September 2025
Welcome to our website, www.saywhatt.com, that provides content and information about Saywhatt’s software-as-a-service (SaaS) generative AI live chat system, and allows you to schedule a demo to examine our service (the “Website”).
This Privacy Policy (“Policy”) explains how information about you is collected and used by the us and the Website, which is developed and operated by Saywhatt Online Ltd. (“Saywhatt” or “we”, “us”, “our”). It does not apply to our processing on your behalf (as our business client) and does not apply to your website visitors data when providing the Saywhatt’s SaaS solution on your website (if applicable), which is covered by our Data Processing Addendum with such client, the privacy policy available via the Service on the client website and the client own privacy policy.
The Website is not directed at users under the age of 18. We do not knowingly collect information or data from children under the age of 18 or knowingly allow minors under the age of 18 to use the Website. You have the right to review the personal information we collect and use about you and the right to request correction of your personal information. To exercise these rights, please contact us at support@saywhatt.com.
This Policy may be amended from time to time. We will post any change to this Policy on our Website at a reasonable time in advance of the effective date of the change, and we will also make efforts to proactively notify you by email of the changes if we have your email address.
If you have any questions, comments or concerns regarding this Policy or our processing of your personal information, please contact us at support@saywhatt.com.
Scenario
Purposes
Categories of information processed
Subscribing to our newsletters
Providing you with the newsletter you requested, such as product updates newsletters, information about new features, improvements, or relevant product-related announcements.
Email address, full name.
Scanning your website content when you book a demo
Providing you with the functionality of the Website you requested, updates, contacting you regarding administrative issues related to the Website or the demo, this Policy, our Website Terms of Use, support and maintenance
Email address, full name, your website content, including assets, images, videos, texts, code and links.
When you use or subscribe to our service
Providing you with the functionality you requested, such access to use the service.Please note that even if you unsubscribe from receiving marketing newsletters, we may still send you operational or transactional communications.
Full name, email address, password, username, ID number / other unique identifier and the name of your organization and position. We will also collect your financial or payment information status - We will not directly collect your full payment information (such as your full credit card number) – this information will be collected through a third-party service provider.
Contacting us with an inquiry through our email and our online contact form, booking a demo
Responding to your inquiry, our business development.
Your Email address, full name, the name of your organization, position, the subject of your inquiry and the text of your message.
When you provide us with your feedback and reviews
Responding to your feedback and reviews, our business development.
Email address, full name and the feedback or review.
Use of cookies on the Website
Facilitate a Website feature that the user specifically requested, Analyze the Website usage to evaluate and improve its performance, improve user experience on the Website, inform and serve personalized ads more relevant to user interests .
IP address from which you access the Website, time and date of access, type of device and browser used, language used, links clicked via a mouse or a touch screen, and actions taken while using the Website.
You do not have a legal obligation to provide the information that we request. However, if you choose not to provide this information to us, we may not be able to process your website content or feedback, respond to your inquiry or demo request and provide you with our newsletter, and you may not be able to use some of our Website functionalities.
Please use discretion when providing content that includes the personal information of you or others.
YOU ARE SOLELY LIABLE FOR PROTECTING THIRD PARTIES’ AND YOUR OWN PRIVACY, AND FOR OBTAINING THE PRIOR CONSENT OF INDIVIDUALS’ WHOSE PERSONAL INFORMATION IS INCLUDED IN THE CONTENT YOU PROVIDE. WE WILL NOT BEAR LIABILITY FOR ANY DAMAGES THAT MIGHT INCUR TO YOU OR TO THIRD PARTIES AS A RESULT OF THE PUBLICATION OF SUCH PERSONAL INFORMATION.
We collect the personal information from several sources:
We will not share your information with third parties, except in the events listed below or when you provide us with your explicit and informed consent.
Scenario
Purposes
Examples of Third parties involved
We will share your information with our service providers who assist us with the internal operations of the Website. These companies are authorized to use your personal information in this context only as necessary to provide these services to us and not for their own promotional purposes
Operating the Website and our business.
GCP
Subject to the following additional Policies:https://cloud.google.com/privacy
If you abused your rights to use the Website or violated any applicable law while doing business with us
Responding to, handling, and mitigating suspected violations of law in connection with our business.
Competent authorities, legal counsels, and advisors.
If a judicial, governmental, or regulatory authority requires us to disclose your information
Complying with a binding request from a competent authority.
Competent authorities.
If the operation of the Website or our business is organized within a different framework, or through another legal structure or entity
Enabling a structural change in the operation of the Website and our business.
