Privacy Policy

1. Overview

This Privacy Policy explains how Whisk AI ("we", "us", or "our") handles information when you visit the service, create an account, purchase credits or a subscription, upload references, enter prompts, or use AI creation tools.

Whisk AI is an online service. Uploaded files and task settings must be transmitted to systems and service providers involved in storage, AI processing, delivery, billing, and security to return a generated result.

2. Information We Collect

Account information

We may collect your name, email address, authentication-provider identifier, profile image, language and interface preferences, login activity, and account status. Passwords, when used, are stored in hashed form.

Prompts, references, and results

Depending on the workflow, Whisk AI may process:

• Prompts, negative instructions, presets, model choices, aspect ratios, and generation parameters.
• Subject, scene, style, product, person, and other image references.
• Video or audio references used by the additional creation tools available in the workspace.
• Generated images and other outputs, previews, downloads, share links, and task status.

We use this data to run the requested task, display progress, return results, calculate or reverse credits, store assets you choose to keep, support remix and edit actions, and investigate technical failures or abuse.

Billing information

Payment providers process card and payment credentials. Whisk AI does not store complete card numbers. We may retain order and provider identifiers, payment and refund status, subscription status, invoices, credit grants, tax records, and fraud signals.

Device, usage, and support information

We may collect IP address, browser and device type, operating system, referral information, pages and features used, task events, error logs, timestamps, approximate location derived from IP, security events, and messages or attachments sent to support.

3. How We Use Information

We use information to:

• Provide text-to-image, image-to-image, Whisk Remix, and other AI creation workflows.
• Authenticate accounts and manage sessions, credits, plans, purchases, assets, downloads, and sharing.
• Send receipts, security notices, task updates, and service messages.
• Diagnose failures and improve reliability, safety, and usability.
• Detect fraud, automated abuse, prohibited content, and security incidents.
• Respond to support and data requests.
• Enforce the Terms of Service and meet legal obligations.

We do not sell personal information. We do not use private prompts or uploads to train our own AI models unless we ask for and receive separate permission.

4. Reference Images and AI Processing

Whisk AI uses the references you provide only to perform the generation or editing workflow you request. Subject, scene, and style labels guide how references should influence an output; they do not change the fact that the files are transmitted for AI processing.

Inputs and task settings may be sent to third-party AI providers selected by the workspace. Those providers may retain limited operational data under their own terms and data-processing commitments.

Do not upload another person's image without permission. Avoid government IDs, financial or medical records, passwords, confidential client material, images of minors, intimate content, or other highly sensitive information that is not necessary for the task.

5. When We Share Information

We may share information with providers that support:

• AI generation, transformation, moderation, and task queues.
• Website hosting, databases, file storage, delivery, logging, and security.
• Authentication, payments, subscriptions, tax, and fraud prevention.
• Analytics, error monitoring, support, and transactional communications.
• Legal, accounting, security, and compliance advice.

We may also disclose information when required by law, to protect users or the service, or as part of a merger, acquisition, financing, or transfer of the business.

6. Retention and Deletion

Retention depends on the type of data and why it is needed:

• Inputs, task records, and generated results may be kept while needed to process and deliver a task, show asset history, enable reuse, provide support, prevent abuse, or complete a deletion request.
• Account data is kept while an account is active and for a limited period afterward where needed for security, recovery, disputes, or legal compliance.
• Billing, invoice, tax, and fraud records may be retained for required accounting and legal periods.
• Logs, backups, caches, and provider-side task metadata may remain for a limited operational period before deletion or anonymization.

Deleting an asset or account may not immediately remove copies from backups, security logs, payment records, or third-party systems where retention is required. We limit further use and delete or anonymize data when the reason for retention ends.

7. Cookies and Local Storage

We use cookies and similar browser storage for authentication, security, language and interface preferences, analytics, attribution, and abuse prevention. Blocking necessary cookies may prevent login, checkout, upload, generation, or account features from working.

8. Security

We use safeguards designed to protect information, including encrypted transport, authentication, access controls, and operational logging. No online service can guarantee absolute security.

Protect your credentials and do not upload material that would create an unacceptable risk if processed by an online AI service.

9. International Processing

Our providers may process information in countries other than where you live. Where required, we use contractual or other lawful safeguards for international transfers.

10. Your Choices and Rights

Depending on your location, you may have the right to access, correct, delete, export, object to, or restrict certain processing of personal information, withdraw consent, or complain to a data protection authority.

To make a request, contact support@whiskimage.com. We may verify your identity and retain information where required for billing, security, fraud prevention, legal obligations, or the rights of others.

11. Children

Whisk AI is not directed to children under 13, or a higher minimum age where local law requires. Do not upload images of minors unless you have clear authority and the intended use is lawful and appropriate. Contact us if you believe a child has provided personal information without proper authorization.

12. Changes and Contact

We may update this policy as Whisk AI, its providers, or applicable requirements change. The date at the top shows the latest revision, and we will provide additional notice where required.

For privacy, data, or security questions, contact support@whiskimage.com.