מדיניות פרטיות | Privacy Policy

Last Updated: December 12, 2025

1. General

Whale Group ("Whale Group", "we", "us", or "our") takes your privacy seriously. We gather certain types of information about our users and we want to help you understand the terms related to the collection and use of the information we collect. This Privacy Policy discloses the types of information we gather, how we use it, and what choices you have regarding the collection of such information.

1.1 Scope of This Policy

This Privacy Policy applies to all products, services, websites, platforms, and applications owned, operated, or provided by Whale Group and its subsidiaries, affiliated companies, and related entities, including but not limited to:

Websites: whale.co.il and any other websites owned or operated by Whale Group
WhaleBiz Platform: Our cross-platform application at whalebiz.co.il (web, iOS, and Android) for business owners to manage their AI agents, access dashboards, communicate with AI assistants, and control their services
AI Assistants and Chatbots: Text-based and voice-based AI chatbots deployed on our websites, within messaging platforms, or embedded on third-party websites
Messaging Services: AI-powered communications via WhatsApp, Telegram, Facebook Messenger, Instagram, and other messaging platforms
Voice AI Systems: Voice-activated AI assistants and voice recording/processing services
Customer Portals: Business dashboards, management interfaces, and client service areas
All Future Products: Any new services, products, or applications launched by Whale Group or its subsidiaries

References to "Services" throughout this Policy include all of the above.

BY USING OR ACCESSING ANY WHALE GROUP WEBSITE, PLATFORM, APPLICATION (INCLUDING WHALEBIZ), CHATBOT, MESSAGING SERVICE, OR ANY OF OUR SERVICES, YOU AGREE TO THE COLLECTION AND USE OF YOUR PERSONAL INFORMATION AS DESCRIBED IN THIS POLICY. If you contact us via WhatsApp, Telegram, or any messaging platform, if you interact with our AI chatbots on our website or any third-party platform, or if you use the WhaleBiz application, your continued use of these services constitutes your consent to this Privacy Policy.

1.2 Consent Through Continued Use

When you initiate or continue a conversation with any of our AI-powered services (whether on our website, WhatsApp, Telegram, or any other platform), your continued interaction constitutes your acknowledgment and acceptance of this Privacy Policy. Each conversation may begin with a notice stating:

"Please note: This chat is powered by artificial intelligence to help you quickly and efficiently. Continuing the conversation constitutes consent to use the chatbot in accordance with the Terms of Service and Privacy Policy: whale.co.il/privacy-policy"

This mechanism applies equally to all our AI agents, bots, and automated systems regardless of the platform on which they operate.

1.3 Governing Law

Whale Group is an Israeli company. All data processing is governed by Israeli privacy law, including the Protection of Privacy Law, 5741-1981 (חוק הגנת הפרטיות, התשמ"א-1981) and applicable regulations, including Amendment 13 (תיקון 13 לחוק הגנת הפרטיות), which came into effect on August 14, 2025.

We may amend this Policy from time to time. A notification of any such amendment shall be posted on this page. Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy.

2. Information We Collect

We collect the following types of information:

2.1 Information You Provide Directly

Contact Information: Name, email address, phone number, company name, and any other information you provide when filling out contact forms, subscribing to our newsletter, or requesting our services.
Communication Content: Messages, inquiries, and any content you send to us through our website forms, email, WhatsApp, Telegram, or any other communication channel.
Chat Transcripts: Complete records of conversations with our AI chatbots (both text and voice), including all messages, questions, and responses.
Voice Recordings and Biometric Data: If you use our voice AI features, we record and process voice communications. Voice recordings may be analyzed to create voice patterns or characteristics. Under Israeli law and international standards, voice data may be considered biometric data (נתונים ביומטריים) and is treated with appropriate sensitivity.
Account Information: If you create an account (including on WhaleBiz), we collect login credentials, profile information, and account activity.
Media and Files: Any images, documents, audio, or video files you share through our Services.

2.2 Information Collected Automatically

Device Information: IP address, browser type and version, operating system, device type, screen resolution, and unique device identifiers.
Usage Data: Pages visited, time spent on pages, click patterns, navigation paths, referring URLs, and exit pages.
Location Data: Approximate geographic location based on IP address.
Cookies and Similar Technologies: Information collected through cookies, web beacons, pixels, and similar tracking technologies (see Section 8 for details).