The target entity of the merger or acquisition, legal counsels, and advisors.
We retain your information for as long as needed to operate the Website, and thereafter as needed for record-keeping matters.
We will retain your information for as long as needed to operate the Website. Thereafter, we will still retain your personal information as necessary to comply with our legal obligations, resolve disputes, establish, and defend legal claims and enforce our agreements. The overall period of retention is approximately 7 years.
We implement measures to secure your information
We implement measures to reduce the risks of damage, loss of information and unauthorized access or use of information, such as HTTPS. However, these measures do not provide absolute information security. Therefore, although efforts are made to secure your personal information, there is no guarantee that it will be immune from information security risks.
Saywhatt Online Ltd. is the data controller of the personal information collected via the Website
Name
Address
Saywhatt Online Ltd.
40 Sderot Chen, Tel Aviv, 6416701, Israel
International data transfers
To facilitate the processing of your information through the Website and our service providers, we will transfer your information to countries outside the EU or the UK. We do so to countries which are recognized by the European commission as having adequate protection for personal data, or under the terms of a data transfer agreement which contains standard data protection contract clauses with adequate safeguards determined by the EU Commission and UK Information Commissioner’s Office.
Legal basis for processing your personal data
Purpose or Scenario
Legal Basis
Subscribing to our newsletters
Our legitimate interest in facilitating your request and consent to receive newsletters.
Scanning your website content when you book a demo
Our legitimate interest in providing you with the functionality of the Website and demo tool and in developing and enhancing our Website and our business using statistical data.
When you use or subscribe to our service
Providing you with the functionality of the service you requested, performance of our contract with you.
Responding to your inquiry or demo request
Our legitimate interest in responding to your inquiry, scheduling the demo you requested and our business development.
When you provide us with your feedback and reviews
Our legitimate interest in developing and enhancing our business and the Website, responding to your feedback or reviews
Use of essential cookies on the Website
Our legitimate interest in providing you with the functionality of the Website
Use of non-essential cookies on the Website
Your Consent
Responding to, handling, and mitigating suspected violations of law in connection with our business
Legitimate interests in defending and enforcing against violations and breaches that are harmful to our business
Complying with a binding request from a competent authority
Legitimate interests in complying with mandatory legal requirements imposed on us
Enabling a structural change in the operation of the Website and our business
Legitimate interests in our business continuity
Data subject rights
If you are in the EU or the UK, you have the following rights under the GDPR:
Right to Access and receive a copy of your personal information that we process.
Right to Rectify inaccurate personal information we have concerning you and to have incomplete personal information completed.
Right to easily and at any time withdraw your consent to us processing your personal data to email you with our newsletters. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal
Right to easily and at any time withdraw your consent to the use of non-essential cookies on our Website. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Data Portability, that is, to receive the personal information that you provided to us, in a structured, commonly used, and machine-readable format. You have the right to transmit this data to another person or entity. Where technically feasible, you have the right to have your personal information transmitted directly from us to the person or entity you designate.
Right to Object to our processing of your personal information based on our legitimate interest. However, we may override the objection if we demonstrate compelling legitimate grounds, or if we need to process such personal information for the establishment, exercise, or defense of legal claims.
Right to Restrict us from processing your personal information (except for storing it): (a) if you contest the accuracy of the personal information (in which case the restriction applies only for a period enabling us to determine the accuracy of the personal information); (b) if the processing is unlawful and you prefer to restrict the processing of the personal information rather than requiring the deletion of such data by us; (c) if we no longer need the personal information for the purposes outlined in this Policy, but you require the personal information to establish, exercise or defend legal claims; or (d) if you object to our processing based on our legitimate interest (in which case the restriction applies only for the period enabling us to determine whether our legitimate grounds for processing override yours).
Right to be Forgotten. Under certain circumstances, such as when you object to our processing of your personal information based on our legitimate interest and there are no overriding legitimate grounds for the processing, you have the right to ask us to erase your personal information. However, notwithstanding such request, we may still process your personal information if it is necessary to comply with our legal obligations, or for the establishment, exercise, or defense of legal claims. If you wish to exercise any of these rights, please contact us through the channels listed in this Policy.
When you contact us, we reserve the right to ask for reasonable evidence to verify your identity before we provide you with information. Where we are not able to provide you with information that you have asked for, we will explain the reason.
