Privacy policy

Updated: 12 October 2026 · Genesis 8, Modi’in · hello@genesis-8.com

Who we are

Genesis 8 is a one-person business in Modi’in, Israel, registering as an osek patur (exempt dealer). We answer calls and messages for small businesses and send the owner the details. Genesis 8 is responsible for the information collected on this site, on our WhatsApp and on the demo lines. Contact: hello@genesis-8.com or WhatsApp 053-730-7960.

This page explains what we collect, why, who receives it, how long we keep it, and your rights. If you called or wrote to a business that is our client, read “When we answer for a business”.

What we collect, and why

Website forms (partner program): what you fill in, such as your name, phone, business name and email. Why: to get back to you.
Our WhatsApp (053-730-7960): your number, your WhatsApp display name and your messages. Today we answer our WhatsApp ourselves. After Meta approves our WhatsApp connection, an automated assistant that uses artificial intelligence will answer it, and we will update this page before that starts. Why: to answer you and follow up.
The phone demo line (when it is published; a fictional dental clinic): the call is recorded and transcribed. An automated assistant answers it. After the call we receive a summary, and your phone number is added to our enquiry list. Why: to show how the service works, to call you back if you asked, and to improve quality.
The voice demo on this site: the conversation with the assistant on the demo page is recorded and transcribed by our voice provider (ElevenLabs). Why: to run the demo and for quality control. The call library is loaded from jsDelivr only when you start a demo.
Client setup page (personal link): the business’s details, its booking link, the names, WhatsApp mobiles and emails of the people who get the call details, and staff names and work days (optional). Why: to set up and run the assistant for the business. Kept while the service runs, and deleted within 30 days after it ends.
“My assistant” page for business owners (personal link): the settings you choose (for example on or off and for how long, hours, how long your phone rings), when you changed them, and the call counts we show you. If you protect the page: a public key from your phone and its id (your fingerprint never leaves the phone), a coded PIN if you chose one, the device type and the date added. Why: so the assistant works the way you chose. Kept while the service runs, and deleted within 30 days after it ends.
Numbers business owners add to a list (optional): for example family, friends or staff, whose calls should reach the owner rather than the assistant’s questions (or the assistant only tells them the owner isn’t available and lets the owner know they called). We keep only the name the owner wrote, the last 2 digits of the number (so the owner can recognise it in the list), and a one-way code that doesn’t reveal the number. The number itself is not kept. Why: so these calls are handled the way the owner asked. Deleted when the number is removed from the list, and within 30 days after the service ends.

Both demos are a fictional clinic. There is no need to give real details, and please don’t share medical information.

You are not legally required to give us any information. It is your choice. If you don’t, we can’t get back to you.

Who receives the information

We don’t sell information and we don’t pass it on for advertising. It goes only to the providers that help us run the service, and only for that purpose:

ElevenLabs: voice answering, recording and transcription of calls and voice notes. Inside ElevenLabs, as its own sub-processors on Google’s cloud, Anthropic’s Claude writes the assistant’s spoken answers and Google’s Gemini writes the summary of each call. USA / Europe.
Anthropic (Claude): writing WhatsApp replies and summaries of WhatsApp conversations, the answers of the chat on this website, and, on a client’s setup page, reading the business’s public website to suggest services and common questions. Anthropic deletes what it receives within 30 days, but may keep messages flagged by its safety systems for up to 2 years. USA.
Meta (WhatsApp): receiving and sending WhatsApp messages. USA / Ireland.
Google (Workspace): email, the enquiry list and calendar. USA / Europe.
Telnyx: our phone lines, including the demo line. USA.
PikaPods: hosting of our automation server (n8n). European Union.
Cloudflare: website hosting (global network) and backups (European Union).
Cloudflare Turnstile: a check on our website forms, the chat and the “My assistant” page that the user is a person and not a bot. While one of them is open, Cloudflare receives technical details from your browser (such as your IP address and browser type), only for this check. See Cloudflare’s Turnstile Privacy Addendum. Global network.
Google Maps Platform (Places): on a client’s private setup page, when the client picks their own business from Google’s list, it fills in the business’s public details (name, address, phone, opening hours, website). Google’s Privacy Policy applies to that lookup. USA.

