Privacy Policy

Last updated: October 30, 2026

nishmar ("the Service", "we") transcribes and summarizes business phone calls for business owners ("the Customer", "you"). The Service is operated by Barak Bar Chen, Modi'in, Israel. Contact: hello@nishmar.com.

1. Information we process

• Customer details: name, business name, email address, business line number and service settings (for example summary instructions and numbers you mark as private).
• Call details from your carrier: phone numbers, direction, time, duration, and the contact name you saved with the carrier.
• Call recording: retrieved from your carrier only to transcribe it. It passes through our processing systems and is not stored by us; it stays with your carrier under its terms.
• Transcript and summary of each call.
• Contact book and topics: names, companies, roles and relationships mentioned in calls or uploaded or corrected by you in your account, and topics that recur across calls.
• Technical usage data: a log of model usage per call (model, minutes, processing units) without call content, and sign-in records for your account.
• Google Drive connection: the email address of the Google account you connect and the access token Google issues (see section 4).

2. How we use information

Only to provide the Service: transcribing and summarizing calls, sending you summaries and service messages by email and WhatsApp, saving documents to your Google Drive, maintaining your contact book, computing costs and fixing problems. We do not sell information, do not use it for advertising, and do not use your call content to train artificial intelligence models.

3. Retention

• Recordings: not stored by us.
• Transcripts: deleted automatically from our systems 30 days after processing. The lasting copy is the document in your Google Drive.
• Summaries, contact book and settings: kept while your account is active and deleted within 30 days after the Service ends, or on request.
• Raw carrier event records: deleted after 30 days.
• Files in your Google Drive belong to you. We do not delete them when you disconnect.

4. Google Drive and Google user data

When you connect Google Drive, nishmar requests a single scope, https://www.googleapis.com/auth/drive.file, which allows it to create and update only the files nishmar itself created. We have no access to any other file in your Drive.

• Data accessed: the email address of the connected Google account, so you can see which account is connected, and the folder and documents nishmar creates.
• Use: we create a folder named "nishmar · שיחות", write one document per call (summary and transcript) and an index document in it, and keep them updated. This is the only use.
• Storage: the Google access token is stored encrypted in our database's secret vault and is used only by the document-saving process.
• Sharing: we do not share, transfer or sell data received from Google, and we do not use it for advertising or to develop, improve or train artificial intelligence or machine learning models.
• Revoking: you can revoke access at any time at https://myaccount.google.com/permissions; from that moment nishmar can no longer access your Drive. On request we also delete the stored token.

nishmar's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Service providers

• Your mobile carrier (currently Extra Mobile): call recording and call details, under your own agreement with the carrier.
• Supabase: database, hosted in the European Union (Frankfurt).
• Soniox: transcription; the file and transcript are deleted on their side immediately after processing.
• Anthropic (Claude): generating the summary from the transcript.
• Cloudflare: website hosting and receiving carrier notifications.
• Resend: email delivery.
• Meta (WhatsApp Business): WhatsApp messages.
• Google: saving documents to your Google Drive, under the permission you granted.
• A dedicated processing server that runs the transcription and summary workflows.

Some providers operate outside Israel, including in the United States.

6. People you speak with

Calls include information about the people you speak with. As the line owner, you are responsible for using the Service lawfully, including informing call participants where the law requires it. People who appear in calls may contact us; we will forward the request to the relevant Customer and help handle it.

7. Security

Data is encrypted in transit. Database access is restricted to server-side services, and secrets and tokens are stored encrypted. No method guarantees complete security; if we discover a security incident affecting your data, we will notify you.

8. Your rights

You can view and correct your information in your account, and request a copy or deletion by writing to hello@nishmar.com. We respond within 30 days.

9. Minors

The Service is intended for businesses and not for use by anyone under 18.

10. Changes

If we change this policy we will update the date above, and we will notify Customers in advance of material changes.