Privacy Policy

We collect the following categories of information:

• Account information. When you create an account or sign in with Google, we receive your name, email address, and profile picture from your Google account, and store your organization/workspace membership.
• Workspace content. Data you add to run voice agents — contact records, phone numbers, call recordings, transcripts, appointment and message details, and any templates or credentials you configure.
• Connected-service data. If you connect Google Calendar, Google Sheets, an SMTP mailbox, Twilio, or other integrations, we access the data needed to provide that feature (see “Google user data” below).
• Usage & technical data. Log data, device and browser information, and cookies used to keep you signed in and to operate and secure the Service.
• Advertising & measurement data. On our public pages we use analytics and advertising cookies and similar identifiers — including the Reddit Pixel — to measure which campaigns bring people to Whissle and which of those people go on to use the product. This records events such as a page view, an account being created, and a first agent, session, or call, together with a click identifier from the ad that referred you. We never send your name, email address, or phone number to an advertising platform. If your browser sends a Global Privacy Control or Do Not Track signal, we do not load these identifiers at all.

When you sign in with Google, we request only your basic profile (name, email address, and profile picture) to create and authenticate your account.

If you choose to connect Google Calendar, Google Sheets, or Gmail, we request only the specific scopes required for that feature — for example, checking calendar availability and creating, updating, or cancelling events, for which we request the single calendar.events scope (Calendar); reading a spreadsheet you select through the Google Picker, for which we request the per-file drive.file scope that grants access only to the one spreadsheet you choose — not your whole Drive (Sheets); or sending email on your behalf (Gmail). For Gmail we request only the send scope (gmail.send): we can send outbound messages such as appointment confirmations and follow-ups from your address, and we cannot read, search, modify, or delete any of your mail. We access this data only to provide the feature you enabled, and only while the connection remains active. (You may alternatively send email through an SMTP mailbox you configure instead of connecting Gmail.)

Limited Use disclosure. Whissle’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it or share it with third parties except as needed to provide and secure the Service or as required by law. We do not use Google user data to develop, improve, or train generalized or non-personalized AI/ML models. Where a feature you enable produces its output through a third-party AI provider (for example, summarizing a meeting), your Google user data is processed only transiently to operate that feature and is never used by those providers to train their models. No human reads your Google user data except where you give specific consent, where necessary for security purposes such as investigating abuse, or to comply with applicable law.

• Provide, operate, and maintain the Service and its features.
• Authenticate you and secure your account and workspace.
• Place and receive calls, transcribe conversations, and store recordings you create.
• Send transactional email/SMS you configure your agents to send.
• Provide support, and detect, prevent, and address abuse or technical issues.
• Comply with legal obligations.

We do not sell your personal information. We share it only with service providers (“subprocessors”) that help us operate the Service, under contracts that limit their use of the data, including:

• Cloud hosting and database infrastructure (e.g. Google Cloud, Vercel).
• Speech-to-text, language-model, and text-to-speech providers used to run agents.
• Telephony and messaging providers (e.g. Twilio) to place calls and send SMS.
• Integrations you explicitly connect (e.g. Google Calendar, Google Sheets).

We may also disclose information to comply with law or to protect our rights and users.

With your consent, Whissle sends transactional SMS on behalf of the business you interact with — such as appointment confirmations, reminders, and reschedule or cancellation notices. This messaging program does not send marketing or promotional texts.

Consent and opt-out. You opt in by providing your mobile number and agreeing to receive texts — either verbally during a recorded call with an AI agent, or by submitting an opt-in form on which the consent checkbox is unchecked by default. Message frequency varies, and message and data rates may apply. Reply STOP at any time to opt out, or HELP for help.

No sharing for marketing. Mobile phone numbers and SMS consent are never shared with or sold to third parties or affiliates for marketing or promotional purposes. We share them only with messaging providers (e.g. Twilio) strictly to deliver the messages you asked for.

We retain your information for as long as your account is active or as needed to provide the Service. You can delete contacts, recordings, and other workspace content, and you can disconnect integrations at any time, which revokes our access going forward. When you close your account we delete or de-identify your data within a reasonable period, except where retention is required by law.

We use industry-standard safeguards — encryption in transit, encryption of stored secrets, access controls, and least-privilege service credentials — to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to notify you of material incidents as required by law.

Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to withdraw consent for connected integrations. To exercise these rights, contact us at the address below or use the in-app controls.

The Service is not directed to children under 16, and we do not knowingly collect their data.

We may process and store information in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

We may update this policy from time to time. We will post the updated version here and revise the “Effective” date above; material changes will be communicated through the Service.

Questions about this policy or your data? Email us at privacy@whissle.ai.