Privacy Policy — Whisperin

1. What we collect

In plain wordsEnough to give you an account and make your videos — plus the basics any website logs. Nothing we don't need.

We collect the following, and no more than we need to run the Service:

Account data — your email, and login details (or single sign-on identifier if you use SSO).
Content you provide — prompts, scripts, uploaded footage, images, voice samples, brand assets, and the personas you create.
Generated content — the videos, images, and audio Whisperin produces for you.
Usage & performance data — how you use features and, if you connect a platform, the post metrics (views, saves, shares) we read back to tune your next batch.
Billing data — plan and transaction records. Card details are handled by our payment processor; we don't store full card numbers.
Technical data — device, browser, IP address, and cookies needed to keep the Service secure and working.

2. How we use it

In plain wordsTo make your videos, run your account, keep things secure, and — only with your permission — learn what performs for you.

We use your data to:

Generate, render, and deliver the content you ask for.
Operate your account, process payments, and provide support.
Read your connected-platform metrics to improve your results — your own numbers, used for you, not pooled into a shared model.
Keep the Service secure, detect abuse, and meet our legal obligations.

Where the law requires a legal basis (for example in the EU), we rely on performing our contract with you, your consent (especially for likeness data), and our legitimate interest in running and securing the Service.

3. Biometric & likeness data

In plain wordsA face or voice is sensitive. We only process it with explicit consent, use it solely to make your personas, and delete it when you revoke consent.

If you create a persona from a real person's face or voice, the underlying images, audio, and any models derived from them are likeness data — and where it identifies an individual, we treat it as sensitive (biometric) personal data with extra care.

Explicit consent first. We process a real person's likeness only when explicit, documented consent is in place.
Purpose-limited. We use likeness data only to build and run the persona you authorized — never to identify people, and never for advertising.
Revocable. Consent can be withdrawn at any time. When it's revoked, we stop generating with that likeness and delete the associated data and derived models within 30 days, except where the law requires us to keep a minimal record.
Not used to train shared models. See the no-train pledge below.

4. Our no-train pledge

In plain wordsWe do not train shared AI models on your content. Your work doesn't quietly become someone else's model.

We do not use your content — your prompts, footage, voices, personas, or generated outputs — to train shared or foundation models. Your material is processed to produce your results and to power features for you (like learning which of your posts perform). It is not pooled to improve a model that other customers benefit from, and we don't sell it.

If we ever want to use your content to improve a shared model, we'll ask for your explicit, opt-in permission first — separately and clearly — and you can decline without losing access to the Service.

5. How long we keep it

In plain wordsAs long as your account is active, then a short wind-down. Delete your account and your content goes with it.

We keep your data while your account is active and as needed to provide the Service. When you delete content or close your account, we remove the associated personal data within 30 days, except where we must retain a limited amount to meet legal, tax, or security obligations. Likeness data tied to revoked consent is deleted on the schedule described above. Backups are purged on a rolling cycle.

6. Who we share with

In plain wordsOnly the service providers we need to run Whisperin — under contract. We don't sell your data.

We don't sell your personal data. We share it only with:

Service providers — infrastructure, model, payment, and analytics partners who process data on our behalf, under contracts that limit them to our instructions.
Platforms you connect — when you authorize publishing, we send your content and the required AI label to that platform.
Legal & safety — where required by law, or to protect rights, safety, and the integrity of the Service.
A successor — if Whisperin is involved in a merger or acquisition, with notice to you and the same protections carried forward.

7. Your rights (GDPR & CCPA)

In plain wordsYou can see your data, fix it, take it with you, or have it deleted — and we won't punish you for asking.

Depending on where you live, you have rights over your personal data. We honor these for all users:

Access & portability — get a copy of your data in a usable format.
Correction — fix data that's wrong or incomplete.
Deletion — have your data erased ("right to be forgotten").
Objection & restriction — object to or limit certain processing.
Withdraw consent — including for any likeness data, at any time.
No sale & no discrimination — we don't sell your data, and we won't deny you service or charge you more for exercising a right.

To exercise any right, email privacy@whisperin.example. We'll verify your request and respond within the timeframe the law requires. You also have the right to complain to your local data-protection authority.

8. Security

In plain wordsWe encrypt data in transit and at rest and limit who can touch it. No system is perfect, so we'll tell you if something goes wrong.

We protect your data with encryption in transit and at rest, access controls that limit who can reach it, and ongoing monitoring. No method of storage or transmission is completely secure, but if a breach affects your personal data, we'll notify you and the relevant authorities as the law requires.

9. Changes to this policy & contact

In plain wordsIf this policy changes in a way that matters, we'll tell you. Questions go to a real person.

We may update this policy as the Service or the law changes. If a change is material, we'll give you reasonable notice before it takes effect.

Privacy questions or requests

Email privacy@whisperin.example. For everything else, hello@whisperin.example — a real person reads it.