2.3 Information from Third Parties

Social Media Platforms: If you interact with us through WhatsApp, Telegram, Facebook Messenger, or Instagram, we receive information from these platforms including your profile information and message content.
Analytics Providers: We receive aggregated and individual analytics data from services like Google Analytics.
Marketing Partners: We may receive information about you from our marketing and advertising partners.

3. Use of Artificial Intelligence (AI) in Communications

Important Notice: Our Services extensively utilize artificial intelligence technologies. When you interact with our chatbots on our website (both text and voice modes), via WhatsApp, Telegram, or any other messaging platform, please be aware that:

Responses may be generated or assisted by AI tools and third-party AI platforms such as OpenAI, Google Gemini, or Anthropic Claude.
Your messages and inputs are processed by these AI systems to generate responses.
Chat transcripts and voice recordings may be stored on servers operated by these third-party AI providers.
AI-generated content is not guaranteed to be accurate, complete, or suitable for your specific situation and should not be considered legal, medical, financial, or professional advice.

By continuing to communicate with our AI-powered services, you acknowledge and consent to this processing. You are not required to provide personal data to receive general information or answers.

4. Messaging Services (WhatsApp, Telegram, and Other Platforms)

Whale Group operates AI-powered chatbots and customer service solutions on various messaging platforms including WhatsApp, Telegram, Facebook Messenger, and Instagram. When you contact us through these channels:

Message Collection: We collect and store all messages exchanged between you and our bots or representatives.
Profile Information: We may access your public profile information as provided by the messaging platform (name, profile photo, phone number for WhatsApp, username for Telegram).
Phone Numbers: For WhatsApp communications, we collect and store your phone number.
Conversation History: Complete chat history is stored in our systems and may be used for service improvement, training AI models, and analytics.
Media Files: Any images, documents, or other files you share through these platforms are collected and stored.

CONSENT BY CONTINUED USE: By initiating or continuing a conversation with us on WhatsApp, Telegram, or any messaging platform, you consent to the collection, storage, and processing of your communications as described in this Privacy Policy. If you do not agree to these terms, please discontinue the conversation.

4.1 Meta Business Solution Provider (BSP) Compliance

Whale Group operates as a Meta Business Solution Provider and fully complies with Meta's requirements for WhatsApp Business API, Facebook Messenger, and Instagram messaging services:

Explicit Opt-In: In accordance with Meta's messaging requirements (effective November 2024), we ensure that businesses using our platform obtain explicit user consent before sending messages via WhatsApp and other Meta platforms.
Data Processing Agreement: We maintain appropriate Data Processing Agreements (DPAs) with Meta and ensure compliant data handling practices.
Message Template Compliance: All message templates undergo Meta's review process and comply with Meta's messaging policies for Marketing, Utility, and Authentication categories.
End-to-End Encryption: Messages sent via WhatsApp Business API are protected by end-to-end encryption. However, message metadata (phone numbers, timestamps, IP addresses) may be processed by Meta for service improvement and security purposes.
Data Retention Controls: We offer data retention configuration options for our business customers in compliance with Meta's and applicable privacy regulations.

For more information about Meta's data practices, please refer to WhatsApp's Privacy Policy and Meta's Privacy Policy.

5. How We Use Your Information

We use the information we collect for the following purposes:

5.1 Service Provision

To provide, operate, and maintain our Services
To respond to your inquiries and provide customer support
To process and fulfill your requests for our products and services
To send you service-related communications
To manage your account on WhaleBiz and other platforms

5.2 Marketing and Communications

To send newsletters, promotional materials, and marketing communications (with your consent)
To personalize content and advertisements
To conduct targeted advertising campaigns and retargeting
To send follow-up communications after you've contacted us
To segment audiences and create lookalike audiences for advertising
To re-engage users through email, SMS, WhatsApp, or other channels

5.3 Analytics and Improvement

To analyze usage patterns and improve our website and Services
To conduct research and development
To measure the effectiveness of our marketing campaigns
To monitor system performance and troubleshoot issues

5.4 AI Model Training and Development

Important Notice: Your interactions with our AI-powered services may be used to train, improve, and develop our AI models and systems.

