Privacy Policy

Last updated: 7 October 2026

This privacy policy for Haber Tech (also known as Haber Chat) ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at haber.chat, or any website of ours that links to this privacy policy
• Engage with us in other related ways, including any sales, marketing, or events

Registered address: Tel Aviv

1. The information we collect

What you tell us

This is the information you give us yourself.

We collect what you enter when you open an account, get in touch with us, ask about what we do, or use the features of our website that ask you for something.

Personal information provided by you. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Email addresses
• Names
• Phone numbers
• Contact preferences
• Company name
• WhatsApp messages, contacts and media (processed on behalf of customers)
• Passwords

Payment data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Stripe.

Account data. If you create an account with us, we may collect your name, email address, username, password, and other information you provide during the registration process.

Information automatically collected

Some information reaches us automatically when you open our website, without you typing anything.

When you open our website, your browser sends us technical information whether or not you type anything. That includes your IP address, which browser and operating system you are using, your language setting, the pages you open and how long you spend on them, and the page that sent you to us. We use it to keep the site running and secure, and to understand which parts of it are actually used. Some of it, such as your IP address, can identify you indirectly, so we treat it as personal information.

The information we collect includes:

• Log and usage data. Log and usage data (IP address, browser type and version, pages visited, time and date of visit, time spent on pages, referring URLs)
• Device data. Device data (device type, operating system, unique device identifiers, hardware model, mobile carrier)
• Location data. Location data (derived from your IP address)

Information collected from other sources

Some information about you reaches us from somewhere other than you.

We obtain personal information about you from the following sources:

• social media platforms
• business and marketing partners
• WhatsApp (Meta): names and profile details of customers' chat contacts
• Advertising platforms (Google Ads, Microsoft Advertising, OpenAI Ads): ad-click data

2. Why we use your information

Every use below is tied to something you asked us for, something we are required to do, or keeping the service working and safe.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• To provide our Services. We may process your information to provide you with the requested service.
• To facilitate account creation and authentication. We may process your information so you can create and log in to your account, as well as keep your account in working order.
• To send you marketing and promotional communications. We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time. For more information, see "11. Your rights over your information" below.
• To provide AI-powered features. We may process your information to operate, improve, and personalize AI-based features within our Services.
• To respond to user enquiries and offer support. We may process your information to respond to your enquiries and solve any potential issues you might have with the requested service.
• To protect our Services. We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.
• To identify usage trends. We may process information about how you use our Services to better understand how they are being used so we can improve them.
• To comply with our legal obligations. We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

3. Our legal basis for using it

The law requires us to have a specific reason for each use of your information, and to tell you what it is. Ours are set out below, use by use.

The General Data Protection Regulation (GDPR) and the UK GDPR require us to explain the legal basis for each thing we do with your personal information. Ours are set out below.

Our legitimate interests. Where we rely on legitimate interests above, those interests are: Keeping our website and service secure and preventing fraud and spam; understanding how our website is used so we can improve it; answering questions sent through our live chat or WhatsApp.

Where we rely on legitimate interests, we have weighed them against your interests, rights and freedoms. You can ask us for a summary of that assessment using the contact details at the end of this privacy policy, and you can object to that processing at any time.

Do you have to give us your information?

The information we ask for is needed in order to provide the service to you or to enter into a contract with you. You are not obliged to provide it, but without it we cannot provide the service.

4. Who we share it with

We pass your information to the organisations listed here, only where they need it to do something for us.

Vendors, consultants, and other third-party service providers. We may share your data with third-party vendors, service providers, contractors, or agents ("third parties") who perform services for us or on our behalf and require access to such information to do that work. The categories of third parties we may share personal information with are as follows:

• Cloud Computing Services
• Data Analytics Services
• CRM / Customer Support Tools
• HubSpot (website hosting, CRM, forms and analytics)
• Messaging platform (WhatsApp / Meta)
• Live chat (Crisp)
• Software provider that operates our app platform (app.haber.chat)
• Integrations you choose to connect (e.g. Zapier, Make, n8n, HubSpot, Google Sheets, CRMs): data is sent at your instruction, and their privacy policies apply
• Ad Networks
• Payment Processors
• Email / Marketing Platforms
• AI Platforms
• Website Hosting Service Providers

Google Analytics. We use Google Analytics to understand how visitors use our website: how often they visit, which pages they open, and which site they came from. Google processes this data on our behalf and may transfer it outside your country. You can opt out using Google's browser add-on, and through the consent controls on our website.

We may also need to share your personal information in the following situations:

• Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• Legal obligations. We may disclose your information where we are legally required to do so, or where disclosure is necessary to establish, exercise or defend legal claims.

5. Cookies and similar technologies

Our website stores and reads small pieces of information on your device. You control the ones that are not strictly necessary.

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. Some online tracking technologies help us maintain the security of our Services and your account, prevent crashes, fix bugs, save your preferences, and assist with basic site functions.

We also permit third parties and service providers to use online tracking technologies on our Services for analytics and advertising, including to help manage and display advertisements or to tailor advertisements to your interests.

