Security and data
In short: the chat runs on our own server in Germany, replies are written by an OpenAI cloud model in the United States, the site sets no cookies at all, and a conversation lives with us for four days. The details are below.
Where the data sits
The site chatinbot.com and the chat service run on our own servers in Germany, at the Hetzner facility. Germany is an EU country, and keeping data there is expressly permitted (תקנות העברת מידע אל מאגרי מידע שמחוץ לגבולות המדינה, התשס"א-2001, תקנה 2(8)). We keep no copy of the data in Israel: saying so plainly is more honest than promising that "the data stays in Israel".
What leaves us
The reply in the chat is written neither by a person nor by our own software, but by a language model. To produce it, the text of the conversation goes to the cloud service OpenAI OpCo, LLC in the United States. It acts on our instructions, does not use the conversation to train its models and keeps it on its side for up to 30 days.
The name and phone number you leave in the form inside the chat window do not go to the model provider: they go into an enquiry handled by our people. But if you type a phone number straight into a message, it travels with the text, and that decision is not ours to make for you.
The transfer to the United States rests on the visitor's own consent: who receives the data and in which country is written in the window before the first message, and only after that does the conversation start (תקנה 2(1)).
Nothing goes anywhere else. There are no ad networks and no third party counters here, and we do not sell data.
How long we keep things
- Chat conversation: up to four days on our server, then deleted.
- Name and phone number from an enquiry: up to three years from your last contact with us.
- Server logs (IP address, browser type, page address): 30 days, used only to run the site and keep it secure.
- At the model provider: up to 30 days on their side.
Cookies
This site sets no cookies and carries no third party analytics or advertising scripts. That is why there is no cookie banner here: there is nothing to agree to.
Your rights
You can ask to see what data we hold about you, and require us to correct or delete it (סעיף 13 וסעיף 14 לחוק הגנת הפרטיות). Write to info@israsky.co.il and we will reply within 30 days.
Accessibility
The site and the chat window are built to Israeli standard ת"י 5568 חלק 1, level AA, which is based on WCAG 2.0: full keyboard operation, a visible focus ring, text contrast of at least 4.5:1, a label on every form field, zoom to 200 % and Hebrew displayed right to left.
What we do not do
We do not use customer conversations to train models. We do not sell data and do not pass it to ad networks. We do not put pixels or counters on customer sites: the widget calls exactly one address that is external to the site, and it is ours.
What we do not have yet, honestly
We hold no ISO 27001 or SOC 2 certificate. There is no separate accessibility document for the widget. The data is not stored in Israel, and we have no European processing region at the model provider either: the text of the conversation goes to the United States. If any of that changes, we will say so here and date it.
Updated: 06.09.2026.