Privacy Policy

Woizer (“Woizer,” “we,” “us”) provides AI voice and chat agents that businesses deploy on their websites, phone lines, outbound calling campaigns and WhatsApp. This policy explains what personal data we process, why, who we share it with, and the choices and rights you have.

If you are in Israel, the Hebrew version of this policy (switch to עב above) describes your rights under Israeli law. Both versions describe the same practices.

1. Who we are and our role

Woizer is operated by I.D.M, a registered business in Israel (Business ID 032882078). Contact: support@woizer.com.

• Controller — for data about our own website visitors, prospects and business customers (“Customers”), such as account, billing and marketing data.
• Processor (service provider) — for data about the people who talk to a Customer’s agent (“End Users”): callers, website visitors, campaign contacts and WhatsApp users. The Customer decides why and how that data is used and is the controller. If you are an End User, please direct requests to the business you interacted with; we will help them respond.

2. Data we process

2.1 Customers and website visitors

• Account data: name, email, organization, login details (via Clerk).
• Billing data: plan, invoices and payment status. Payments are processed by Paddle as merchant of record; we do not receive full card numbers.
• Agent configuration: business details, website URLs, knowledge base content, voices, prompts and integration settings.
• Website scanning: when you give us a URL, we crawl publicly accessible pages of that site to build your agent.
• Usage and device data: IP address, browser, pages viewed, interaction events and error logs.
• Cookies and similar technologies — see section 8.

2.2 End Users (on behalf of our Customers)

• Calls: phone numbers, audio recordings of calls, transcripts, call metadata and AI-generated summaries and analysis.
• Website widget: conversation text and voice, and the page context needed to answer.
• WhatsApp: phone number, messages, voice notes and their transcripts.
• Outbound campaigns: contact lists the Customer imports (from a CRM, Google Sheets, a calendar or a file) and the outcome of each call or message.
• Client records: for each phone number that calls a Customer’s agent, the Customer’s dashboard keeps a client record — the names heard on its calls, the call history (date, topic, outcome), appointments, an address the caller gave, and tags and notes the Customer adds, including notes the agent follows. When that number calls again, the agent is told the name, the last calls, an upcoming appointment and those notes, so the caller isn’t asked the same things again. It confirms who is speaking before using them, never reads out addresses, order contents or the Customer’s notes, and for clinics, therapists and lawyers it doesn’t say a caller’s name before they do (the Customer can change that). A Customer can block a number: its calls then end after one sentence.
• Details End Users provide during a conversation — e.g. name, email, appointment or order details, and, when a Customer uses form assistance, form fields that may include a national ID number. The agent is designed not to collect passwords, PINs or payment card numbers.

3. How we use data and our legal bases

We do not use Customer content or End User conversations to train AI models, and we do not sell personal data. We process End User conversations only on behalf of the Customer whose agent handled them — to run that agent, give the Customer transcripts and summaries, improve that Customer’s agent, and operate, secure and fix the Services. We do not share one Customer’s conversations with another Customer or use them for our own marketing or advertising.

4. AI agents, call recording and transparency

Phone calls handled by Woizer agents are recorded and transcribed so Customers can review them. Website and agent page conversations are transcribed, and audio is kept only if the Customer turns recording on. The website widget always shows that the visitor is talking with an AI assistant and that the conversation is recorded or transcribed, with a link to this policy; on phone numbers outside Israel the agent says so in its opening line by default. Laws on recording and on disclosing that a caller is speaking with AI differ by country and US state — some require the consent of every party, and the EU AI Act requires that people be told when they are interacting with an AI system. Customers are responsible for configuring their agent’s greeting and disclosures to meet the laws that apply to their callers, and for having consent before running outbound calling or messaging campaigns.

5. Who we share data with

We share data only with service providers that help us run the Services (“sub-processors”), with integrations a Customer chooses to connect, and when required by law. Which voice and AI providers are used for a given agent depends on its language and configuration.

Integrations you connect receive the data needed for the feature you enable — for example Google Calendar, Microsoft Outlook, Calendly, Cal.com (bookings), HubSpot and Salesforce (call outcomes), Google Sheets (contacts and outcomes), and Shopify, Wix or WordPress (store and site content). Some calendar connections are made through Composio.

6. International transfers

Data may be processed in the EU, Israel, the United States and other countries where our providers operate. The European Commission recognizes Israel as providing adequate protection. For transfers from the EU/UK to countries without an adequacy decision we rely on Standard Contractual Clauses (and the UK Addendum) or equivalent safeguards.

7. Google API Services — Limited Use disclosure

Woizer’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide these features. We do not use it for advertising, do not sell it, do not use it to train AI models, and do not allow humans to read it except with your permission for support, for security, or as required by law. You can disconnect Google at any time in your dashboard or at your Google Account permissions.

8. Cookies and tracking

We use essential cookies for login and security, and analytics and advertising technologies (Google Analytics, Google Tag Manager, Meta Pixel). Visitors in the EU/UK are asked for consent before these load; elsewhere they load by default and you can opt out at any time. We honor the Global Privacy Control signal as an opt-out. Details and your current setting: Cookie Policy.

9. Retention

• Conversations — call recordings, transcripts, summaries, messages callers left, WhatsApp conversations, website visitors' memory and messages sent to End Users: deleted automatically 12 months after the conversation. The Customer can choose 3 to 36 months. The call itself stays in the Customer's statistics (date, length, topic, outcome) without the conversation.
• Client records: deleted automatically after 24 months without a call (12 to 60 months, as the Customer chooses), unless an appointment is still ahead. When a Customer deletes a client, the record, its history and that person's transcripts and recordings are deleted at once.
• Campaign data: kept while the Customer's account is active, unless the Customer deletes it or asks us to. After an account is closed, we delete or anonymize its conversations, client records and campaign data within 90 days.
• Account data: while the account is active and up to 90 days after closure.
• Usage logs and analytics: up to 24 months.
• Billing records: as required by tax and accounting law (generally 7 years).
• Backups are overwritten on a rolling basis.

10. Security

Data is encrypted in transit and at rest, access is restricted to personnel who need it, and we use access controls, logging and monitoring. Phone numbers and emails are masked in our application logs. No system is completely secure; if a breach affects your data we will notify you and the authorities as the law requires.

11. Your rights

EU, UK and EEA

You may request access, correction, deletion, restriction, portability, and object to processing based on legitimate interests (including direct marketing at any time). Where we rely on consent you can withdraw it at any time. You may complain to your local data protection authority.

California (CCPA / CPRA)

• Categories we collect: identifiers (name, email, phone, IP), commercial information (plan, purchases), internet activity, audio recordings and transcripts, professional information, and — only when a Customer configures it — government ID numbers.
• We do not sell personal information. Using the Meta Pixel may be considered "sharing" for cross-context behavioral advertising; you can opt out on our Cookie Policy page or with Global Privacy Control.
• You may request to know, delete and correct your personal information, and we will not discriminate against you for exercising these rights.

How to make a request

Email support@woizer.com. We may need to verify your identity. If your data was collected by one of our Customers, we will forward your request to them. You can also ask the business you called: it can delete your client record, transcripts and recordings at once from its dashboard.

12. Marketing communications

We send marketing emails to businesses only where permitted, and every email includes an unsubscribe link.

13. Children

The Services are not directed to children under 16, and we do not knowingly collect their personal data.

14. Changes

We will post updates on this page and change the date above. For material changes we will notify Customers by email or in the dashboard before they take effect.

15. Contact

Woizer is operated by I.D.M, a registered business in Israel (Business ID 032882078). For privacy questions or requests: support@woizer.com.