds, and a service provider / processor for the content a family chooses to share with it: the messages it exchanges with you, the household details you tell it, and the mail and calendar data you connect. If you are a family member whose information was shared with Assistyca by the account holder, you may direct privacy requests to us directly or to the account holder.

Unless Assistyca expressly agrees otherwise in writing, the service is not intended for child-directed products or for regulated workloads that require sector-specific compliance frameworks such as HIPAA, GLBA, or similar regimes.

Information We Collect

Depending on how the service is used, we may collect the following categories of personal information:

• Identifiers and contact details, such as name, email address, phone number, and account identifiers.
• Household and configuration data, such as the family members and weekly activities you tell the assistant about, connection settings, and onboarding information.
• Communications content and metadata, such as messages, approval drafts, timestamps, sender details, and delivery or status data.
• Technical and device data, such as IP address, browser type, device signals, error logs, and security events.
• Transaction and service records, such as support history, authentication events, and billing or usage records.
• Integration data from third-party platforms, including Meta or WhatsApp related identifiers, webhook events, and account-linked information.
• Sensitive information only if a user chooses to submit it or an integration transmits it; the service is not designed to invite unnecessary sensitive data.

Where it comes from

• Directly from you when you sign in, contact us, configure integrations, or use the service.
• From the account holder who invites other family members onto the account or shares details about them.
• From connected third-party services such as Meta, WhatsApp, email delivery providers, and infrastructure providers.
• Automatically from browsers, devices, and server interactions through logs and security monitoring.
• From publicly available or lawfully obtained sources where needed for business verification, compliance, or fraud prevention.

How We Use Information

We use personal information for specific business and operational purposes, including to:

• Provide, authenticate, maintain, secure, and improve the Assistyca service.
• Process messaging, approvals, support workflows, and AI-assisted drafting features requested by users.
• Operate connected integrations, including Meta or WhatsApp related setup, testing, and message routing.
• Prevent abuse, investigate incidents, debug errors, enforce agreements, and protect rights and safety.
• Comply with legal obligations, respond to lawful requests, and keep required records.
• Create aggregated or de-identified insights that do not reasonably identify a person.

Legal Bases for Processing

Where applicable under laws such as the GDPR or UK GDPR, our legal bases may include:

• Performance of a contract with our customers.
• Our legitimate interests in operating, securing, and improving the service.
• Compliance with legal obligations.
• Consent, where consent is the appropriate basis.

Sharing of Information

We disclose personal information only as reasonably necessary for the purposes described above, including to the following categories of recipients:

• Hosting, infrastructure, storage, and security providers.
• Email, notification, and communications providers.
• Messaging and platform partners, including Meta and WhatsApp related services.
• AI and automation technology providers that process instructions on our behalf.
• Professional advisers, auditors, insurers, and counterparties involved in corporate transactions.
• Government authorities or other parties when required by law or necessary to protect rights, safety, or the service.

We may also disclose information in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction, subject to applicable confidentiality and legal requirements.

Sales, sharing, and sensitive information

As of July 7, 2026, Assistyca does not sell personal information for money and does not share personal information for cross-context behavioral advertising as those concepts are used in California privacy law.

If we process sensitive personal information, we do so only as reasonably necessary to provide the requested service, maintain security, comply with law, or for other permitted purposes. We do not intentionally use sensitive personal information to infer characteristics about people unless clearly disclosed and legally permitted.

Because Assistyca does not currently sell or share personal information for cross-context behavioral advertising, a “Do Not Sell or Share My Personal Information” link is not currently provided. If that practice changes, this notice and any required request mechanisms will be updated.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including service delivery, security, dispute resolution, recordkeeping, and compliance.

Retention periods vary by category. For example, account data may be kept while an account remains active, security and audit records may be retained longer for abuse prevention and legal compliance, and some information may be kept in backups or archived systems for a limited additional period.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These measures may include access controls, authentication safeguards, limited internal access, vendor controls, transport security, logging, and monitoring.