The specific cookies used on our Services are listed below, grouped by category:

Essential

Functional

Analytics

Marketing

6. AI-powered features

Some features of our service are powered by artificial intelligence, which means your input is processed by a third party.

As part of our Services, we may offer products, features, or tools powered by artificial intelligence, machine learning, or similar technologies (collectively, "AI Products"). These tools are designed to enhance your experience and provide you with innovative solutions. The terms in this privacy policy govern your use of the AI Products within our Services.

Use of AI Technologies

We provide the AI Products through the following third-party providers ("AI Service Providers"): OpenAI. As outlined in this privacy policy, your input, output, and personal information will be shared with and processed by these AI Service Providers to enable your use of our AI Products for purposes outlined in "2. Why we use your information".

7. Where your information is held

Your information may be held in a country other than the one you live in. The countries are named below.

We transfer, store or process your personal information in countries other than your own. Whenever we do, we make sure appropriate safeguards are in place.

Where your information goes. Your personal information is transferred to, or stored in, the following countries: United States, countries in the EU/EEA, Israel and other countries where our service providers operate.

We rely on the following safeguards for those transfers:

• Adequacy decision by the European Commission
• European Commission's Standard Contractual Clauses (SCCs)
• EU-US Data Privacy Framework certification

You can obtain a copy of the safeguards we rely on by contacting us using the details at the end of this privacy policy.

If you are in Switzerland: the countries listed above are the states to which your personal data is disclosed. Where a country does not offer adequate protection under Swiss law, we rely on the safeguards listed above.

8. How long we keep it

We keep your information only while we still need it, then delete it or strip out anything that identifies you.

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements).

Once we no longer need your information, we delete it or anonymize it so it can no longer be traced back to you.

9. How we protect it

We take practical steps to keep your information safe, though no service can promise perfect security.

We use technical and organizational measures appropriate to the information we hold: access is limited to people who need it, data is encrypted in transit, and our systems are kept up to date. We should be straight with you though. No website can promise that its security will never be broken, and anyone who tells you otherwise is overselling. If something does go wrong and it puts you at risk, we will tell you.

You can help by using a strong, unique password if you have an account with us, and by avoiding public or shared networks when entering anything sensitive.

10. Children

Our service is not intended for children, and we do not set out to collect their information.

Our service is not directed at children and we do not knowingly collect their information. The age at which someone can agree to this on their own varies: it is 13 in the United States and the United Kingdom, and between 13 and 16 across the EU depending on the country. If you are below that age where you live, please ask a parent or guardian before using our service.

If we find out we have collected a child's information without the consent we needed, we will delete it. If you are a parent or guardian and think that has happened, write to support@haber.chat and we will deal with it.

11. Your rights over your information

You have rights over the information we hold about you. Which ones depend on where you live, and they are free to use.

In some regions (like the EEA, UK, Switzerland, Canada, and certain US states), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure, (iii) to restrict the processing of your personal information, (iv) if applicable, to data portability, and (v) not to be subject to automated decision-making. In certain circumstances, you may also have the right to object to the processing of your personal information.

Rights under GDPR / UK GDPR

If you are a resident of the European Economic Area (EEA) or the United Kingdom (UK), you have certain data protection rights under the GDPR. These include the right to:

• Access - request a copy of the personal information we hold about you
• Rectification - request correction of inaccurate or incomplete personal data
• Erasure - request deletion of your personal data in certain circumstances
• Restriction - request restriction of processing of your personal data
• Data portability - receive your personal data in a structured, commonly used, machine-readable format
• Objection - object to processing based on legitimate interests or direct marketing
• Withdraw consent - withdraw your consent at any time where we rely on consent to process your personal data

Your right to object. You have the right to object at any time to our processing of your personal information where we rely on legitimate interests. Where we process your information for direct marketing, you have an absolute right to object, and we will stop as soon as you tell us to. To object, contact us at support@haber.chat.

To exercise any of these rights, please contact us at support@haber.chat. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the data protection authority in the EU or EEA country where you live or work, or where you believe an infringement has taken place.

If you are in the United Kingdom, you have the right to complain to us first. Contact us at support@haber.chat and we will acknowledge your complaint within 30 days and tell you the outcome without undue delay. You also have the right to make a complaint to the Information Commissioner under section 165 of the Data Protection Act 2018, at ico.org.uk/make-a-complaint.

Notice for US visitors

Our business does not currently meet the thresholds that bring it within the comprehensive privacy statutes of California and other US states. The following still applies to you.

• The categories of personal information we collect, and the categories of third parties we share it with, are described above in this privacy policy.
• You can ask us to review, update or delete the information we hold about you by contacting us at support@haber.chat.
• We will tell you about material changes to this privacy policy as described under "Changes to this notice".
• Third parties may collect information about your activity over time and across different websites when you use our site, as described in the cookies section.

We sell or share personal information for targeted advertising. You can opt out through our "Do Not Sell or Share My Personal Information" link, or by sending an opt-out preference signal such as Global Privacy Control from your browser.

