WhetCloud Privacy Policy

1. Scope and Roles

This Policy applies to WhetCloud-controlled websites, contact forms, business communications, client portals, demonstrations, events, marketing activities, and professional services, including software, website, mobile application, artificial intelligence, automation, cloud, consulting, maintenance, and support services.

Depending on the context, WhetCloud may act as a business or controller that decides why and how personal information is processed, or as a service provider or processor acting only under a client's documented instructions. When WhetCloud acts for a client, privacy requests about the client's data should generally be directed to that client.

2. Personal Information We Collect

The information we collect depends on how you interact with us and which services you use. We may collect the following categories:

• Contact and identity information: such as name, business name, job title, postal address, email address, telephone number, account username, and professional profile information.
• Account and authentication information: such as login identifiers, access permissions, multifactor authentication details, and account recovery information.
• Client and project information: such as business requirements, proposals, statements of work, contracts, project files, technical specifications, source materials, support tickets, credentials supplied for authorized access, and feedback.
• Communications: such as emails, messages, meeting notes, call details, form submissions, survey responses, and records of customer-support interactions. Calls or meetings will be recorded only when disclosed and permitted by law.
• Transaction information: such as purchased services, invoices, billing contact details, payment status, and tax information. Payment card or bank information may be collected directly by payment processors rather than stored by WhetCloud.
• Device, log, and usage information: such as IP address, browser and device type, operating system, referring pages, pages viewed, dates and times, approximate location derived from IP address, cookie identifiers, diagnostic data, and activity within our online services.
• Marketing and preference information: such as communication choices, areas of interest, campaign interactions, event participation, and cookie preferences.
• Security and fraud-prevention information: such as access logs, authentication events, suspected threats, system activity, and information used to investigate misuse or protect our services.
• Employment and contractor information: if you apply to work with WhetCloud, such as resume, work history, education, qualifications, professional references, compensation expectations, and legally permitted screening information.
• Other information: information you choose to provide or that is described when it is collected.

3. Sources of Personal Information

We may collect personal information directly from you; automatically through websites, applications, cookies, logs, and similar technologies; from your employer or organization; from clients and authorized users; from vendors and service providers; from referral partners; from event organizers; and from publicly available professional or business sources.

Please do not provide sensitive personal information, regulated health information, government identification numbers, financial account credentials, children's information, or other restricted data unless WhetCloud has expressly authorized the submission in a written agreement and appropriate safeguards are in place.

4. How We Use Personal Information

We may use personal information to:

• Provide, configure, maintain, secure, and support our websites, products, professional services, client portals, and accounts.
• Respond to inquiries; prepare proposals and contracts; manage projects, billing, collections, support, and client relationships; and communicate about service matters.
• Develop, test, troubleshoot, monitor, analyze, and improve our services, business processes, user experience, performance, accessibility, and security.
• Personalize content, remember preferences, understand use of our services, and measure the effectiveness of communications and marketing.
• Protect people, data, systems, and property; authenticate users; prevent fraud and abuse; enforce agreements; investigate incidents; and maintain business continuity.
• Comply with legal, regulatory, tax, accounting, audit, insurance, and reporting obligations; respond to lawful requests; and establish, exercise, or defend legal claims.
• Evaluate candidates and manage employment, contractor, and business-partner relationships.
• Create aggregated or deidentified information that is not reasonably capable of being associated with an individual, and use it for lawful business purposes.

5. Artificial Intelligence and Automated Features

Some WhetCloud services may use artificial intelligence, machine-learning models, automated workflows, or third-party AI platforms. Information submitted to an AI-enabled feature may be processed to generate responses, complete requested tasks, improve performance, detect abuse, or provide support, subject to the applicable contract and provider settings.

Do not submit confidential, personal, sensitive, regulated, or proprietary information to an AI feature unless the relevant agreement and instructions expressly permit it. WhetCloud will not use client confidential information to train a general-purpose model except with the client's express written authorization or as otherwise clearly disclosed and permitted by law.

AI-generated results may be inaccurate or incomplete and should be reviewed by a qualified person before use in legal, medical, financial, employment, safety-critical, or other high-impact decisions.

6. Cookies and Similar Technologies

We and authorized providers may use cookies, pixels, software development kits, local storage, logs, and similar technologies to keep services functioning, remember preferences, maintain security, understand usage, measure performance, and support communications or advertising.

These technologies may include strictly necessary, functional, analytics, and advertising cookies. Where required, nonessential cookies will be used only after consent. You may manage cookies through our consent tool, if available, or through browser and device settings. Blocking cookies may cause certain features to function incorrectly.

Browser-based Do Not Track signals are not interpreted consistently across the industry. Where required by applicable law, WhetCloud will honor recognized universal opt-out preference signals, such as Global Privacy Control, for the browser or device from which the signal is received.