Subject to applicable law, you have the right to lodge a complaint with your local data protection authority. If you are in the EU, then according to Article 77 of the GDPR, you can lodge a complaint to the supervisory authority, in the Member State of your residence, place of work or place of alleged infringement of the GDPR. For a list of supervisory authorities in the EU, click here.
If you are in the UK, you can lodge a complaint to the Information Commissioner’s Office (ICO) pursuant to the instructions provided here.
If you are an individual residing in California, we provide you with the following information pursuant to the privacy law in California (CPRA). This is also the information we have collected in the past 12 months.
Categories of personal information
Specific types of personal information collected
Source of Information
Identifiers
Real Name, IP address, email address.
The consumer themselves.
Other personal information that identifies, relates to, describes, or is capable of being associated with, a particular individual
financial or payment information status.
The consumer themselves.
Employment Information
Your organization and position.
The consumer themselves.
Audio, electronic, visual or similar information
Website content, including assets, images, videos, texts, code and links.
The consumer themselves.The consumer’s website.
Internet or other electronic network activity information
Internet or other electronic network activity information.
The consumer’s device.
Business Purposes for Which the Personal Information is Used
The following are the business or commercial purposes for which we use each category of personal information. Details about the information we collect for each category are provided on the table above. More details about the business or commercial purposes are provided in the privacy policy’s section titled ‘What we collect and why‘.
Categories of personal information
Business Purposes for which the information is used
Identifiers
Other personal information that identifies, relates to, describes, or is capable of being associated with, a particular individual
Employment Information
Audio, electronic, visual or similar information
Internet or other electronic network activity information
Sharing, Selling and Disclosing to third parties
We do not share your personal information for behavioral-targeted ads and do not sell it. The chart below explain what personal information we disclosed in the preceding 12 months. Other than this, we have not disclosed your personal information for a business purpose in the preceding 12 months
Categories of personal information
Categories of third parties to whom we disclose your information and the specific business or commercial purpose for the disclosure
Identifiers
Other personal information that identifies, relates to, describes, or is capable of being associated with, a particular individual
Employment Information
Audio, electronic, visual or similar information
Internet or other electronic network activity information
Your rights under the CPRA if you are a resident of California
Knowing the personal information we collect about you
You have the right to know:
Right to deletion
Subject to certain exceptions set out below, on receipt of a verifiable request from you, we will:
Please note that we may not delete your personal information if it is necessary to:
or
We also will deny your request to delete if it proves impossible or involves disproportionate effort, or if another exception to the CPRA applies. We will provide you with a detailed explanation that includes enough facts to give you a meaningful understanding as to why we cannot comply with the request to delete your information.
Right to correct inaccurate personal information
If we receive a verifiable request from you to correct your information and we determine the accuracy of the corrected information you provide, we will correct inaccurate personal information that we maintain about you.
In determining the accuracy of the personal information that is the subject of your request to correct, we will consider the totality of the circumstances relating to the contested personal information.
We also may require that you provide documentation if we believe it is necessary to rebut our own documentation that the personal information is accurate.
We may deny your request to correct in the following cases:
We will provide you with a detailed explanation that includes enough facts to give you a meaningful understanding as to why we cannot comply with the request to correct your information
Protection against discrimination
You have the right not to be discriminated against by us because you exercised any of your rights under the CPRA.
Exercising your CPRA rights by yourself or through an authorized agent
If you would like to exercise any of your CPRA rights as described in this Policy, please contact us by e-mail at: support@saywhatt.com.
We will ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you, by using a two or three points of data verification process, depending on the type of information you require and the nature of your request.
We may ask you for additional information to confirm your identity and for security purposes, before disclosing the personal data requested to you, by using a two or three points of data verification process, depending on the type of information you require.
You may also designate an authorized agent to make a request under the CPRA on your behalf. To do so, you need to provide the authorized agent with written permission to do so and the agent will need to submit to us proof that they have been authorized by you. We will also require that you verify your own identity, as explained below.
Our response to your requests
We will respond to your requests within 45 days (or within 90 days, where the law permits and we determine it necessary considering the complexity and number of the requests you have filed). If we take longer than 45 days, we will inform you of the extension within the initial forty-five-day response period, together with the reason for the extension.
We may deny your request in the following cases:
We will provide you with a detailed explanation including sufficient facts, to enable you to meaningfully understand why we cannot fulfil your request.
Do Not Track
Our Do Not Track Notice. We do not currently respond or take any action with respect to web browser “do not track” signals or other mechanisms that provide consumers the ability to exercise choice regarding the collection of Personal Data about a consumer’s online activities over time and across third-party web sites or online services.