DRAFT: not yet approved
This text is a draft prepared for review by Tiger Media and a lawyer. Items in [square brackets] are still open. It is not binding and must not be relied on until it is approved and published without this banner.
tigerAPI Privacy Policy
Draft prepared 27 October 2026
DRAFT FOR REVIEW BY A LAWYER. Not published, not in force, not legal advice. Items in [square brackets] are open; every one is listed in../LEGAL-OPEN-QUESTIONS.md. Hebrew counterpart:../he/privacy-policy.md.
Version: [DRAFT 0.1] · Effective date: [to be set at publication]
1. Who is responsible
Tiger Media, Tiger Media Ltd, company number 516171287, Ariel Sharon St 4, Migdal HaShachar, floor 25, Giv'atayim 5320047, Israel ("Tiger Media", "we"), runs tigerAPI. Privacy contact: info@tigerchat.co.il.
We act in two roles:
- Controller (Israel: database owner) for our own customer data: your account, billing and support details, and the technical logs we keep to run and secure the Service.
- Processor (Israel: database holder) for the content that passes through your instances: the messages, files, contacts and phone numbers of the people you communicate with. For that content you decide the purpose and means and you are the controller; we process it on your instructions to run the Service. A data processing agreement is available on request [DPA to be prepared].
2. What we collect
| Data | Why | Kept |
|---|---|---|
| Account data: name, email, company, password hash or sign-in token, plan | to create and run your account, contact you | while the account is open, then deleted (section 7) |
| Billing data: Stripe customer id, plan, invoices, last digits and brand of card. We never see or store the full card number. | to charge you and keep tax records | invoices as the law requires (in Israel, generally 7 years) [confirm] |
| Message content and metadata that pass through your instances: chat ids, phone numbers, message text, file links and types, timestamps, delivery status | to send and receive messages and to answer history requests | message journal: 7 days, then deleted automatically; queued notifications: up to 24 hours; media is not stored beyond a short-lived signed link [confirm media handling in code before publishing] |
| Instance data: the instance id, the linked number, connection state, your webhook address and settings | to run the instance | while the instance exists |
| Usage counters: requests and sends per day | to enforce limits, bill and detect abuse | 40 days |
| Security and operations logs: IP address, request time, admin and abuse actions, errors | security, abuse prevention, support | [30] days for server logs; the admin audit log and abuse reports [for up to 24 months] [confirm] |
| Support emails and abuse reports | to reply and to handle complaints | as long as needed to resolve, then [12 months] [confirm] |
We do not sell personal data. We do not use message content for advertising or to train models. Our staff access message content only when needed to fix a fault or investigate abuse.
3. Why we may process it (GDPR legal bases)
Contract (to give you the Service), legitimate interests (security, abuse prevention, service improvement that does not use message content), legal obligation (tax and accounting records), and consent where we ask for it (for example optional product emails; you can withdraw it at any time).
4. Where it is stored, and who else sees it
The Service and its database run on servers of Hetzner Online GmbH in Germany (Falkenstein). Encrypted backups are copied to [Google Drive storage operated by Tiger Media] [confirm location and provider before publishing].
Our subprocessors:
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | hosting, server backups | Germany |
| Stripe Payments Europe, Ltd. / Stripe, Inc. | card payments, invoices | EU / US |
| Resend, Inc. | account and service emails | US [confirm region before publishing] |
| Cloudflare, Inc. (DNS; edge proxying [confirm if enabled]) | DNS and traffic protection | global |
We will update this list when it changes [and notify customers of new processors in advance if a DPA is agreed]. WhatsApp itself receives the messages you send, under its own terms and privacy policy; it is not our subprocessor.
We disclose data to authorities only where the law requires it, and we tell you where the law allows.
5. International transfers
Our servers are in the EU. Tiger Media is in Israel, which the European Commission recognises as providing adequate protection [confirm status at publication]. Where a provider is outside the EEA (for example Stripe in the US), transfers rely on the mechanisms that provider offers, such as standard contractual clauses or the EU-US Data Privacy Framework.
6. Security
We use encrypted connections, access controls, separated admin interfaces, hashed API tokens, rate limiting, and encrypted off-host backups. No system is perfectly secure. If a breach affects your data we will tell you without undue delay and, where it applies, notify the authorities as the Israeli Privacy Protection Regulations (Data Security), 5777-2017 and the GDPR require.
7. Deletion and retention
- Closing an account: on request or when you close it, we delete the account, its instances and its remaining content within 30 days. Encrypted backups roll off within a further [14] days.
- Unpaid trial: the account and data are deleted about 14 days after sign-up unless you take a paid plan.
- Terminated paid account: we may delete the account and its data 30 days after the termination. Message and API logs are kept only for the limited periods in section 2 (for example the 7-day message journal and the server-log period).
- Suspended for breach: data may be kept for as long as needed to handle the matter, then deleted.
- We keep the records the law requires (for example invoices) and the minimum we need to defend legal claims.
8. Your rights
Under the Israeli Protection of Privacy Law, 5741-1981, and, where it applies, the GDPR, you can ask to see your data, correct it, delete it, restrict or object to some processing, and receive a copy in a portable form. Write to the privacy contact. We reply within 30 days. You may also complain to the Israeli Privacy Protection Authority or to your local data protection authority.
If you are the recipient of a message sent through a tigerAPI customer: the sender, our customer, is the controller of your data. Contact them first. You may also write to us and we will pass your request on or help the customer respond.
9. Your own duties as a controller
If you send messages to other people through the Service, you must have a lawful basis, give those people the notices the law requires, and honor their requests. You must not send us special-category data unless you are entitled to. [Israeli database registration with the Privacy Protection Authority may apply to you and to us; confirm.]
10. Cookies and the website
The website and console use cookies that are strictly necessary to keep you signed in and secure. [If analytics are added, this section must be updated and a consent step added.]
11. Children
The Service is for people aged 18 and over. We do not knowingly collect data from children.
12. Changes
We will post changes here with a new date and notify you of material ones by email or in the console.
Contact: Tiger Media, Ariel Sharon St 4, Migdal HaShachar, floor 25, Giv'atayim 5320047, info@tigerchat.co.il.