Privacy Policy — Mikyab Bot

Last updated: 27 July 2026

General

• This Privacy Policy ("Policy") describes how Asaf Lecht ("operator", "we", "us") collects, uses, stores, and shares information in connection with the Mikyab WhatsApp bot ("bot", "service") — an automated question-and-answer service that answers questions based on the writings and teachings of Rabbi Michael Abraham, delivered over WhatsApp.
• By sending a message to the bot, you ("user", "you") represent that you have read, understood, and agree to this Policy. If you do not agree, do not use the bot.
• This Policy forms an integral part of the bot's Terms of Use. Section titles are for convenience only.
• The bot is an independent service and is not affiliated with, endorsed by, or operated by Meta Platforms, WhatsApp, Google, or Rabbi Michael Abraham.

Definitions

• The bot / service — the Mikyab automated WhatsApp Q&A service operated by the operator.
• User / you — any person who sends a message to the bot.
• Message — any content (a question, reply, reaction, or button tap) sent by the user to the bot, and any answer sent by the bot to the user.
• Operator — Asaf Lecht.

Information We Collect

When you use the bot, we collect and store:

• Message content — the text of the questions you send and the answers (with source citations) the bot returns.
• Identifiers — your WhatsApp identifier (phone number / wa_id) as provided by WhatsApp/Kapso, used to route replies to you.
• Interaction metadata — timestamps, message identifiers, conversation state, feedback you give via the bot's buttons (e.g. whether an answer was accurate), and technical outcome (delivered, failed, retried).

We do not deliberately collect special-category or sensitive personal data. Please do not send sensitive personal information to the bot.

How We Use the Information

We use the information solely to:

• Provide the service — receive your question, generate an answer from the source corpus, and reply.
• Maintain, secure, and improve the service and the quality and accuracy of its answers.
• Diagnose errors, prevent abuse and misuse, and protect our rights.

We do not sell your information and do not use it for third-party advertising.

Sharing With Third Parties (Data Processors)

To provide the service, your message passes through service providers acting on our behalf:

• Meta Platforms / WhatsApp — the messaging channel over which the bot operates.
• Kapso — the WhatsApp Cloud API provider that relays messages between WhatsApp and the bot.
• Google (NotebookLM) — processes your question against the source corpus to generate an answer.

Each processor handles the data under its own terms and privacy policy. Kapso acts as our data processor and processes your messages on our instructions; Meta/WhatsApp and Google are further providers in that chain. Some processing occurs on servers located outside Israel (primarily the United States), under recognized transfer mechanisms — such as Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework — as relied upon by those providers. We do not otherwise transfer your information to third parties except where required by law, to prevent misuse, or to protect our rights.

Data Retention

We retain message content, identifiers, and interaction metadata for as long as the service is active. Upon your deletion request, or upon termination of the service, we delete the data relating to you within 30–90 days, except where longer retention is legally required (e.g. legal compliance or dispute resolution). This is consistent with our processor Kapso, which stores the WhatsApp Messages while the account is active and deletes them within a comparable window (approximately 30–90 days) after account termination.

Our legal basis for processing your information is your consent, given by using the bot.

Data Security

We apply reasonable technical and organizational measures to protect the information (restricted access; storage limited to personnel who need it to run the service). No transmission or storage method is completely secure, and we cannot guarantee absolute security.

Your Rights (Protection of Privacy Law, 5741-1981)

• You may request to review the information we hold about you.
• You may request that we correct or delete your information.
• Upon a deletion request we will delete the entries relating to you, except records we are required or permitted to retain (e.g. the deletion request itself, and aggregate/anonymized statistics).
• To exercise these rights, contact us at [email protected].

Minors

The service is not intended for children under the age of 16, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Policy from time to time at our discretion. The current version will be published at https://mikyab.net/, and continued use of the bot after an update constitutes acceptance of it.

Governing Law

This Policy, and any dispute arising from it, shall be governed solely by the laws of the State of Israel and adjudicated exclusively before the competent courts of the State of Israel. If any provision is held void or invalid, it shall be severed without affecting the remaining provisions.

Contact

For any privacy question or to exercise your rights: [email protected] — operator: Asaf Lecht.