Training Data: Chat transcripts, voice recordings, and user interactions may be used to train and improve our proprietary AI models
Pattern Analysis: We analyze conversation patterns, user queries, and responses to enhance AI accuracy and relevance
Model Development: Your data may contribute to the development of new AI features, products, and services
Quality Assurance: Conversations may be reviewed by our team for quality improvement and AI training purposes
Anonymization: Where possible, data used for training may be anonymized or aggregated, but we reserve the right to use identifiable data for model improvement

5.5 Data Integration and Synchronization

CRM Systems: Your information may be synced with customer relationship management (CRM) systems for unified customer profiles
Cross-Platform Data: Data collected from different platforms (website, WhaleBiz app, messaging platforms) may be consolidated to provide you with a seamless experience
Third-Party Integrations: Your data may be shared with integrated third-party services to enable connected workflows and automations
Business Intelligence: Aggregated data may be used for business analytics, reporting, and strategic decision-making

5.6 Legal and Security

To comply with legal obligations
To protect against fraud and unauthorized access
To enforce our terms and conditions
To protect our rights, property, and safety, and those of our users

5.7 Legal Basis for Processing

We process your information based on the following legal grounds:

Consent: Where you have given explicit consent for specific purposes (e.g., newsletter subscription, marketing communications, AI model training).
Contract Performance: Where processing is necessary to fulfill our contractual obligations to you.
Legitimate Interests: For purposes such as service improvement, AI training, security, fraud prevention, and marketing (where permitted by law).
Legal Obligations: Where processing is required to comply with applicable laws.

5.8 Data Minimization and Privacy by Design

While we collect comprehensive data to provide you with the best possible service, we adhere to data minimization principles where appropriate:

Purpose Limitation: We collect data for specific, explicit, and legitimate purposes and do not process it further in ways incompatible with those purposes.
Avoidance of Unnecessary Sensitive Data: You are not required to provide sensitive personal information such as health data, credit card numbers, or government IDs through our chatbots unless specifically requested for a particular service.
Pseudonymization: Where feasible, we may replace identifying information with pseudonymous identifiers for analytics and AI training purposes.
Privacy by Design: We incorporate privacy considerations into the design and development of our Services from the outset.

6. Data Sharing and Disclosure

We do not sell your personal data to third parties.

However, we may share your information with:

6.1 Service Providers and Partners

We work with trusted third-party service providers who assist us in delivering our Services:

Cloud Hosting: Google Cloud Platform (GCP), Amazon Web Services (AWS), Cloudflare
Email Services: Resend for transactional emails and newsletter delivery
Analytics: Google Analytics for website traffic analysis
AI Platforms: OpenAI, Google Gemini, Anthropic Claude for AI-powered features
Messaging APIs: Meta (WhatsApp Cloud API, Facebook Messenger, Instagram), Telegram Bot API
Payment Processors: For processing payments (if applicable)
CRM Systems: For managing customer relationships

6.2 Legal Requirements

We may disclose your information if required by law or in response to:

Court orders, subpoenas, or other legal processes
Requests from government authorities
To protect our legal rights or defend against legal claims
To investigate potential violations of our terms

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

7. Information Collected from End Users of Our Customers

Whale Group provides AI chatbot and automation services to business customers. When you interact with a chatbot or service powered by Whale Group on a third-party website or messaging platform:

We collect chat transcripts and interaction data on behalf of our business customers.
This data may include personal information you provide during the conversation (name, email, phone number, inquiry content).
Our business customers are considered the "Database Owner" (בעל מאגר מידע) under Israeli law.
Whale Group acts as the Data Processor (מעבד מידע) on behalf of these customers.
For questions about how a specific business uses your data, please contact that business directly.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and collect information about how you use our Services.