Transfers abroad: some providers process information outside Israel, in the European Union and the USA. What is in place today: we accepted Google’s Cloud Data Processing Addendum on 4 October 2026. Anthropic, ElevenLabs, Telnyx, Meta and Cloudflare apply their standard data-processing terms, which come with the accounts we opened with them. PikaPods’ data-processing agreement is part of its terms of service; on 4 October 2026 PikaPods confirmed in writing that our server is hosted in the European Union, and we have asked it for a signed copy. These terms say the provider protects the information and uses it only to provide its service to us. With AI providers, where the provider allows it, we choose settings that don’t use the information to train models.

How Genesis 8 uses Google user data (Google Calendar, for business owners who connect it)

If you are our client and connect your Google Calendar on your setup page, Google asks you to allow two things: see when your calendar is free or busy, and see and change events in your calendar. Why: only to offer your customers free times and to book their appointments in your calendar. Google’s permission technically allows more than we use. This is exactly what our system does:

It asks Google when your calendar is busy.
For the hours it is about to offer or book, it also looks at the events in your calendar, but only at their start and end time, their status (for example confirmed or cancelled), their type (for example all-day or out of office), whether they show you as busy or free, when they were created, their internal event number, and the hidden tags our assistant puts on its own appointments. It needs this to count all-day and out-of-office events as busy (Google’s free/busy answer can show them as free) and to recognise its own appointments.
It never reads the titles, descriptions, locations or guests of your events, and it never searches your calendar for a name or a phone number.
It creates appointment events, and it changes, cancels or deletes only events it created itself. To cancel or move one of them, it reads that one event.
When you connect, it reads your calendar’s name and time zone once, to check the connection works.

We have no access to your contacts or your email, and we never see your Google password.

We don’t sell this information and don’t share it with anyone, except the assistant’s providers listed above, and only to book your appointments. We don’t use it for advertising, and we don’t use it to train AI models. People at Genesis 8 look at it only when you ask us to fix a problem, for security, or when the law requires it. The access key Google gives us is stored encrypted on our automation server. To remove our access at any time: Google Account → Security → Third-party apps and services → Genesis 8 → remove access. If you stop the service, we delete the key within 30 days.

Genesis 8’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In short: how Genesis 8 accesses, uses, stores and shares Google user data

Data we access: your calendar’s free/busy times; for the hours we offer or book, only the start and end time, status, type, busy/free setting, creation time and ID of events (never their titles, descriptions, locations or guests); your calendar’s name and time zone, once, when you connect; and the appointment events our assistant creates.
How we use it: only to offer your customers free times and to create, move or cancel the appointments our assistant books in your calendar. We use it for nothing else.
Sharing: we don’t sell Google user data and don’t share it with third parties for their own use. Only the free times we work out (never event details) are passed to the providers that run your assistant (ElevenLabs for phone calls, Anthropic for messages), so the assistant can offer those times to your customers. The data passes through our automation server (PikaPods, European Union).
Storage and protection: we don’t keep copies of your calendar events: we read them at the moment of offering or booking. The access key Google gives us is stored encrypted on our automation server in the European Union, and only Genesis 8 can use it.
Retention and deletion: remove our access at any time in your Google Account (Security → Third-party apps and services → Genesis 8). When you stop the service, we delete the key within 30 days. To ask us to delete anything, write to hello@genesis-8.com.
AI and advertising: we do not use Google Workspace API data, including Google Calendar data, to develop, improve or train generalized AI or machine-learning models, and we never use it for advertising.

How long we keep it

Demo call recordings and transcripts: 30 days, then deleted.
Enquiry details (forms, WhatsApp, the enquiry list): up to 12 months if no business relationship follows. If you ask, we delete them within 30 days.
Website chat: what you type is sent to Anthropic only to answer you; we don’t keep the conversation (Anthropic keeps it up to 30 days under its terms, or up to 2 years if its safety systems flag it, and doesn’t use it to train models). If you choose to leave your details, we receive them by email, without the chat text, and keep them up to 30 days, unless a business relationship follows. If something fails on our side, the technical error log (which may include your message) is kept up to 14 days.
Technical logs on the automation server: up to 14 days. Backups: up to 60 days.

