Privacy Policy
This Privacy Policy explains how Whisperer ("Service", "we") collects, uses and protects personal data in accordance with Federal Law No. 152-FZ (Russia) and the EU General Data Protection Regulation (GDPR), where applicable.
1. Data We Collect
1.1 Registration data
When you create an account: email address, name (optional). Passwords are stored as cryptographic hashes (bcrypt) and are never stored in plain text.
1.2 Audio data
During an active session, Whisperer processes the audio stream from your device's microphone. Audio is sent to speech-to-text servers and immediately converted to text. Raw audio files are not retained.
1.3 Transcripts and session context
Text transcripts of conversations are stored within your account and accessible only to you. You can delete any transcript at any time from your dashboard.
1.4 Technical data
IP address, browser type, operating system, error logs — collected automatically to ensure service reliability.
1.5 Analytics data (with your consent)
If you consent to analytics cookies, Yandex Metrika collects aggregated visit statistics: page views, clicks, time on site. Data is aggregated and anonymised.
2. Purposes of Processing
| Data | Purpose | Legal basis |
|---|---|---|
| Email, name | Account identification and communication | Contract performance (GDPR Art. 6(1)(b); 152-FZ Art. 6) |
| Audio / transcripts | Delivering the core service — real-time hints | Contract performance |
| Technical data | Security, debugging, abuse prevention | Legitimate interest (GDPR Art. 6(1)(f)) |
| Analytics | Product improvement | Consent (GDPR Art. 6(1)(a)) |
3. Data Storage and Security
Data is stored on servers located in Russia and/or the EU. We apply TLS 1.2+ encryption in transit, bcrypt password hashing, and role-based access controls.
Personal data of inactive accounts is deleted 3 years after the last login, or sooner upon request.
4. Third-Party Disclosure
We do not sell or transfer your personal data to third parties, except for sub-processors required to operate the service:
- Yandex Metrika — web analytics (only with your analytics consent). Yandex privacy policy: yandex.com/legal/confidential
- Cloud infrastructure providers (hosting, CDN) — to the extent necessary to process requests.
We may disclose data when required by a court order or competent authority, to the extent required by law.
5. Your Rights
Under GDPR Art. 15–22 (and 152-FZ Art. 14–21 for Russian residents) you have the right to:
- Access your personal data;
- Rectify inaccurate data;
- Erase your data (right to be forgotten);
- Restrict processing;
- Withdraw consent for analytics at any time via cookie settings;
- Lodge a complaint with your national data protection authority (EU/EEA) or Roskomnadzor (Russia).
To exercise your rights, send a request to hello@whisperer.cc. We will respond within 30 days.
6. Cookies
For a detailed description of cookies used, see our Cookie Policy.
7. Children
The Service is not directed at persons under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, contact hello@whisperer.cc.
8. Policy Updates
We will notify you of material changes by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
9. Contact
Shakhbanov Zurab Mukhtarovich (sole trader)
INN 054203786124
Email: hello@whisperer.cc