Rights under Swiss law

If you are in Switzerland, the Federal Act on Data Protection gives you the right to ask us what personal data we hold about you and why, to have inaccurate data corrected, and to have data deleted where we have no proper reason to keep it. Where we disclose your data abroad, the countries concerned are named above. You can raise a concern with the Federal Data Protection and Information Commissioner.

Rights under Canadian Privacy Law (PIPEDA)

If you are located in Canada, you have the right to access your personal information held by our organization, challenge its accuracy, and withdraw consent for its collection, use, and disclosure, subject to legal or contractual restrictions and reasonable notice. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

Account information

If you would at any time like to review or change the information in your account or terminate your account, you can contact us using the contact information provided. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms, and/or comply with applicable legal requirements.

Opting out of marketing communications

You can unsubscribe from our marketing email list at any time by clicking on the unsubscribe link in the emails that we send or by contacting us using the details provided below. You will then be removed from the marketing email list - however, we may still communicate with you, for example to send you service-related emails that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

12. Browser tracking signals

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Some browsers and extensions also send a Global Privacy Control ("GPC") signal.

We respond to both DNT and GPC signals. Where your browser sends either signal, we treat it as a request to opt out of non-essential tracking and apply that preference automatically, without requiring you to take any further action.

You can also manage your tracking preferences at any time using the consent banner on our website.

13. Rights in specific countries

Australia

We handle your personal information under the Privacy Act 1988 and the Australian Privacy Principles. We collect only what is reasonably necessary for what we do, by lawful and fair means, and from you directly wherever that is practical. You can ask us for access to your information and to have it corrected.

The kinds of information we collect and hold, and how we hold it, are described earlier in this privacy policy. Where we disclose information to recipients overseas, the countries they are likely to be in are named in the section on where your information is held.

If you want to complain about how we have handled your information, contact us first at support@haber.chat. We will acknowledge your complaint, look into it and tell you the outcome. If you are not satisfied, you can take it to the Office of the Australian Information Commissioner at oaic.gov.au.

South Africa

We process your personal information under the Protection of Personal Information Act. You can ask us for access to it, have it corrected or deleted, and object to how we use it.

Where we send your information outside South Africa, the countries are named in the section on where your information is held, along with the safeguards we rely on. If you want to complain, contact us first, and you can also approach the Information Regulator at inforegulator.org.za.

Brazil

We process your personal information under the Lei Geral de Proteção de Dados. You can ask us to confirm whether we hold information about you and to give you access to it, to correct anything incomplete or out of date, to anonymise or delete information that is unnecessary or excessive, to tell you which public and private organisations we have shared it with, and to withdraw your consent. You can also be told that you may refuse consent and what follows if you do.

The person responsible for data protection at our organisation is named in the contact section, and you can reach them directly using the details there.

Japan

We handle your personal information under the Act on the Protection of Personal Information. You can ask us to disclose what we hold about you, to correct or add to it if it is wrong or incomplete, and to stop using it or delete it where it has been handled improperly. We will tell you about any fee before we charge one.

The measures we take to keep your information secure are described earlier. Where your information is handled in another country, that country is named in the section on where your information is held.

South Korea

We handle your personal information under the Personal Information Protection Act. You can ask us for access, correction, deletion and suspension of processing, and you can withdraw consent at any time. Details of how we destroy information we no longer need, and of anything we entrust to another company to process on our behalf, are described earlier in this privacy policy.

Where your information is transferred outside Korea, the destination country, the recipient and the purpose are set out in the section on where your information is held, together with how you can refuse the transfer and what refusing means.

India

India's Digital Personal Data Protection Act has been passed, and the rules that give effect to it take effect on 13 May 2027. In the meantime, if you are in India you can contact us using the details at the end of this privacy policy to ask what we hold about you, or to ask us to correct or delete it, and we will deal with your request.

14. Changes to this notice

This notice will change over time. We will tell you when it changes in a way that affects you.

We may update this privacy policy from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this privacy policy. Where we make material changes, we will bring them to your attention directly, either by prominently posting a notice of the changes or by sending you a notification, in good time before they take effect.

15. How to contact us

If you have questions or comments about this privacy policy, you may contact us at:

Haber Tech
(trading as Haber Chat)
Tel Aviv
Israel
Email: support@haber.chat

Responsible for privacy: Privacy Officer, reachable at support@haber.chat.

16. How to exercise your rights

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information.

To submit a request, please contact us at support@haber.chat.

Additional Provisions

This privacy policy also covers your use of the HaberChat app at app.haber.chat.
Data we process for our customers. When a business uses HaberChat to manage its WhatsApp conversations, the messages, contacts and media in those conversations belong to that business. For that data, the business is the data controller and HaberChat is its data processor: we handle it only to provide the service, following the business's instructions. Messages are sent and received through WhatsApp, operated by Meta, whose own privacy policy applies to its handling of that data. If you are a contact of one of our customers and want to access, correct or delete your data, please contact that business directly, and we will help them respond.