8.1 Essential Cookies

These cookies are necessary for the operation of our Services and cannot be disabled:

Session management and authentication
Security and fraud prevention
User preferences (language, settings)
Chatbot conversation state

8.2 Analytics Cookies

Subject to your consent, we use analytics cookies to understand how visitors interact with our website:

Google Analytics: Tracks page views, user behavior, traffic sources, and demographic information

8.3 Marketing Cookies

With your consent, we may use marketing cookies for:

Targeted advertising and retargeting
Measuring advertising campaign effectiveness
Social media integration

8.4 Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner. You can accept or reject non-essential cookies. You can also manage cookies through your browser settings at any time. Note that blocking some cookies may affect the functionality of our Services.

9. Data Retention

We retain your personal information for as long as necessary to:

Provide our Services to you
Comply with legal obligations
Resolve disputes and enforce our agreements
Improve and develop our AI systems

Specific retention periods vary based on the type of data and our legal requirements. Chat transcripts and communication logs are typically retained for a minimum of 7 years to comply with Israeli legal requirements. After the retention period, data is securely deleted or anonymized.

10. Data Security

Whale Group implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data in transit
Encryption at rest for stored data
Access controls and authentication mechanisms
Regular security assessments and monitoring
Employee training on data protection

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including:

Israel: Our primary servers and operations
United States: Cloud services (AWS, Google Cloud), AI platforms (OpenAI, Anthropic)
European Union: Some cloud and processing services

By using our Services, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.

12. Your Rights Under Israeli and International Law

Under the Israeli Protection of Privacy Law (including Amendment 13) and in alignment with international best practices, you have the following rights regarding your personal information:

12.1 General Data Rights

Right to Access (זכות עיון): You may request a copy of the personal information we hold about you, including chat transcripts and voice recordings.
Right to Correction (זכות לתיקון): You may request correction of inaccurate or incomplete information.
Right to Deletion (זכות למחיקה): In certain circumstances, you may request deletion of your personal information ("right to be forgotten"). This includes deletion of chat logs and account data.
Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format to transfer it to another service.
Right to Object: You may object to processing of your personal information for direct marketing purposes.
Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.

12.2 AI-Specific Rights

Your Right to Opt-Out of AI Training: You have the right to request that your data not be used for training our AI models. To exercise this right, contact us at privacy@whale.co.il with the subject line "AI Training Opt-Out".

Opt-Out of AI Model Training: You may request that your conversations and interactions not be used to train or improve our AI systems. Upon receiving such a request, we will exclude your data from future training, though data already incorporated into trained models cannot be retroactively removed.
Right to Human Review: For significant decisions that may affect you, you have the right to request human review of any AI-generated decision or recommendation.
Right to Explanation: You may request an explanation of how our AI systems process your data and make decisions.
Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you. You may request human intervention, express your point of view, and contest such decisions.

12.3 How to Exercise Your Rights

To exercise any of your rights, please contact us at: privacy@whale.co.il

Your request should include:

Your full name and contact information
A description of the specific right you wish to exercise
Any relevant details to help us locate your information (e.g., phone number used for WhatsApp, email associated with your account)

We will respond to your request within 30 days, as required by Israeli law. In some cases, we may need to verify your identity before processing your request. There is no fee for exercising your rights, though we reserve the right to charge a reasonable fee for manifestly unfounded or excessive requests.

13. Newsletter and Marketing Communications

When you subscribe to our newsletter or opt-in to marketing communications:

Your email address is stored in our email service provider (Resend)
We may send you promotional content, industry news, and updates about our Services
Each email includes an unsubscribe link
You can manage your preferences or unsubscribe at any time

Newsletter subscription and contact form submission require explicit acceptance of this Privacy Policy through a checkbox mechanism.

14. Age Requirement

You must be 18 years or older, or at least the age of majority in your jurisdiction, to use our Services. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected personal information from a minor, we will take steps to delete such information.

15. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Services.

16. AI Services Integration - Third-Party Platforms

Our AI-powered features are built using the following third-party platforms. By using our AI features, you acknowledge that your data may be processed by these providers:

OpenAI - Provides large language model APIs for natural language processing. Data may be processed in accordance with OpenAI's Privacy Policy.
Google Gemini - Provides AI and machine learning services. Data processed in accordance with Google's Privacy Policy.
Anthropic Claude - Provides AI assistant capabilities. Data processed in accordance with Anthropic's Privacy Policy.

