Privacy Policy

WhaleClean ("we", "us", or "our") operates the website at https://www.whaleclean.app and the WhaleClean Windows desktop application. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services.

By using WhaleClean, you agree to the practices described in this policy. If you do not agree, please discontinue use of our services.

Account information: When you register, we collect your name and email address.

Payment information: All payment processing is handled by Stripe, Inc. We do not store your credit card numbers or full payment details on our servers. We receive only a transaction confirmation and the plan you purchased.

License data: We store the license keys we generate for you, your purchase plan, and relevant expiry dates.

Support messages: If you contact us via the dashboard support system, we retain the content of those messages to resolve your issue.

Usage data: We may collect standard server logs (IP address, browser type, pages visited, timestamps) for security and performance analysis. This data is not sold or shared with advertisers.

We use the information we collect to:

• Create and manage your account
• Process payments and deliver license keys
• Provide customer support
• Send transactional emails (purchase confirmations, license delivery)
• Monitor and improve the security and performance of our services
• Comply with legal obligations

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

We work with the following third-party providers who may process your data as necessary to deliver our services:

• Stripe, Inc. - payment processing (stripe.com/privacy)
• KeyAuth - license key management and validation
• Cloudflare, Inc. - DDoS protection and CDN delivery

Each provider operates under their own privacy policy and data processing agreements.

We retain your account and license data for as long as your account is active or as needed to provide services. If you request account deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Data portability

To exercise any of these rights, please use the contact form in your dashboard.

We use strictly necessary cookies to maintain your login session (via NextAuth). We do not use advertising or tracking cookies. No third-party analytics scripts are embedded on this site.

We implement industry-standard security measures including HTTPS/TLS encryption, hashed passwords (bcrypt), and Cloudflare DDoS protection. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

Our services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the effective date at the top of this page. Continued use of our services after any changes constitutes acceptance of the updated policy.

For questions or concerns about this Privacy Policy, please reach out via the contact form in your dashboard.