Privacy Policy | Terms

Privacy Policy and Terms of Service updated 2024.10.23

Thank you for choosing to be part of our community at this website ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have questions or concerns about this privacy notice or our practices regarding your personal information, please contact us at the contact address listed on this website.

When you visit https://mail.whale.tips/ (the "Website") or use any of our services, sales, marketing, events, or related features (collectively, the "Services"), you are trusting us with your personal information. This notice explains what information we collect, how we use it, when we may share it, and what rights you may have. If you do not agree with the terms of this notice, please discontinue use of the Services.

Table of Contents

1. What information do we collect?
2. How do we use your information?
3. Will your information be shared with anyone?
4. Do we use cookies and other tracking technologies?
5. How do we handle Google OAuth, Apple OAuth, and other third-party logins?
6. How long do we keep your information?
7. How do we keep your information safe?
8. Do we collect information from minors?
9. What are your privacy rights?
10. Controls for Do-Not-Track features
11. Do California residents have specific privacy rights?
12. Do we make updates to this notice?
13. How can you contact us about this notice?
14. Custom products

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide when you register on the Website, request information about us or our products and Services, participate in activities on the Website, make purchases, or otherwise contact us.

The personal information we collect depends on the context of your interactions with us, the choices you make, and the products and features you use. This may include names, phone numbers, email addresses, mailing addresses, contact preferences, and similar information.

Payment data. We may collect data necessary to process your payment if you make purchases, such as your payment instrument number and security code. Payment processing data is handled by Stripe. Stripe's privacy notice is available at https://stripe.com/privacy.

Third-party login data. We may offer the ability to register or log in using a supported third-party identity provider, including Google OAuth and Apple OAuth / Sign in with Apple. If you choose to use one of these login methods, we may receive limited profile and authentication information from that provider, as described in the section titled "How do we handle Google OAuth, Apple OAuth, and other third-party logins?"

All personal information you provide must be true, complete, and accurate. You must notify us of any changes to that information.

Information automatically collected

In short: Some information, such as your IP address, browser details, and device characteristics, may be collected automatically when you visit or use the Website.

We automatically collect certain information when you visit, use, or navigate the Website. This information does not usually reveal your specific identity, but may include device and usage information such as your IP address, browser type, device characteristics, operating system, language preferences, referring URLs, device name, country, location, pages viewed, searches, actions taken, feature usage, dates and times of activity, system activity, error reports, and similar technical information.

This information is primarily needed to maintain the security and operation of the Website and for internal analytics and reporting.

Cookies and similar technologies. Like many businesses, we may collect information through cookies and similar technologies.

Location data. We may collect information about your device's location, which may be precise or imprecise depending on your device settings and permissions. You can opt out by refusing access or disabling location settings on your device. Some features may not work properly if location access is disabled.

2. How do we use your information?

In short: We process your information for legitimate business interests, to fulfill contracts, to comply with legal obligations, and/or with your consent.

We may use the information we collect or receive to:

• Facilitate account creation, authentication, and secure logon, including when you choose to use Google OAuth, Apple OAuth / Sign in with Apple, or another supported identity provider.
• Post testimonials with your consent.
• Request feedback and contact you about your use of the Website.
• Enable user-to-user communications where appropriate and with consent.
• Manage user accounts and keep them in working order.
• Send administrative information, including product, service, feature, policy, or terms updates.
• Protect the Services, including fraud monitoring and prevention.
• Enforce terms, conditions, and policies, comply with legal and regulatory requirements, and respond to legal requests.
• Send marketing and promotional communications consistent with your marketing preferences.
• Deliver targeted advertising and measure its effectiveness.
• Analyze usage, identify trends, evaluate campaigns, improve products and Services, and support other business purposes.

Where appropriate, we may use and store information in aggregated or anonymized form so that it is not associated with individual users and does not include identifiable personal information.

3. Will your information be shared with anyone?

In short: We share information only with your consent, to comply with laws, to provide Services, to protect rights, or to fulfill business obligations.

We may process or share your data based on:

• Consent: when you have given specific consent for a specific purpose.
• Legitimate interests: when reasonably necessary to achieve legitimate business interests.
• Performance of a contract: when necessary to fulfill the terms of a contract with you.
• Legal obligations: when disclosure is required to comply with applicable law, governmental requests, court orders, subpoenas, legal process, or public authority requests.
• Vital interests: when necessary to investigate, prevent, or act regarding policy violations, suspected fraud, potential threats to any person's safety, illegal activities, or litigation.

Business transfers. We may share or transfer information in connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business by another company.

4. Do we use cookies and other tracking technologies?

In short: We may use cookies and similar tracking technologies to collect and store information.

We may use cookies and similar technologies, such as web beacons and pixels, to access or store information. Where we provide a separate Cookie Notice, that notice explains more about how we use these technologies and how you may refuse certain cookies.

5. How do we handle Google OAuth, Apple OAuth, and other third-party logins?

In short: If you choose to register or log in using Google OAuth, Apple OAuth / Sign in with Apple, or another supported identity provider, we may receive limited information necessary to authenticate and secure your account.

