Simple Echo

Privacy Policy


Last updated 10 August 2026 Applies to the WhatsApp Business Platform integration
Simple Echo
Yovel Yaffe, Israeli business ID 207741620
Derech Moshe Dayan 14, Yehud 5645008, Israel

01Who we are

Simple Echo builds and operates business software for its clients. This policy covers our WhatsApp Business Platform integration, which lets a client company view and reply to its own customer conversations from inside the client's own CRM.

02What we process

For each client company that connects its WhatsApp Business number, we process:

  • WhatsApp message content, timestamps and delivery status for conversations between that company and its own customers;
  • the phone numbers and WhatsApp profile names of the parties to those conversations;
  • the identity of the client's employee who sends a message from our interface.

We do not process conversations of any number that has not been deliberately connected by its owner.

03Why we process it

Solely to display those conversations to the client company that owns them, to send replies on that company's behalf, and to keep a record of what was sent. We do not use message content for advertising, profiling, resale, or training machine learning models.

04Legal basis and role

The client company is the controller of its own customer conversations. Simple Echo acts as its processor and acts only on that company's documented instructions.

05Sharing

Message data is transmitted to Meta Platforms Ireland Limited as the operator of the WhatsApp Business Platform, which is inherent to delivering a WhatsApp message. We do not sell personal data and do not share it with any other third party except hosting providers acting under contract on our behalf.

06Retention and deletion

Conversation data is retained for as long as the client company maintains its service with us. On termination, or on that company's written request, we delete it within 30 days. An individual who wishes their data removed should contact the company they were messaging, which can instruct us to delete it.

07Security

Data is encrypted in transit, access is restricted to authorised personnel, and access credentials are never logged.

08Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data by writing to info@simplecho.co.il. We respond within 30 days.

09Changes

Material changes to this policy will be published on this page with a revised date above.