Privacy Policy

What we collect

We collect information you provide, such as your name, email address, account details, support or contact messages, and workflow descriptions and prompts. We also receive device, log, authentication, billing, and usage information needed to operate the site and service. Stripe handles payment details; WhichAI receives billing and subscription information needed to manage your account.

How we use it

We use this information to provide workflow recommendations, maintain accounts, process subscriptions, answer support requests, send operational messages, improve the service, measure site performance, and detect abuse or security issues. Workflow prompts are sent to Perplexity for AI processing and the resulting workflow may be stored in your account history.

Service providers

We use Supabase for authentication and application data, Stripe for subscriptions and billing, Perplexity for AI prompt processing, Meta for advertising and conversion measurement, Google Analytics 4 for site analytics, and Resend for operational email. We may use Twilio for optional administrator SMS notifications when that integration is configured. These providers may process information on our behalf or under their own terms and privacy policies. We do not sell personal information.

International processing

WhichAI and its providers may process and store information in countries other than where you live. Those countries may have different data protection rules. By using the service, you understand that information may be transferred internationally as needed to operate it.

Retention and deletion

We keep account details and saved workflows while your account is active. When you delete the account, the active account record and saved workflow history are removed through the deletion flow described below. We generally retain contact, lead, and support inquiry records for up to 12 months after the last interaction, and security, abuse-prevention, and rate-limit records for up to 90 days.

Deleted information may remain in restricted backups for up to 30 days before those backups rotate. Billing, transaction, tax, fraud-prevention, dispute, or legal records may be retained for up to 7 years when required for those purposes. A legal hold or active dispute may require longer retention. Records controlled by service providers are subject to their retention requirements and applicable law. We may delete information sooner when it is no longer needed.

You can delete an account from dashboard settings. The current deletion flow cancels any active Stripe subscription, deletes the Stripe customer, removes the Supabase profile and saved workflow history, and deletes the Supabase authentication user. You can also ask us to access, correct, or delete personal information through our contact form or by emailing team.whichai@gmail.com. We may need to keep some information where the law requires it.

Cookies and analytics

The site uses essential cookies or similar technologies for authentication, checkout, preferences, and security. Meta Pixel and Google Analytics 4 load only after you choose Allow analytics. If allowed, they may collect usage, device information, and consented Meta browser or click identifiers for measurement and advertising attribution. Choosing Essential only does not block account creation, checkout, or paid workflow generation. You can reopen Cookie choices from the site footer or the start flow.

Updates and contact

We will post changes to this policy on this page and update the date above. Privacy questions and requests can be sent through our contact form or to team.whichai@gmail.com.