Legal
Privacy Policy
What we collect on this website, why, and what we do not do with it.
The short version: this website collects very little. The software itself runs on your server, so the customer data in your panel never touches our systems unless you ask us to look at it for support.
1. What we collect
On this marketing website we collect only what you deliberately give us, and a small amount of technical data needed to serve the pages:
- Messages you send us — your name, email or Telegram handle, and whatever you write.
- Account details — if you register for a licence or the community board, an email address and a display name.
- Technical data — IP address, browser type and referring page, in server logs, kept short-term for security and abuse prevention.
We do not collect payment card details on this website. Purchases are completed through the payment provider's own checkout, which handles card data under its own compliance regime.
2. How we use it
To answer your enquiry, to issue and validate licences, to send service messages about your licence or security, and to keep the site from being abused. That is the whole list.
We do not sell your data, we do not rent it, and we do not use your message content to train anything.
3. Cookies and local storage
This site uses no advertising or tracking cookies. We use browser storage for exactly two things:
theme— remembers whether you chose light or dark mode, so the page does not flash on the next load.- Session storage for the chat widget's current conversation, which clears when you close the tab.
Both are strictly functional. Clearing your browser storage removes them and the site continues to work.
4. Who we share with
We share data only with the service providers needed to run the site — hosting, email delivery and the AI provider behind the chat assistant. Each is bound to use it only for that purpose.
We will disclose data if legally compelled, and where permitted we will tell you before doing so.
5. How long we keep it
Support conversations are kept for as long as your licence is active plus twelve months, so we have context if you come back. Server logs are rotated within thirty days. Licence records are kept as long as required for tax and accounting purposes.
6. Your rights
Depending on where you live you may have the right to access, correct, export or delete the personal data we hold about you, and to object to certain processing. To exercise any of these, message us via the Contact page and we will respond within thirty days.
Note that data inside your own GsmWhale installation is under your control, not ours — requests about your customers' data should be directed to you as the operator.
7. Security
The site is served over TLS. Access to licence records is restricted to the staff who need it. No system is perfect, so we keep the blast radius small: we simply do not hold the data we do not need.
8. Children
This site and the software are for business use and are not directed at anyone under 16. We do not knowingly collect data from children.
9. Changes to this policy
When this policy changes materially we update the date at the top and, for licence holders, send a notice. Continued use of the site after a change means you accept the updated policy.
10. Contact
Privacy questions, data requests, or a complaint — use the Contact page. If you are not satisfied with our response you may escalate to your local data protection authority.