Skip to content

Is an AI agent allowed on WhatsApp?

Yes, when it is task-specific. Meta's 2026 policy allows business agents built for defined jobs like booking and customer service, and restricts general-purpose bots. On top of that sit privacy rules: Israel's Privacy Protection Law with Amendment 13, in force since August 2025, and GDPR where it applies. sendom is built as a task-specific agent on the official WhatsApp Business API, with opt-in, consent and data-handling duties implemented in code, not in promises.

The rules, in plain language

Meta's 2026 policy.

Task-specific business agents are allowed: booking, support, order handling. General-purpose do-everything bots are restricted. Business-initiated messages outside a 24-hour window require pre-approved templates with clear opt-out. sendom operates inside these lines by design.

Israel: Amendment 13.

Since August 2025, Israeli privacy law carries real teeth: duties on how customer data is collected, secured and used, and real enforcement. A business using an AI agent is the data controller; the vendor processing conversations for it is the processor and needs a data processing agreement.

Consent, enforced in code.

Every business-initiated message in sendom flows through a single consent checkpoint. A customer who opted out is skipped automatically, and 'STOP' or 'הסר' is honored permanently. This is not a policy document, it is a gate the software cannot bypass.

Your data, your database.

Conversations, contacts and bookings live in a database that belongs to your business, exportable any time. Erasure and export requests are handled as built-in functions. We sign a data processing agreement with every client.

Related questions

Do customers need to opt in?

When a customer writes to you first, replying inside the conversation window is fine. Messages your business initiates, like reminders or review requests, require prior consent and use Meta-approved templates with a clear opt-out.

What happens when someone replies STOP?

The opt-out is recorded permanently and the system skips that number for any business-initiated message from then on. It is enforced at the software level, so no campaign can override it.

Who is responsible for the data, me or sendom?

You are the controller of your customers' data; sendom is your processor. That split is standard under both Israeli law and GDPR, and it is written into the data processing agreement we sign with you.

Can the AI leak private details?

Guardrails check every outgoing reply, and sensitive matters hand over to a human. Customer data is never used to train public models.

Is this legal advice?

No. It is practical guidance on how the rules work and how sendom implements them. For decisions specific to your business, especially in health, consult your lawyer. We will happily walk them through our setup.

Ask us the hard questions.

This page is practical guidance, not legal advice. sendom runs on the official WhatsApp Business API.