These providers may store and process conversation data to provide their services. We recommend reviewing their respective privacy policies for more information.

17. Third-Party Service Providers

The following third-party services may be involved in the delivery of our Services:

Google Analytics - Web analysis service provided by Google Ireland Limited for tracking and analyzing website usage.
Google Cloud Platform (GCP) - Hosting and backend services provided by Google.
Amazon Web Services (AWS) - Cloud infrastructure and hosting services.
Cloudflare - CDN, security, and performance optimization services.
Resend - Email delivery service for transactional emails and newsletters.
Meta Platforms (WhatsApp Cloud API, Facebook Messenger, Instagram) - Messaging platform integrations for customer communication.
Telegram Bot API - Messaging platform for chatbot deployment.
OpenAI, Google Gemini, Anthropic Claude - AI and natural language processing services.

An updated list of service providers may be requested from Whale Group at any time by contacting privacy@whale.co.il.

18. Israeli Law Compliance (Amendment 13)

Whale Group is an Israeli company subject to Israeli privacy laws, including:

The Protection of Privacy Law, 5741-1981 (חוק הגנת הפרטיות, התשמ"א-1981)
Amendment 13 to the Protection of Privacy Law (תיקון 13), effective August 14, 2025
The Protection of Privacy Regulations (Data Security), 5777-2017

18.1 Amendment 13 Key Provisions

Amendment 13 represents the most significant reform to Israel's privacy regime in 40 years. Key provisions affecting you include:

Expanded Definition of Sensitive Data (מידע רגיש במיוחד): The law now covers biometrics, genetic data, location data, financial details, and personality assessments.
Enhanced User Rights: Strengthened rights to access, correct, and delete personal information.
Breach Notification: Organizations must notify the Privacy Protection Authority (PPA) and affected individuals in case of data breaches.
Administrative Enforcement: The PPA has expanded powers to issue orders and levy fines of up to NIS 3.2 million.

18.2 Security Level and Database Registration

Default Security Level: We process data under the basic security level (רמת אבטחה בסיסית) unless otherwise agreed in writing. If you require Medium (רמה בינונית) or High (רמה גבוהה) security classification, please contact us in advance – additional requirements and fees may apply.

Under Amendment 13, database registration requirements have been narrowed. Whale Group maintains appropriate registrations as required by law, including for databases used in direct marketing with more than 10,000 individuals.

18.3 Your Rights Under Israeli Law

Israeli residents have specific privacy rights including the right to be informed (זכות לקבל מידע), right of access (זכות עיון), right to correction (זכות לתיקון), and enhanced rights regarding automated decision-making. See Section 12 for complete details on exercising your rights.

19. International Use

Our Services are primarily designed for users in Israel. We do not specifically design our platform to meet the data protection requirements of any jurisdiction outside of Israel. Whale Group does not guarantee compliance with region-specific privacy laws including, but not limited to:

GDPR (European Union)
CCPA (California, USA)
LGPD (Brazil)
Other national or regional data protection laws

If you or your organization are subject to such laws, it is your responsibility to determine whether our Services are suitable for your legal and compliance requirements.

20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

We will update the "Last Updated" date at the top of this page
For significant changes, we may provide additional notice (such as a banner on our website)
Your continued use of our Services after any changes constitutes your acceptance of the updated Privacy Policy

21. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@whale.co.il
Phone: +972-3-303-4757
Address: HaHashmona'im St 3, Bnei Brak, Israel
Website: https://whale.co.il

We will respond to your inquiry as soon as reasonably possible, and in any event within the timeframes required by applicable law.

22. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the State of Israel, without regard to its conflict of law provisions. Any disputes arising from or relating to this Privacy Policy or our data practices shall be subject to the exclusive jurisdiction of the competent courts in Tel Aviv, Israel.