Our Website may offer the ability to create or access your account through trusted third-party identity providers, including Google OAuth and Apple OAuth / Sign in with Apple. When you choose one of these login methods, the provider authenticates your identity and may share limited account information with us, such as your name, email address, unique account identifier, profile image, authentication status, and any other information you authorize the provider to share.

We use this information to create, verify, secure, and maintain your account; to help prevent unauthorized access, fraud, or misuse; to simplify the login process; and to provide the Services you request. We do not receive or store your Google or Apple password, and your use of those providers remains subject to their own privacy notices, terms, security practices, and account settings.

We use third-party login information only for the purposes described in this notice or otherwise made clear on the Website. We do not control, and are not responsible for, how Google, Apple, or any other identity provider processes your personal information outside of our Services. We encourage you to review those providers' privacy notices and manage your privacy settings directly with them.

6. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfill the purposes described in this notice unless a longer retention period is required or permitted by law.

We retain personal information only for as long as needed for the purposes set out in this notice, unless a longer period is required or permitted by law, such as tax, accounting, or other legal requirements. No purpose in this notice requires us to keep personal information for longer than the period in which users have an account with us.

When we have no ongoing legitimate business need to process personal information, we will delete or anonymize it. If deletion or anonymization is not immediately possible, such as because information is stored in backup archives, we will securely store it and isolate it from further processing until deletion is possible.

7. How do we keep your information safe?

In short: We aim to protect personal information through organizational and technical security measures.

We have implemented appropriate technical and organizational security measures designed to protect personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot guarantee that unauthorized third parties will not defeat security measures or improperly collect, access, steal, or modify information. You should access the Website only within a secure environment.

8. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

By using the Website, you represent that you are at least 18 or that you are the parent or guardian of a minor dependent and consent to that minor dependent's use of the Website. If we learn that personal information from a user under 18 has been collected, we will deactivate the account and take reasonable measures to promptly delete the data from our records. If you become aware of any data we may have collected from children under 18, please contact us at the contact address listed on this website.

9. What are your privacy rights?

In short: You may review, change, or terminate your account at any time.

If you are located in the European Economic Area and believe we are unlawfully processing your personal information, you may have the right to complain to your local data protection supervisory authority. Contact details are available at http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are located in Switzerland, contact details for the data protection authority are available at https://www.edoeb.admin.ch/edoeb/en/home.html.

If you have questions or comments about your privacy rights, please contact us at the contact address listed on this website.

Account information. You may log in to your account settings to review or change your account information. Upon a request to terminate an account, we will deactivate or delete the account and information from active databases, subject to retaining information where necessary to prevent fraud, troubleshoot issues, assist with investigations, enforce terms, or comply with legal requirements.

Cookies and similar technologies. Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies. Removing or rejecting cookies may affect certain Website features or Services. To opt out of interest-based advertising by advertisers, visit http://www.aboutads.info/choices/.

Email marketing. You can unsubscribe from marketing emails by clicking the unsubscribe link in emails we send or by contacting us using the details in this notice. We may still send non-marketing communications, such as service-related, administrative, account, or support messages.

10. Controls for Do-Not-Track features

Most browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or other automatic tracking preference signals. If a standard is adopted that we must follow in the future, we will explain that practice in an updated version of this notice.

11. Do California residents have specific privacy rights?

In short: California residents may have specific rights regarding access to personal information.

California Civil Code Section 1798.83, known as the "Shine The Light" law, permits California residents to request and obtain from us, once a year and free of charge, information about categories of personal information, if any, disclosed to third parties for direct marketing purposes and the names and addresses of those third parties for the immediately preceding calendar year. To make such a request, please submit it using the contact information below.

If you are under 18, reside in California, and have a registered account with the Website, you may request removal of unwanted data that you publicly post on the Website. To request removal, contact us using the information below and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Website, but it may not be completely or comprehensively removed from all systems, such as backups.

12. Do we make updates to this notice?

In short: Yes. We may update this notice as necessary to stay compliant with relevant laws and business practices.

The updated version will be indicated by an updated revision date and will be effective when accessible. If we make material changes, we may notify you by prominently posting a notice or by sending a direct notification. We encourage you to review this notice regularly.

13. How can you contact us about this notice?

If you have questions or comments about this notice, please contact us at the contact address listed on this website or through https://mail.whale.tips/.

Reviewing, updating, or deleting your data. Based on applicable law, you may have the right to request access to the personal information we collect from you, request changes to that information, or request deletion in some circumstances. To request review, update, or deletion of your personal information, please visit https://mail.whale.tips/. We will respond to your request within 30 days where required and appropriate.

14. Custom products

Products that have been altered, personalized, or otherwise customized to a user's specifications, including but not limited to color, size, design, imprint, engraving, or uploaded artwork, are not eligible for return, exchange, or refund for any reason other than manufacturing defects or damage occurring prior to delivery.

By placing an order for a customized product, the customer acknowledges and agrees that such items are produced specifically for the customer and cannot be resold or repurposed. This exclusion applies regardless of whether the product has been used, because customization renders the item unique to the customer's order. In the event of a confirmed defect, the Company reserves the right, at its sole discretion, to repair, replace, or refund the product in accordance with applicable consumer protection laws.