Privacy Policy
This Privacy Policy explains how Whisperer ("Service", "we") collects, uses and protects personal data in accordance with Federal Law No. 152-FZ (Russia) and the EU General Data Protection Regulation (GDPR), where applicable.
The legal bases for processing are the Consent to the Processing of Personal Data granted by the user at registration, and performance of the contract — the Terms of Use (public offer). Marketing communications require a separate, voluntary Consent to Marketing Communications.
1. Data We Collect
1.1 Registration data
When you create an account: email address, name (optional). Passwords are stored as cryptographic hashes (bcrypt) and are never stored in plain text.
1.2 Audio data
During an active session, Whisperer processes the audio stream from your device's microphone. Audio is transmitted to external speech-to-text (STT) API platforms that the Service integrates with and immediately converted to text. Raw audio files are not retained.
1.3 Transcripts and session context
Text transcripts of conversations are stored within your account and accessible only to you. You can delete any transcript at any time from your dashboard.
1.4 Technical data
IP address, browser type, operating system, error logs — collected automatically to ensure service reliability.
1.5 Analytics data (with your consent)
If you consent to analytics cookies, Yandex Metrika and Google Analytics 4 (GA4) collect aggregated visit statistics: page views, clicks, time on site. Data is aggregated and anonymised.
2. Purposes of Processing
| Data | Purpose | Legal basis |
|---|---|---|
| Email, name | Account identification and communication | Contract performance (GDPR Art. 6(1)(b); 152-FZ Art. 6) |
| Audio / transcripts | Delivering the core service — real-time hints | Contract performance |
| Technical data | Security, debugging, abuse prevention | Legitimate interest (GDPR Art. 6(1)(f)) |
| Analytics | Product improvement | Consent (GDPR Art. 6(1)(a)) |
3. Data Storage and Security
Data is stored on servers located in Russia and/or the EU. We apply TLS 1.2+ encryption in transit, bcrypt password hashing, and role-based access controls.
Personal data of inactive accounts is deleted 3 years after the last login, or sooner upon request.
4. Third-Party Disclosure
We do not sell or transfer your personal data to third parties, except for sub-processors required to operate the service:
- External AI/API platforms — to perform the core functions of the Service (speech recognition and generation of text hints), the audio stream and session text are transmitted to integrated external speech-processing API platforms and AI models. Only the volume of data necessary to provide the service is transmitted; raw audio files are not retained.
- Yandex Metrika — web analytics (only with your analytics consent). Yandex privacy policy: yandex.com/legal/confidential
- Google Analytics 4 (GA4) — web analytics (only with your analytics consent). Google privacy policy: policies.google.com/privacy
- Cloud infrastructure providers (hosting, CDN) — to the extent necessary to process requests.
We may disclose data when required by a court order or competent authority, to the extent required by law.
5. Your Rights
Under GDPR Art. 15–22 (and 152-FZ Art. 14–21 for Russian residents) you have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erase your data (right to be forgotten);
- Restrict processing;
- Withdraw consent for analytics at any time via cookie settings;
- Lodge a complaint with your national data protection authority (EU/EEA) or Roskomnadzor (Russia).
To exercise your rights, send a request to support@whisperer.one. We will respond within 30 days.
6. Cookies
For a detailed description of cookies used, see our Cookie Policy.
7. Children
The Service is not directed at persons under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact support@whisperer.one.
8. Policy Updates
We will notify you of material changes by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
9. Contact
Shakhbanov Zurab Mukhtarovich (sole trader)
INN 054203786124, OGRNIP 326050000099429
Email: support@whisperer.one