23. WhaleBiz Platform - Specific Terms

The WhaleBiz platform is a cross-platform application (available on web, iOS, and Android) designed for business owners who have deployed AI agents through Whale Group. The following additional terms apply to WhaleBiz users:

23.1 Account Data

Authentication: We collect login credentials, authentication tokens, and session data
Business Information: Company details, business profiles, and configuration settings
User Activity: All actions taken within the platform, including settings changes, AI agent configurations, and dashboard interactions

23.2 AI Agent Management Data

Agent Configurations: Settings, prompts, knowledge bases, and customizations you create for your AI agents
Training Data: Any information you upload or provide to train or customize your AI agents
Conversation Logs: Transcripts of conversations between your AI agents and your customers
Analytics: Performance metrics, usage statistics, and engagement data for your AI agents

23.3 Cross-Platform Synchronization

Data collected through the WhaleBiz platform is synchronized across all devices and platforms where you access your account. This includes:

Settings and preferences
Conversation histories
AI agent configurations
Analytics and reports

24. Data Processing Addendum (DPA)

This section constitutes the Data Processing Addendum ("DPA") and is incorporated by reference into any agreement between Whale Group and its customers. It governs the processing of Personal Data in connection with your use of Whale Group's Services and is subject to the terms of any existing service agreement.

24.1 Definitions

For the purposes of this DPA and in accordance with Israeli law:

Personal Data (מידע אישי): Any data relating to an identified or identifiable individual.
Database Owner (בעל מאגר מידע): The customer who controls the purpose and means of processing.
Data Holder / Processor (מעבד מידע): Whale Group, acting on behalf of the Customer in providing the Services.
Data Subject: Any natural person whose Personal Data is collected or processed via the Services.
Basic Security Level (רמת אבטחה בסיסית): The default data protection level under Israeli law.

24.2 Roles and Responsibilities

Customer as Database Owner

If you are a business customer using our Services, you are considered the Database Owner under Israeli law. You are solely responsible for:

Determining whether your database requires registration with the Registrar of Databases
Providing end users with all required privacy notices and disclosures at the point of data collection
Obtaining all required consents under applicable law
Selecting appropriate data security options in the Service
Ensuring that your use of the Services complies with applicable data protection laws

Whale Group as Data Processor

Whale Group processes Personal Data solely for the purpose of providing the Services in accordance with this Policy and the Customer's documented instructions. Whale Group will:

Process Personal Data only as necessary to provide the Services
Implement and maintain appropriate technical and organizational security measures
Assist the Customer with responding to data subject rights requests when feasible
Ensure personnel are subject to confidentiality obligations
Notify the Customer without undue delay upon becoming aware of any personal data breach

24.3 Security Level

Default Security Level: Unless otherwise agreed in writing, the data protection level applicable to processing performed by Whale Group is "Basic" (רמת אבטחה בסיסית) under Israeli law.

If you require a Medium (רמה בינונית) or High (רמה גבוהה) level of data security, this must be:

Explicitly communicated in writing
Approved by Whale Group
Subject to additional requirements and fees

24.4 Subprocessors and International Transfers

Whale Group may use selected third-party subprocessors, including cloud providers, messaging API platforms, and AI services, to deliver the Services. By using the Services, you authorize such subprocessors, provided they are subject to data protection obligations no less protective than those set out in this Policy.

Data storage locations:

Primary Storage: Data may be stored on servers in Israel, the United States, and the European Union
Cloud Providers: Google Cloud Platform, Amazon Web Services, Cloudflare
AI Processing: Data processed by AI providers may be stored in their respective data centers globally

24.5 Data Retention and Deletion

Whale Group processes data for the duration of the agreement unless otherwise instructed by the Customer. Upon termination of the agreement, Whale Group will, at the Customer's written instruction:

Delete all Personal Data, or
Anonymize the Personal Data, or
Retain the data for a legally required period

24.6 Liability and Indemnification

Customer agrees to indemnify Whale Group against any claim or penalty resulting from the Customer's failure to comply with Israeli data protection requirements or from their failure to notify Whale Group of the need for medium or high security classification.

25. Disclaimer and Limitation of Liability

While we take reasonable measures to protect your data, you acknowledge that:

No method of transmission over the Internet or electronic storage is 100% secure
AI-generated content may not always be accurate, complete, or suitable for your needs
Third-party services have their own privacy practices beyond our control
We are not responsible for the actions of our business customers who use our Services to interact with their end users

To the maximum extent permitted by law, Whale Group disclaims all liability for any unauthorized access to, or use of, your information arising from circumstances beyond our reasonable control.