Privacy Policy

Last updated: 2026-09-30

1. Who we are

My Thesis operates a WhatsApp messaging platform for business applications. The business behind My Thesis is:

2. Our role

We act as a service provider (processor) for the business applications that use our platform. Each business application is the controller of its end users' personal data and publishes its own privacy notice explaining how it uses that data. If you message a business on our platform, that business's notice is your main reference. We process data only to deliver its messages and on its instructions.

3. What data we process

• Your WhatsApp phone number, so messages can be routed and replies delivered. It is stored encrypted and used only for sending; the business sees at most its last three digits.
• Message content (text and media you send or receive), handled only transiently and encrypted while it is being delivered.
• Delivery metadata, such as timestamps, delivery status and error codes, and one-way keyed hashes of identifiers and of message text.

4. Why we process it

Only to deliver messages between you and the business applications we operate the platform for, to keep delivery reliable and secure, and to meet WhatsApp Business Platform rules. We do not use your data for advertising or profiling.

5. Separation between businesses

Each business application on the platform receives only its own conversations. Identifiers are hashed with a separate key for each application, so the same person cannot be linked across applications, and one application's messages never reach another.

6. Retention

We do not keep message content at rest. It is held only transiently and encrypted, and deleted shortly after delivery to the business application. Delivery metadata and hashes are kept while needed to run the service and are deleted when the business application asks us to forget you.

7. No sale of data

We do not sell, rent or share your personal data for advertising or any other commercial purpose.

8. Subprocessors

• Meta Platforms, for the WhatsApp Business Platform, which carries the messages.
• Cloudflare, for secure network delivery to our servers.

Some of these providers may process data outside Israel, under their own safeguards.

9. Security

Incoming messages are accepted only with a valid Meta signature, stored transiently encrypted, and passed to business applications over authenticated channels.

10. Your rights

Under Israel's Privacy Protection Law, 1981, and, where it applies, the EU General Data Protection Regulation (GDPR), you may ask to access, correct or delete your personal data, object to or restrict processing, and complain to a supervisory authority (in Israel, the Privacy Protection Authority). Because each business application is the controller, we may pass your request to that business and help it respond. You can write to us directly at the contact below.

11. How to opt out

You can block the business number in WhatsApp at any time, and you can ask the business, or us at the contact below, to stop messaging you and to delete your data. See our data deletion instructions.

12. Changes

We may update this policy. The date at the top shows the latest version.

13. Contact

Email contact@mythesis.app, phone +972 54-453-0792, or write to Uri Lesser 6/35, Tel Aviv, Israel.