7. How We Disclose Personal Information

We may disclose personal information to the following recipients for the purposes described in this Policy:

• Service providers and processors that support hosting, cloud infrastructure, security, analytics, communications, customer relationship management, collaboration, payment processing, accounting, project management, AI functionality, technical support, and other business operations.
• Clients, authorized users, and business partners when necessary to perform a service, complete a requested integration, manage a project, or fulfill your instructions.
• Professional advisers, auditors, insurers, financial institutions, and legal counsel where reasonably necessary for legitimate business, compliance, or legal purposes.
• Government authorities, regulators, courts, law enforcement, or other parties when required by law or reasonably necessary to protect rights, safety, data, systems, users, or the public.
• A buyer, investor, lender, successor, or adviser in connection with a merger, financing, reorganization, sale of assets, acquisition, bankruptcy, due diligence, or similar business transaction, subject to appropriate confidentiality protections.
• Other recipients when you direct us, give consent, or when the disclosure is otherwise disclosed at collection and permitted by law.

WhetCloud does not sell personal information for money. Certain disclosures involving analytics or advertising technologies may be treated as a sale, sharing, or targeted advertising under some state privacy laws even when no money is exchanged. Where applicable, you may opt out as described in Section 10.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including to provide services, maintain business and security records, comply with legal and contractual obligations, resolve disputes, enforce agreements, and support audits or claims.

Retention periods vary based on the type and sensitivity of the information, the relationship involved, applicable law, contractual requirements, security needs, and whether information is needed for an active account or project. When information is no longer required, we will delete, deidentify, or securely isolate it, subject to lawful backup and archival practices.

9. Data Security

WhetCloud uses reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse. Measures may include access controls, authentication, encryption where appropriate, secure development practices, monitoring, backups, vendor oversight, workforce confidentiality obligations, and incident-response procedures.

No method of transmission, storage, or security is completely reliable. You are responsible for using strong credentials, safeguarding authentication information, maintaining secure devices, limiting access to authorized users, and promptly notifying WhetCloud of suspected unauthorized access.

10. Your Privacy Rights and Choices

Depending on where you live and subject to applicable exceptions, you may have the right to:

• Confirm whether we process your personal information and obtain access to it.
• Request correction of inaccurate personal information.
• Request deletion of personal information.
• Obtain a portable copy of certain personal information.
• Opt out of the sale or sharing of personal information, targeted advertising, or certain profiling that produces legal or similarly significant effects.
• Limit certain uses or disclosures of sensitive personal information, where applicable.
• Withdraw consent where processing is based on consent.
• Appeal a decision regarding a privacy request, where applicable.

To exercise a privacy right, contact us using the information in Section 17 or use the privacy-request method published on our website. Please describe your request and your relationship with WhetCloud. We may verify your identity and authority before responding. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and identity verification.

We will not unlawfully discriminate against you for exercising a privacy right. We may deny or limit a request when permitted by law, such as when information is needed to complete a transaction, maintain security, comply with law, protect legal rights, or fulfill a contract. If WhetCloud processes information solely for a client, we may direct the request to that client.

11. Marketing Communications

You may unsubscribe from promotional emails by using the unsubscribe link in the message or contacting us. You may still receive nonpromotional communications about accounts, projects, transactions, security, or legal matters. Text-message choices, if applicable, will be described when you enroll; message and data rates may apply.

12. United States State Privacy Disclosures

Residents of states with comprehensive privacy laws may have the rights described in Section 10. During the preceding 12 months, WhetCloud may have collected the categories described in Section 2, used them for the purposes described in Section 4, and disclosed them to the categories of recipients described in Section 7.

California residents may also have rights to know the categories and specific pieces of personal information collected, request correction or deletion, receive information about collection and disclosure practices, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service and pricing when exercising privacy rights, subject to applicable law.

Texas residents may have rights to confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale of personal data, or certain profiling, subject to applicable law. If we deny an eligible Texas privacy request, you may appeal by replying to the decision or using the appeal method stated in that response.

We do not knowingly use or disclose sensitive personal information for purposes that require a right to limit unless we provide the required notice and choice. We do not knowingly sell or share the personal information of individuals under 16 for targeted advertising without any consent required by law.

13. International Data Transfers

WhetCloud and its providers may process information in the United States and other countries where they operate. Privacy and data-protection laws may differ from those in your location. When required, we use appropriate safeguards for international transfers, such as contractual protections, transfer assessments, or other legally recognized mechanisms.

14. Children's Privacy

WhetCloud's services are intended for businesses and adults and are not directed to children under 13. We do not knowingly collect personal information online from children under 13 without legally required parental consent. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

15. Third Party Websites and Client Services

Our services may link to or integrate with third-party websites, platforms, applications, plug-ins, and services. Their privacy practices are governed by their own policies, and WhetCloud is not responsible for those practices.

WhetCloud may design, develop, host, maintain, or support websites and applications for clients. Unless WhetCloud identifies itself as the business or controller for a particular service, the applicable client controls the personal information collected through that service and is responsible for its notices, permissions, and privacy requests.

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, practices, technology, or legal obligations. We will post the revised Policy with a new effective date and provide additional notice when required by law. Material changes will apply prospectively unless otherwise permitted by law.