Your rights

Under the Israeli Protection of Privacy Law, 1981, you may see the information held about you and ask for it to be corrected. You can also ask us to delete it. Write to hello@genesis-8.com or WhatsApp 053-730-7960. We reply within 30 days. If you are not satisfied with our answer, you can contact the Israeli Privacy Protection Authority.

Artificial intelligence

The demo phone line and the site demo are answered by an automated assistant that uses artificial intelligence, not by a person. Today we answer our WhatsApp ourselves; after Meta approval an automated assistant will answer it too, and we will update this page first. The assistant says it is automated. It can make mistakes. It makes no decisions about you: every business decision is made by a person.

Marketing

We won’t send you advertising without your separate, explicit consent. Replying to your enquiry is not advertising. If you agreed and want to stop, write “stop” and we will.

Cookies and measurement

Right now the site uses no cookies, no analytics and no ad-measurement tools. If we add such tools (for example the Meta pixel or the Google tag), a consent request will appear first, and nothing will load without your OK. We will update this page before that happens. To keep out spam bots, the website forms, the chat and the “My assistant” page use Cloudflare Turnstile (see “Who receives the information”); it is not used for advertising or measurement.

Your browser stores the demo counter (up to two demos per visitor), the accessibility preferences you choose, and your consent choice if we ever ask for one; these are never sent to us. If you arrive through a link with source details (for example from an ad), those details are kept until you close the tab, and are sent to us with a form if you send one. For clients: the personal link to your setup page and your “My assistant” page is kept in the browser, so you don’t have to open it from the message again. You can delete all of this through “clear site data” in your browser.

Security

Only the person who runs Genesis 8, and the tools used to run the service, have access to the information, under the same confidentiality. We use reasonable security measures, such as encrypted connections and strong passwords. No method is perfect, and if an incident affects your information, we will act as the law requires.

When we answer calls and messages for a business that is our client

If you called or wrote to a business and a Genesis 8 automated assistant answered, the business is responsible for your information (it is the data controller). We process the information only for that business, under a written data-processing agreement, and use it for nothing else.

The assistant collects only what is needed to handle your enquiry: name, phone, what you asked for and when. The call is transcribed (written down as text), and the transcript is deleted after 30 days. At clinics the assistant keeps only this written transcript, with no audio recording. At other businesses the audio of the call may also be recorded, and the recording is deleted after 30 days too. The assistant gives no medical or professional advice and does not ask about symptoms or medical history.

You are not legally required to give the assistant any details. If you don’t give a name and phone, the business may not be able to get back to you.

Returning callers on the phone (only at businesses that switched it on): if you booked (or cancelled, moved an appointment, said you are running late, left a message or reported something urgent) and said your full name, on your next call the assistant can recognise the number you call from, so you don’t have to give your phone number again (the assistant asks your name as usual, and never says it first). The business can also add the names and numbers of its existing customers to the list itself. We keep, for the business, only your name and the date of the last call, encrypted, linked to the number in coded form (the number itself is not kept in this list). One name per number. Nothing is kept about anyone under 18, office or supplier calls, a hidden number, or a call you asked not to be recorded. Never a reason for the call, appointments, a treatment, a symptom or anything medical. It is deleted 2 years after the last call from that number. You can ask at any time not to be recognised any more, for example by telling the assistant “forget me”, and then it is deleted at once. The call’s privacy notice tells you about the recognition.

Transfers abroad: some infrastructure providers process the call outside Israel (in the European Union and the USA), under contractual commitments. The returning-caller list is stored only on our server in the European Union. When you call from a recognised number, only your name goes to the voice provider (ElevenLabs, USA), and only for that call.

For questions, or to see, correct or delete your information, contact the business itself: it is responsible, and requests go through it. If you contact us, we tell you whether we hold information about you, give you the business’s name and address, and pass your request to the business within 3 business days.

Changes

We update this page when something changes. The date of the last update appears at the top.