Privacy Policy
Last updated: July 5, 2026
Whaisper ("we," "us," or "our") operates the Whaisper voice delegation system, including our mobile application, Apple Watch app, and the website whaisper.com (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.
1. Information We Collect
1.1 Information You Provide
- Account information: name, email address, phone number, and payment information when you create an account or make a reservation.
- Voice data: audio recordings and transcriptions of voice commands you delegate through the Whaisper app or ring.
- Task data: details of tasks you delegate (scheduling, messaging, research queries, booking requests, etc.).
- Communications: messages and interactions between you and your Whaisper agents and human supervisors.
- Preferences: your settings, preferences, and feedback provided within the app.
1.2 Information Collected Automatically
- Device information: device type, operating system, unique device identifiers, and mobile network information.
- Usage data: how you interact with the Service, including features used, timestamps, and session duration. We use PostHog for product analytics to understand usage patterns and improve the Service.
- Log data: IP address, browser type, pages visited, and crash reports.
1.3 Information from Third Parties
If you connect third-party services (calendar, email, travel platforms), we may receive information from those services as needed to fulfill your tasks.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including executing tasks you delegate to your Whaisper agents and human supervisors.
- Process transactions and send related information (confirmations, receipts).
- Personalize and improve the Service, including training our AI systems to better understand and respond to your requests.
- Communicate with you about updates, security alerts, and support.
- Monitor and analyze usage trends to improve user experience.
- Detect, prevent, and address technical issues and security threats.
- Comply with legal obligations.
3. How We Share Your Information
We do not sell your personal data. We may share your information in the following circumstances:
- Human supervisors: when a task routes to human review (payments, negotiations, or genuine ambiguity), the relevant task data is shared with our human supervisors who help resolve your requests. These team members are bound by strict confidentiality agreements.
- AI services: voice and task data may be processed by the following third-party AI providers to power our agent capabilities:
- OpenAI — natural language understanding and task processing.
- Anthropic — natural language understanding and task processing.
- ElevenLabs — voice synthesis for audio responses.
- Vapi — voice interaction and telephony.
These providers process data via their APIs under their respective data processing agreements and are contractually obligated to protect your data. Data sent to these providers is used solely to generate responses for you and is not used by these providers to train their models.
- Cloud infrastructure: our servers are hosted on Google Cloud Platform (GCP). Your data is stored and processed within GCP's infrastructure, which is subject to Google Cloud's security certifications and compliance standards.
- Analytics: we use PostHog to collect anonymized usage analytics (feature usage, session data, interaction patterns) to improve the Service. PostHog does not receive personally identifiable information beyond what is necessary for analytics.
- Service providers: we use third-party vendors for payment processing (Stripe) and communications. These providers only access data necessary to perform their services.
- Third-party integrations: when you connect external services (calendar, email, travel), data is shared as needed to complete your tasks.
- Legal requirements: we may disclose information if required by law, court order, or government request.
- Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred.
Any third party with whom we share your data is required to provide the same or equal level of protection as described in this Privacy Policy.
4. Data Retention and Deletion
We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and all associated personal data at any time by:
- Using the account deletion feature within the Whaisper app (Settings > Account > Delete Account).
- Contacting us at privacy@whaisper.com.
Upon receiving a deletion request, we will delete your account and all associated personal data within 30 days, except where we are legally required to retain certain information.
5. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security audits. Our infrastructure is hosted on Google Cloud Platform (GCP), which maintains SOC 2, ISO 27001, and other industry certifications. However, no method of transmission over the Internet or electronic storage is 100% secure.
6. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: request a copy of the personal data we hold about you.
- Correction: request correction of inaccurate data.
- Deletion: request deletion of your data (see Section 4).
- Portability: request a copy of your data in a portable format.
- Opt-out of tracking: we respect the App Tracking Transparency framework on iOS. You can manage tracking permissions through your device settings.
- Withdraw consent: where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@whaisper.com.
7. Children's Privacy
The Service is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take steps to delete it.
8. International Data Transfers
Your information is stored and processed on Google Cloud Platform servers in the United States. Data may also be processed by our third-party service providers (OpenAI, Anthropic, ElevenLabs, Vapi, PostHog, Stripe) whose servers are located in the United States. We ensure that appropriate safeguards are in place to protect your data in accordance with applicable laws.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us: