Privacy Policy

1. Introduction

Whizpot Labs, Inc. ("Whizpot," "we," "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our Service. It applies to all users worldwide and supplements region-specific notices.

2. Data We Collect

• Account and Identity Data: Name, email address, authentication credentials, profile avatar, timezone, and OAuth tokens.
• Organization and Workspace Data: Organization name, slug, domain, plan tier, feature flags, billing profile, and audit logs.
• Project and Work Item Data: Projects, features, stories, tasks, issues, sprints, acceptance criteria, test cases, and time entries.
• AI Interaction Data: Prompts sent to Qwen, AI responses, and interaction logs. AI data is retained for model improvement only with explicit opt-in consent.

3. How We Use Your Data

We process personal data to:

• Provide, maintain, and improve the Whizpot platform
• Authenticate users and enforce role-based access control
• Process payments and manage subscriptions via Stripe
• Generate audit trails for compliance (SOC 2, GDPR, HIPAA)
• Power AI features (Qwen inference, embedding search, duplicate detection)
• Detect fraud, abuse, and security incidents

4. Your Rights

Depending on your location, you have rights to access, correct, delete, or export your personal data. You may also object to processing or withdraw consent at any time.

To exercise your rights, email privacy@whizpot.app.

5. Data Security

We implement technical and organizational measures aligned with SOC 2 Type II and ISO 27001 frameworks, including AES-256 encryption at rest, TLS 1.2+ in transit, MFA enforcement, and RBAC audit logging.

6. Contact Us

Data Protection Officer: dpo@whizpot.app
General Privacy Inquiries: privacy@whizpot.app
Postal Address: Whizpot Labs, Inc., 548 Market Street, Suite 400, San Francisco, CA 94104, USA