Trust Center
Transparency about how WhiskFile handles your documents, protects your data, and operates as a business.
Security practices
Every file is encrypted in transit (TLS 1.2+), processed in isolated workers, and permanently deleted within 1 hour. Over half of our tools run entirely in your browser — your files never leave your device.
Privacy commitments
- Your files are never used for AI model training
- No personal data is sold or shared with advertisers
- Analytics are cookieless and privacy-first (Plausible)
- Account deletion removes all associated data within 7 days
- You can request a full data export at any time
AI processing transparency
When you use AI-powered tools (summarize, translate, contract analysis, PII detection), your document content is sent to Google Gemini for processing. We send only the minimum content needed, and no document data is retained by the AI provider after processing. AI tools are clearly labeled so you always know when external processing is involved.
Subprocessors
| Service | Purpose | Location |
|---|---|---|
| Cloudflare R2 | Temporary file storage | Global (Cloudflare network) |
| Google Gemini | AI document processing | United States |
| Resend | Transactional email delivery | United States |
| Cashfree | Payment processing (India) | India |
| Stripe | Payment processing (Global) | United States |
| Plausible | Privacy-first analytics | EU |
Data retention
Uploaded and processed files are auto-deleted within 1 hour. Job metadata is retained for 30 days (free) or 90 days (Pro). Account data persists until deletion. We never create long-term backups of user files.
Compliance
WhiskFile is designed with GDPR and CCPA principles in mind. We honor data subject rights including access, rectification, erasure, and portability. For compliance questions, contact privacy@whiskfile.com.
Contact
For security concerns, email security@whiskfile.com. For privacy questions, email privacy@whiskfile.com. For general support, email support@whiskfile.com.