Privacy Policy

Effective May 21, 2024

We at Build Whale, Inc. ("Whale") (collectively, "Whale", "we", "us","our"), care about your privacy and the trust you place in us by providing personal data and we want to be transparent about how we use it and how we protect it.

This privacy policy ("Privacy Policy") explains how we collect, use, share, store and otherwise process your personal data when you use this website https://getwhale.co (the "Website") (the "Application" and collectively with the Website, the "Platform") or we otherwise receive your personal data in connection with our relationship with you or the business you work for. It also explains your rights in relation to your personal data.

Whale is the controller of your personal data. The controller decides how personal data about you is processed.

We keep this Privacy Policy under regular review and we will advise you of any updates or changes to this Privacy Policy, from time to time.

Information we collect from you and how we use it

We regularly collect personal data in the context of our business activities. The types of personal data relating to you that we may collect, and the purposes for which we process this data, depends on the nature of your interaction with us.

Whale may periodically collect information from you through automated means. When you browse our Website, use the iOS and Android Applications, use our services, or read our emails, we may use "cookies" or other online tracking technologies (including pixel tags, web beacons, clear GIFs and device fingerprints) in order to provide better service, facilitate your use of the site or services, store online preferences, track usage of the site or services, tailor the marketing of business services, or enhance security. Whale does not store login credentials used to link account information.

Some of our cookies are used for web analytics and intelligence about our Website. We may also use web beacons or other technologies for similar purposes and we may include these in marketing email messages in order to determine whether messages have been opened and links have been clicked on. Web beacons do not place information on your device but may work in conjunction with cookies to monitor online activity.

By using our Platform you agree that we can place cookies on your device and use other online tracking mechanisms as explained in this Privacy Policy. You may be able to control your acceptance of cookies and similar technologies on a Website, and most devices and browsers offer their own privacy settings for cookies. You will need to manage your cookie settings for each device and browser you use. If you do not accept cookies, you may experience some inconvenience in your use of some sites and online products. For example, the Website may not be able to recognize your device and you may need to answer challenge questions or provide additional information each time you log on.

To help us prevent fraud, protect the safety and security of our users, provide our services to you, and improve our services, we collect location data, including current and historical information concerning a user's geographic location, GPS location, transaction location, and IP addresses that are used in conjunction with our services. We collect your precise location data with your permission, and use that information, for example, to help protect against fraud by detecting and declining debit card transactions that may occur far away from your device's location. You may decline to allow us to collect such geolocational information, in which case Whale may not be able to provide certain features or functionalities to you.

We also may obtain information on the mobile device you use, including the Universally Unique Identifier, advertising identifier ("IDFA" or "AdID"), operating system and version, wireless carrier, and network type. This information may be used to identify system issues and for marketing purposes.

We also may collect information from you derived or resulting from voluntary surveys.

By providing your phone number you expressly consent to Whale and/or its agents calling or texting you using an automated telephone dialing system and/or prerecorded messages, even if you incur charges for receiving such communications. You may request to be removed from phone or text communications by emailing support@getwhale.co or informing the agent that contacts you.

With your permission, we may access your contact list on your mobile device or in your email accounts so that you can identify your contacts using our services and direct the invitation of your contacts for our services. We store and use this information to suggest referrals or connections and for other reasons related to our services.

Additionally, we collect personal data that you provide to us when you enter into a contractual agreement with us to provide us with a service, we may collect certain details in respect of you or other representatives of your business, such as name, business, contact details, job role.

Why we collect your personal data

The purposes we process your personal data include the following:

Marketing

We may use your personal data to develop, manage and market products and services to meet your needs and to provide you with information on our products, services, events that you request from us or which we feel may interest you.

We may contact you by email unless you have told us that you do not wish to receive marketing communications from us. Where we are required by applicable laws as well as our privacy policy, we will obtain your prior consent before contacting you. We will not sell or otherwise share your personal data with third parties, other than as stated within this Privacy Policy.

You have the right to opt out of receiving marketing at any time by following the information in each communication on how to unsubscribe or by writing to us at support@getwhale.co

How we share your personal data

We share your personal data as follows:

Data transfers

Your personal data may be transferred, accessed and stored as necessary for the uses stated in this Privacy Policy, including through the use of third parties as set out above.

Whale will take all necessary measures to ensure that your personal data is securely transferred, stored and used after transfer, as required by applicable law. This includes implementing approved contractual protections for the transfer of your personal data. For further details you can contact us at: support@getwhale.co

Retaining your personal data

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected and processed, in accordance with our retention policies, and in accordance with applicable laws or until you withdraw your consent (where applicable). To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we use your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements. In some circumstances we may anonymize your personal data so that it can no longer be associated with you, in which case it is no longer personal data.

Protecting your personal data

We use a variety of technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, your personal data, in accordance with our internal security procedures and applicable law. Personal data may be stored on our own technology systems or those of our service providers or in paper files.

With regard to our internal security procedures, we restrict access to your personal and account information to those employees who "need to know" the information in order to provide products and services to you. We maintain reasonable physical, administrative, and technical safeguards to protect your personal information. We conduct regular internal audits of our business practices and procedures in order to protect your personal information.

Third Party Services

We use "Plaid" to offer End User's account linking and aggregation services from their financial institutions. By using this service, you grant us and Plaid the right, power, and authority to act on your behalf to access and transmit your personal and financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid in accordance with the Plaid Privacy Policy.

Amendments to this Privacy Policy

We may revise this Privacy Policy over time. The most recent version of the Privacy Policy will govern Whale's use of your personal data. We may make changes to this Privacy Policy in our sole discretion.

Links to Other Websites

The Website may contain links to other websites run by other organizations. This Privacy Policy applies only to the Website, so we encourage you to read the privacy statements on the other websites you visit. We cannot be responsible for the privacy policies and practices of other sites even if you access them using links from the Website.

In addition, if you linked to the Website from a third party site, we cannot be responsible for the privacy policies and practices of the owners and operators of that third party site and recommend that you check the policy of that third party site.

Children

We are concerned with protecting the privacy of children aged 18 or under. If you are aged 18 or under, please get your parent/guardian's permission beforehand whenever you provide us with personal data.

How To Contact Us

If you have any questions or concerns about how we treat your personal data, or you wish to exercise any of the rights described above, please contact Whale at support@getwhale.co