1. Who is responsible for your data
Whaleboom (shenzhen) Technology Co.,Ltd (operating under the brand “WhaleBoom”) is responsible for personal data collected directly from account holders and visitors to our service. You can contact our privacy team at admin@whaleboom.com.
When a merchant uses WhaleBoom to collect information from its own customers—for example through a published site, booking form, membership feature, or contact form—the merchant decides why that information is collected. The merchant is responsible for its customer-facing privacy notice and lawful use; WhaleBoom processes that information to provide the service.
2. Information we collect
- Account information: name, business name, email address, authentication details, account role, and sign-in provider identifiers.
- Business and website content: services, locations, opening hours, brand preferences, domain information, uploaded files, prompts, generated text and images, and published pages.
- Merchant customer data: information a merchant chooses to collect or upload through supported booking, customer, membership, or support features.
- Technical and usage data: IP address, browser and device information, timestamps, session and security events, error logs, feature usage, and pages or actions used in the service.
- Communications: messages, support requests, privacy requests, and feedback sent to us.
Do not submit health records, biometric data, full payment-card data, government identification numbers, or other regulated or sensitive data unless WhaleBoom has expressly enabled that use and provided the required written terms.
3. Why we use information and our legal bases
- To create and administer accounts, generate websites, publish content, connect domains, send service emails, and provide requested features—because this is necessary to perform our agreement with you.
- To secure, debug, monitor, and improve the service; prevent abuse; understand feature performance; and provide support—based on our legitimate interests in operating a reliable business service.
- To meet accounting, compliance, legal-process, and regulatory obligations—where the law requires us to do so.
- To send optional marketing or use non-essential tracking—only with consent where applicable. You may withdraw consent at any time.
Where we ask for consent, refusing or withdrawing it will not affect processing that already occurred lawfully.
4. AI-assisted generation
WhaleBoom sends the prompts, business facts, source content, and requested output settings needed to generate content to configured AI service providers. AI output may be inaccurate, incomplete, or unsuitable. Merchants must review generated text and images before publishing and must not include sensitive personal data in prompts.
WhaleBoom does not use AI to make decisions that produce legal or similarly significant effects about account holders. We may use automated checks to protect the service, detect abuse, and enforce technical limits; you may contact us if you believe a check affected your account incorrectly.
5. When we share information
We share only what is reasonably needed with:
- Cloud hosting, database, storage, content-delivery, and security providers, including Amazon Web Services and Cloudflare.
- Authentication and email-delivery providers, including Google and Resend, when you use the relevant feature.
- AI model and model-routing providers used for the generation you request.
- Professional advisers, authorities, or counterparties when reasonably necessary to comply with law, protect rights and safety, or complete a corporate transaction.
We do not sell personal information. We do not share personal information for cross-context behavioural advertising.
6. International processing
WhaleBoom is operated from China and uses service providers with infrastructure in multiple countries. Your data may therefore be processed outside the country where you live or operate. Where applicable law requires a transfer mechanism or safeguards, we use the provider terms and other legally available safeguards relevant to that transfer. Contact us for information about safeguards relevant to your data.
7. Retention
We keep account, website, and merchant customer data while the account is active and for only as long afterward as needed to provide the service, resolve disputes, enforce agreements, meet legal obligations, and protect the service. Retention is determined by the type of record, whether the account remains active, legal requirements, security needs, and any deletion request.
When data is deleted from active systems, encrypted backup copies may remain until they are overwritten through the ordinary backup cycle. We may retain a minimal record of a request or transaction where required for security, fraud prevention, or legal compliance.
8. Cookies and similar technologies
WhaleBoom currently uses essential first-party cookies or local browser storage to keep you signed in, preserve an anonymous draft, remember interface language, prevent abuse, and maintain security. Names may include session, anon_token, and ui_lang. These are required for the requested service. We will request consent before introducing non-essential analytics or advertising cookies where the law requires it.
9. Your privacy rights
Depending on your location, you may ask to access, correct, delete, restrict, or receive a copy of your personal data; object to certain processing; or withdraw consent. You may also complain to the data-protection authority where you live or work. California residents may request to know, correct, or delete covered personal information and may exercise applicable opt-out and non-discrimination rights. Singapore residents may request access or correction and may withdraw consent, subject to applicable exceptions.
Email admin@whaleboom.com from the address associated with your account. We may verify your identity before completing a request. You may also follow our account deletion instructions.
10. Security
We use technical and organisational measures designed to protect data, including encrypted transport, access controls, protected cloud credentials, database encryption, backups, and monitoring. No system can guarantee absolute security. Do not send passwords, verification codes, secret keys, or full payment-card details by email or support message.
11. Age restriction
WhaleBoom is a business service for users aged 18 or older. We do not knowingly allow anyone under 18 to create or operate an account.
12. Changes and contact
We may update this policy as the service changes. We will post the updated version and change the “Last updated” date, and we will provide additional notice where required. Privacy questions and requests can be sent to admin@whaleboom.com.