No method of transmission or storage is completely secure. If we become aware of a personal data breach, we will investigate, mitigate, and provide notifications where required by applicable law.

Cookies and Similar Technologies

Assistyca and its providers may use server logs, session technologies, local storage, or similar technical mechanisms to support sign-in, security, preferences, fraud prevention, and service functionality.

If we introduce non-essential cookies or similar tracking technologies in a way that requires additional notice or choice under applicable law, we will provide that notice or choice at the relevant time.

International Transfers

Personal information may be processed in the United States and other countries where Assistyca or its service providers operate. Where applicable law requires safeguards for cross-border transfers, we rely on appropriate measures such as contractual protections, vendor commitments, and related legal transfer mechanisms.

Your Rights

Depending on your location and the context in which Assistyca processes your information, you may have rights that include:

Access / right to know

Request details about the personal information we hold and how we use or disclose it.

Correction / rectification

Request correction of inaccurate or incomplete personal information.

Deletion / erasure

Request deletion of personal information, subject to legal or operational exceptions.

Restriction / objection

Request limited processing or object to certain processing, including some marketing or legitimate-interest uses.

Portability

Request a copy of certain information in a portable format where required by law.

Withdraw consent

Withdraw consent for processing that relies on consent, without affecting prior lawful processing.

California-specific requests

Request to know, delete, correct, and if applicable opt out of sale or sharing and limit certain sensitive-information uses.

Non-discrimination

Not be unlawfully discriminated against for exercising privacy rights.

Automated decision safeguards

Request human review or more information if legally significant automated decision-making applies.

Complaint rights

Lodge a complaint with a regulator or data protection authority where applicable.

We may need to verify identity and authority before responding. Some rights are subject to legal exceptions. Where the information was shared with us by the account holder about another member of the household, we may also involve the account holder in resolving the request.

How to submit a request

To submit an access, correction, deletion, objection, portability, or privacy complaint request, email nimrod.shai@gmail.com with enough detail for us to understand and verify the request.

Where permitted by law, authorized agents may submit requests on someone else’s behalf. We may ask for proof of authority and identity verification before responding.

If you are contacting us about a Meta, WhatsApp, or portal data deletion issue, please include the app, account, and workspace details so we can route the request appropriately.

If we deny a request that is subject to an appeal right under applicable law, you may reply to our response and request that we review the decision again.

Automated Tools and AI Features

Assistyca may use automation and AI-assisted tools to help draft responses, summarize communications, classify workflows, and improve service operations. These features are intended to assist users, not to replace their own judgment where human review is appropriate.

Assistyca does not intentionally use solely automated decision-making that produces legal or similarly significant effects on an individual without the safeguards required by applicable law.

Account Holder Responsibilities

The account is a family's, and the account holder usually tells the assistant about other people: a partner, children, grandparents, the people who drive to and from activities. By sharing their details you confirm that you are entitled to do so, and that anyone you invite onto the account from their own phone has agreed to join it.

Anyone who joined the account can ask to leave it, and the account holder can remove a member or delete the whole account from the chat at any time.

Children's Privacy and Regulated Data

Assistyca is used by parents and guardians, not by children: it is not directed to children under 13 and children do not hold accounts. A parent may tell the assistant a child's name, age or birthday and the activities of their week so that pickups and drop-offs can be kept; that information is held for the family that gave it, is never used for advertising, and is deleted with the account.

Unless expressly agreed otherwise in writing, users should avoid submitting highly regulated information such as medical records, payment card data, government-issued identifiers, or similarly sensitive data that is not necessary for the service.

Changes to This Policy

We may update this Privacy Policy from time to time. Material updates will be reflected by revising the date on this page. We intend to review this policy at least annually so it stays aligned with product and legal changes.

Contact

If you have questions about this Privacy Policy or privacy-related requests, contact nimrod.shai@gmail.com.

If you are located in a jurisdiction that provides complaint rights, you may also contact your local privacy or data protection regulator.