Privacy Policy

This privacy policy describes how Whyst (“we,” “us,” or “our”) collects, uses, stores, and shares your information when you interact with our services (“Services”), including when you:

• Visit our website at whyst.com or any related sites
• Use our mobile application
• Engage with us through marketing, events, or other activities

If you have questions or concerns about this policy, please contact us at support@whyst.com.

• We collect personal information that you voluntarily provide, as well as certain data automatically when you use our Services.
• We do not process sensitive personal information.
• We do not receive information from third parties.
• Your information is processed for account management, service delivery, communications, security, and legal compliance.
• We share information only in limited circumstances described below.
• You have rights regarding your personal data, which vary by your geographic location.

Information You Provide

When you register for an account, make a purchase, or otherwise interact with our Services, you may provide us with:

• Name
• Email address
• Phone number
• Username and password
• Contact and communication preferences
• Payment information (processed and stored by our payment processor, Stripe — we do not store your full payment card details)

All personal information you provide must be true, complete, and accurate. Please notify us of any changes to your personal information.

Information Collected Automatically

When you access or use our Services, we automatically collect certain technical and usage information. This data does not directly reveal your identity (such as your name or email) but may include:

• IP address
• Browser type and version
• Operating system
• Device characteristics
• Language preferences
• Referring URLs
• Usage patterns and interaction data
• Log files and diagnostic information
• Location data (general, derived from IP address)

We process your personal information for a variety of purposes, depending on how you interact with our Services:

• Account management: To create, maintain, and secure your account
• Service delivery: To provide, operate, and improve our Services
• Communication: To send you updates, respond to inquiries, and provide customer support
• Security: To detect, prevent, and address fraud, abuse, and security threats
• Legal compliance: To fulfill our legal obligations and enforce our terms
• Analytics: To understand how our Services are used and to improve the user experience

We may use cookies, web beacons, pixels, and similar tracking technologies to access or store information on your device. These technologies help us understand how you use our Services, remember your preferences, and improve your experience.

Most web browsers allow you to control cookies through their settings. You can choose to block or delete cookies, though doing so may affect your ability to use certain features of our Services.

We do not sell your personal information. We have not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

We may share your information in the following situations:

• Payment processing: Payment data is shared with Stripe to process transactions
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
• Legal requirements: When required by law, regulation, legal process, or governmental request
• Protection of rights: To enforce our terms, protect the safety of our users, or defend against legal claims

Our servers are located in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate.

For users in the European Economic Area (EEA) or United Kingdom, we implement the European Commission’s Standard Contractual Clauses to ensure appropriate safeguards are in place for international data transfers.

We retain your personal information only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your information, we will either delete or anonymize it.

We implement appropriate technical and organizational measures to protect your personal information. However, no method of electronic transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your data, we cannot guarantee absolute security.

Our Services are not directed at individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected data from a user under 18 without appropriate consent, we will take steps to deactivate the account and delete the information promptly.

Depending on your location, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal information, subject to certain exceptions
• Data portability: Request a copy of your data in a structured, machine-readable format
• Withdraw consent: Where we rely on consent to process your data, you may withdraw it at any time
• Opt out of marketing: Unsubscribe from promotional communications at any time

To exercise any of these rights, contact us at support@whyst.com. We will respond to your request in accordance with applicable law.

You may also terminate your account at any time. Please note that we may retain certain information as required by law or for legitimate business purposes, such as fraud prevention.

If you are located in the European Economic Area or United Kingdom, we process your personal information based on the following legal grounds under the GDPR:

• Consent: Where you have given us clear consent to process your data for a specific purpose
• Contractual necessity: Where processing is necessary to fulfill our contract with you (e.g., providing the Services)
• Legal obligation: Where processing is necessary to comply with applicable law
• Vital interests: Where processing is necessary to protect someone’s life

If you are located in Canada, your information may be processed based on your express or implied consent. You may withdraw your consent at any time by contacting us at support@whyst.com. In certain circumstances, we may process your information without consent where permitted by law, such as for fraud prevention or legal compliance.

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and the California “Shine the Light” law:

• Right to know: You may request details about the categories and specific pieces of personal information we have collected about you
• Right to delete: You may request deletion of your personal information, subject to certain exceptions
• Right to opt out of sale: We do not sell personal information, but you have the right to opt out if this changes
• Non-discrimination: We will not discriminate against you for exercising your CCPA rights

Whyst has not disclosed or sold any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months.

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make material changes, we will notify you by posting a prominent notice on our website or by sending you a direct notification. We encourage you to review this policy periodically.

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact our Data Protection Officer:

Email: support@whyst.com