Security
You're handing us your numbers — here's exactly how we look after them, in plain English.
HTTPS and private storage
Everything between your browser and DataWhisperer travels over HTTPS (TLS). Parsed data, metadata and saved results are stored in managed PostgreSQL. Exact original uploaded file bytes are stored separately in private App Storage; original-file downloads check account ownership.
Your files are private
Files are scoped to your account or guest session; analyzing your own file requires an account. If you create a share link, anyone with the link can read the result without signing in and forward it. The link does not expose the entire raw file or an original-file download, but questions, dataset names, labels and result text can be sensitive. Revoking a link stops future access, not copies already made.
Never used to train AI models
Relevant data is sent to our AI provider for Briefs, Ask answers, Decide options, and interpretation of supported Tables and Charts requests. Chart values are calculated from your data. Your data is not used to train AI models, and we never sell it. Full details are in our Privacy Policy.
Delete anytime
You can delete files or your account through the app. Backup copies and records needed for billing, security or legal obligations may remain; we do not promise a fixed deletion window. See our Privacy Policy or contact us about a specific request.
Stripe handles card details
Stripe collects card details in its hosted checkout. We do not receive or store your full card number; we retain only the customer and billing metadata needed to manage your subscription.
In-house email and password sign-in
DataWhisperer authenticates accounts with email and password. Passwords are stored only as salted cryptographic hashes, verification and reset codes are single-use, and sessions use secure browser-only cookies.
Questions or something to report?
If you have a security question, need documentation for your company, or believe you've found a vulnerability, please contact us — security reports go to the top of the pile. For how we handle personal data, see our Privacy Policy.