Legal
Privacy Policy
Last Updated: February 24, 2025
At Whiskbot, we take your privacy seriously. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Whiskbot, you agree to the practices described below.
1. Information We Collect
Account Information
When you register for Whiskbot, we collect your name, email address, and password (stored securely as a hashed value). If you sign up using Google OAuth, we collect your Google profile name and email address.
Usage Data
We collect information about how you use our service, including the number of images generated, session activity, and browser extension interactions. This helps us improve performance and enforce fair usage limits.
Device & Session Information
We may collect information about the devices you use to access Whiskbot, including browser type, operating system, and unique device identifiers, to manage device limits and prevent unauthorized access.
Payment Information
If you subscribe to a paid plan, payment details are processed securely by our third-party payment processor. We do not store your full credit card number on our servers.
2. How We Use Your Information
To Provide the Service
We use your information to operate Whiskbot, authenticate your account, enforce subscription limits, and deliver the image generation automation features you signed up for.
To Communicate With You
We may send you transactional emails such as account confirmations, password resets, subscription updates, and responses to your support or contact requests.
To Improve Our Service
Usage data helps us understand how our extension and web platform are used, allowing us to fix bugs, optimize performance, and build better features.
To Enforce Our Policies
We use account and device data to enforce our Terms of Service, including device limits, daily image generation quotas, and plan expiry rules.
3. Information Sharing
We Do Not Sell Your Data
Whiskbot does not sell, rent, or trade your personal information to third parties for marketing purposes.
Service Providers
We may share data with trusted third-party service providers who help us operate our platform — such as payment processors, email delivery services, and cloud hosting providers — under strict confidentiality agreements.
Legal Requirements
We may disclose your information if required to do so by law or in response to valid legal processes, such as a court order or government request.
4. Your Product Images
Local Processing
Whiskbot operates directly with your local files on your device via the Chrome extension. Your product images are NOT uploaded to our servers. We never store, access, or transmit your product photos.
Generated Images
Images generated through Google Whisk are processed on Google's infrastructure. Please refer to Google's Privacy Policy for how they handle AI-generated content.
5. Cookies & Tracking
Session Cookies
We use session cookies to keep you logged in and maintain your authentication state across pages.
No Third-Party Trackers
We do not use advertising trackers or cross-site tracking cookies. Our analytics, if any, are limited to understanding general usage patterns.
6. Data Retention
Account Data
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.
Contact Submissions
Support and contact requests are automatically deleted after 30 days of submission.
7. Security
How We Protect Your Data
We implement industry-standard security measures including password hashing, HTTPS encryption, and secure token-based authentication (JWT) to protect your personal information.
Your Responsibility
Please keep your account credentials confidential and notify us immediately if you suspect unauthorized access to your account.
8. Your Rights
Access & Correction
You have the right to access the personal data we hold about you and to request corrections if it is inaccurate.
Deletion
You may request deletion of your account and associated personal data by contacting us. We will process your request within 30 days.
Opt-Out
You may opt out of non-essential communications by contacting us directly via our Contact page.
9. Children's Privacy
Age Requirement
Whiskbot is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will delete it promptly.
10. Changes to This Policy
Updates
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page. Continued use of Whiskbot after changes are made constitutes your acceptance of the updated policy.
11. Contact Us
Questions?
If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us through the Contact page on our website.