Privacy Policy

Last updated: May 27, 2026

Introduction

Who Is Right ('we', 'our') is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (GDPR) and Israeli data protection legislation.

This policy explains what data we collect, why, how we use it, and your rights as a user.

1. Data Collected

Identification data:

  • Email address (required for registration)
  • Full name (optional)
  • Date of birth (for community statistics)
  • Gender (for community statistics)

Content data:

  • Analyzed scenario subjects
  • Viewpoints and versions of facts
  • Personal profile information (qualities, flaws, passions)
  • Personal assessment evaluations
  • Conversations with AI Coach

Usage data:

  • History of analyzed scenarios
  • Community votes (Agora)
  • Accumulated points
  • Subscription plan
  • Login dates

Technical data:

  • IP address
  • Browser type and operating system
  • Pages visited and visit duration

⚠️ Important: Users are advised not to provide medical, psychological or therapeutic information. The service does not analyze such sensitive data within the meaning of Article 9 of the GDPR.

2. Processing Purposes

We use your data to:

  • Provide AI comparative analysis service
  • Personalize user experience
  • Generate anonymized statistics in Agora
  • Manage your account and subscription
  • Improve our algorithms and services
  • Send you important communications (updates, security)
  • Ensure security and prevent fraud
3. Legal Basis for Processing (GDPR)
  • Contract execution: Provide the service you requested (AI analysis, coaching, community platform)
  • Consent: Voluntary publication in Agora, non-essential cookies, marketing communications
  • Legitimate interest: Service improvement, security, fraud prevention, anonymized statistics, behavioral analysis to improve AI
  • Legal obligation: Retention of accounting data (10 years), response to legal requests
4. Data Sharing

We NEVER sell your data.

Your data may be shared with:

  • Technical partners: Hosting (EU servers), payment processor (Paddle), AI provider (OpenAI/Anthropic - anonymized data)
  • Community (Agora): Only if you voluntarily publish, and anonymized
  • Legal authorities: If required by law
5. Retention Period
  • Active account: As long as your account exists
  • After account deletion: 30 days (backup), then permanent deletion
  • Financial data: 10 years (legal accounting obligation)
  • Anonymized statistics: Indefinitely (no personal data)
6. Your Rights (GDPR)

You have the right to:

  • Access: Obtain a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Delete your data ('right to be forgotten')
  • Restriction: Limit processing in certain cases
  • Portability: Receive your data in a structured format
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: Withdraw your consent at any time

To exercise your rights: Contact us at fabrice@whoisright.co

We respond within 30 days maximum. You can also file a complaint with your country's data protection authority.

7. Automated Decision-Making and Profiling

Who Is Right uses advanced AI algorithms to analyze your data and generate analyses, advice, and verdicts.

The AI specifically analyzes:

  • Your psychological and cognitive profile
  • Your arguments and viewpoints
  • Your recurring relational patterns
  • Your decision-making and cognitive biases

These analyses do not produce legal decisions. They are designed to help you understand situations better. You always have the right to:

  • Obtain an explanation of the analysis logic
  • Challenge or modify the input data
  • Request human intervention if you wish

⚠️ AI analyses are recommendations, not absolute truths. They complement, but do not replace your personal judgment.

8. Data Security

We implement appropriate technical and organizational measures:

  • HTTPS encryption for all communications
  • Secure hosting in the European Union
  • Strict data access control (multi-factor authentication)
  • Regular encrypted backups
  • Pseudonymization of data sent to AI
  • Regular security audits
9. Cookies and Trackers

Essential cookies (no consent required):

  • User session
  • Language preferences
  • Security and authentication

Analytics cookies (with consent):

  • Anonymized usage statistics

You can disable cookies in your browser settings.

10. International Transfers

Your data is primarily hosted in the European Union. However, some technical partners (e.g., AI providers) may be located outside the EU.

In such cases, we ensure that appropriate safeguards are in place (EU Commission standard contractual clauses, Privacy Shield successor certifications).

11. Changes to this Policy

We reserve the right to modify this policy. In case of significant changes, we will inform you by email 30 days in advance.

The most recent version will always be available on this page with the update date.

Supervisors and Contact

Data Controller:

Who Is Right Ltd.

Address: 26 Hanina Ben Dosa, Tel Aviv, Israel

Manager: Fabrice Calvo

Email: fabrice@whoisright.co

Data Protection Officer (DPO):

Email: info@whoisright.co

The DPO is available to answer all questions about data processing and the exercise of your rights.

Competent Supervisory Authorities:

  • France: CNIL (National Commission for IT and Freedoms) - www.cnil.fr
  • European Union: European Data Protection Board
  • You have the right to file a complaint with the data protection authority of your country.

⏱️ Response deadline: We are committed to responding to any request regarding your rights within 30 days maximum.

🍪 We use cookies

We use essential cookies for site functionality and analytics cookies (with your consent) to improve your experience.

By continuing, you accept our use of cookies. Learn more