Whaler — Privacy Policy

Last updated: August 28, 2026 · Operated by Whalerlive ("Whaler", "we", "us").

This policy explains what information Whaler collects, how we use it, and the choices you have. It applies to whalerlive.com, the Whaler browser extension, and related services. Whaler is an independent product and is not affiliated with, endorsed by, or sponsored by Whatnot.

1. Information we collect

Account information. When you sign up we collect your email address and a password (stored only as a salted hash — we never see your plaintext password). If you connect the extension, we store the Whatnot handle your account binds to.

Public live-show activity. Whaler records information that is broadcast publicly during live Whatnot shows — when an auction closes, the winning buyer's public handle (username), the item, and the sale price are shown to everyone watching that show. We observe this public activity (via a seller's own extension on their own show, or via automated agents observing public shows) and store the handle, item, and price. We do not collect real names, email addresses, phone numbers, mailing addresses, payment details, or private messages of buyers — none of that is available to us.

Payment information. Subscriptions are processed by Stripe. Stripe collects and stores your card details directly; Whaler never receives or stores your full card number. We store a Stripe customer/subscription identifier and your plan status.

Technical information. Standard server logs and a session cookie required to keep you signed in. We keep analytics minimal.

2. How we use information

• To provide the service: build your shop's private CRM, recognize whales, and power the features you use.
• For the Marketplace network, only if you opt in (see §4): to include your shop's public-show data in aggregate market intelligence, and to give you the network's intelligence in return.
• To bill you, provide support, secure the service, and comply with law.

We do not sell buyers' personal contact information — we hold none.

3. Buyer handles & aggregation

The buyer data we hold consists of public handles, items, and prices — not identities or contact details. We aggregate these public events into whale/spend intelligence. We recognize that aggregating public data across many shows can be more revealing than any single public moment, so we limit how much individual buyer detail is exposed and we honor deletion requests (§6).

4. The Marketplace network (your choice)

The premium Marketplace surfaces cross-market whale intelligence built from participating sellers' public-show data. Participation is a reciprocity model you control in your account settings:

• Opted in (default): your shop's public-show data joins the shared network dataset, and you may access the Marketplace.
• Opted out: your shop's data is excluded from the shared dataset and used only for your own private CRM; the Marketplace is unavailable to you.

You can change this anytime; it applies going forward.

5. How we share information

• Service providers who help us run Whaler under confidentiality obligations — e.g. Stripe (payments), and our hosting/database infrastructure (Vercel, Supabase).
• Aggregate network intelligence among opted-in participants, as described in §4.
• Legal / safety — if required by law or to protect rights and safety.
• We do not sell your account information or buyers' contact details.

6. Your choices & requests (including buyers)

• Access or deletion. You — or any person who appears as a buyer handle — may request access to, or deletion of, data we hold associated with a handle by emailing Whalerlive@gmail.com. We will respond within the timeframe the law requires and remove the data unless we are required to keep it.
• Marketplace participation. Opt in or out anytime in your account settings.
• Depending on where you live (e.g. California/CCPA-CPRA, EU/UK GDPR), you may have rights to access, correct, delete, or restrict processing of your personal data, and to not be discriminated against for exercising them. Contact us to exercise these.

7. Data retention

We keep account data while your account is active and as needed to provide the service. Aggregated, handle-level public-show data may be retained to power the CRM and (for opted-in shops) the network, subject to deletion requests. On account closure we delete or de-identify your account data, retaining only what the law requires or what is de-identified/aggregated.

8. Security

We use reasonable technical and organizational measures to protect data (encrypted transport, hashed passwords, access controls). No system is perfectly secure; we cannot guarantee absolute security.

9. Children

Whaler is for business users 18 and older. We do not knowingly collect data from anyone under 18.

10. International users

Whaler is operated from the United States; using it means your information may be processed in the US. We handle EU/UK personal data consistent with applicable law where it applies.

11. Changes

We may update this policy; material changes will be notified through the service or by email. Continued use after an update means you accept it.

12. Contact

Questions or requests: Whalerlive@gmail.com.