Privacy policy

Who we are

Azorly operates an AI-based phone answering service for businesses in Israel. This policy explains what information we collect, why, how it is stored and what rights you have under the Privacy Protection Law 5741-1981, including Amendment 13, in force since 14 August 2025.

It applies to business owners who use the service (customers) and to people who call those businesses and speak with the digital assistant (callers).

Information about callers

When someone calls a business that uses Azorly, the call is documented: the caller's phone number, a recording, a transcript, a system-generated summary and the details the caller chose to share (for example a name, preferred appointment time, description of the request).

The assistant announces at the start of the call that it is recorded and that she is a digital assistant. Callers can stop at any time and leave a message or ask for a person to call back.

Callers to healthcare businesses may share medical information. Such information is "information of special sensitivity" under the law and receives a high security level.

Information about customers

Registration details (name, email, phone), business details entered in the characterization (services, hours, handling rules), dashboard usage data, and billing details once payments launch. We do not store card numbers on our servers.

Controller and processors

The business owner is the controller of the call database for their business; Azorly processes it on their behalf under the data processing agreement attached to the terms. Azorly is the controller of its own customer data.

Sub-processors: ElevenLabs (voice and conversation processing), Twilio (telephony), Supabase (data storage), Anthropic (text processing for the dashboard copilot), Meta (WhatsApp messaging). Each is contractually bound to protect the data and use it only to provide the service.

Why we use the data

To answer calls, summarize them and deliver requests to the business; to improve the assistant's answers for that business; to provide support and bill by usage; and to meet legal duties. We do not sell data and do not use recordings to train general models.

Retention

By default, recordings and transcripts are kept for 365 days and then deleted automatically. The business owner can shorten this, delete a single call at any time, or export the data. Businesses subject to call-retention duties under the Consumer Protection Law are responsible for setting an appropriate period.

Security

Data is encrypted in transit and at rest, access is role-based and every dashboard action is logged. We follow the Privacy Protection (Data Security) Regulations 5777-2017 at the level required for databases of this kind and have appointed a privacy protection officer: privacy@azorly.co.il.

Where data is stored

Our sub-processors' servers are in the EU and the US. Transfers follow the Privacy Protection (Transfer of Data Abroad) Regulations. Israeli data residency is on our roadmap for customers who need it.

Your rights

Everyone may access the information held about them, ask to correct or delete it, and object to its use for direct marketing. Callers may contact the business they called or us; we forward the request to the business and help resolve it within 30 days.

Messages

Messages the assistant sends (request received, appointment confirmed) are service messages, not advertising. Businesses may not send advertising through Azorly without prior explicit written consent, per section 30A of the Communications Law.

Changes and contact

We will update this policy as the service changes and notify customers of material changes. Questions: privacy@azorly.co.il.