InnerWhisper
Privacy Policy

Last updated: May 2025

1. Introduction

InnerWhisper is operated as a sole proprietor business at innerwhisper.io. We take your privacy seriously. This Privacy Policy explains what personal data we collect, why we collect it, how it is stored and protected, and what rights you have in relation to your data.

By using our website or placing an order you agree to the collection and use of your data as described in this policy. If you have any questions please contact us at contact@innerwhisper.io.

2. Data We Collect

We collect the following categories of personal data:

Information you provide directly:

•       Your name and email address when placing an order

•       Voice recordings submitted through the order form for the purpose of creating your personalised audio product

•       Any messages or enquiries you send to us via email

Information collected automatically:

•       IP address and browser information collected through our website analytics tools

•       Pages visited, time spent on the site, and interaction data collected via Google Analytics and Meta Pixel

•       Cookie data as described in our Cookie Policy

Information collected through third party payment processing:

•       Payment details including card information are processed directly by Stripe. InnerWhisper does not store, see, or have access to your full card details at any time

•       Stripe may share with us your name, email address, billing country, and transaction ID for the purpose of order fulfilment

3. Voice Recordings

Voice recordings are special category data and we treat them with the highest level of care. Your voice recording is used solely to create your personalised InnerWhisper audio product. It is stored in encrypted form while in our system and is permanently and irreversibly deleted within 48 hours of your completed audio being delivered to you.

Your voice recording is used to generate a temporary AI voice model solely for the purpose of producing your personalised audio. This voice model is used exclusively for your order and is permanently deleted alongside your original recording within 48 hours of delivery. Your voice data is never used to train general AI systems, shared with third parties for AI development purposes, or retained for any use beyond fulfilling your order.

We will never share, sell, or licence your voice recording or any derived voice model for marketing purposes, third party use, or any other commercial purpose beyond creating your order.

4. How We Use Your Data

We use your personal data for the following purposes:

•       To process and fulfil your order

•       To deliver your completed audio file via email

•       To communicate with you regarding your order

•       To respond to any questions or support requests you send us

•       To analyse website traffic and improve the user experience through Google Analytics and Meta Pixel

•       To comply with our legal obligations

We do not use your personal data for automated decision-making or profiling.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the Swiss Federal Act on Data Protection (revFADP) and where applicable the EU General Data Protection Regulation (GDPR):

•       Contract performance: processing your name, email address, and voice recording is necessary to fulfil your order

•       Legitimate interests: using analytics tools to understand how our website is used and improve our service

•       Consent: where you have explicitly agreed to the use of cookies and tracking technologies

6. Third Party Services

We work with the following third party services that may process your personal data:

Stripe: handles all payment processing. Your payment data is governed by Stripe's Privacy Policy available at stripe.com/privacy. Stripe is PCI DSS compliant.

Jotform: processes your order form submissions including your voice recording upload. Your data submitted through Jotform is governed by Jotform's Privacy Policy available at jotform.com/privacy. Voice recordings submitted via Jotform are transferred to our secure storage and deleted from Jotform's servers following delivery of your order.

Google Analytics: collects anonymised data about how visitors use our website including pages visited, time on site, and general location data. This data is processed by Google in accordance with Google's Privacy Policy available at policies.google.com/privacy. You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on.

Meta Pixel: collects data about your interactions with our website for the purpose of measuring the effectiveness of our advertising and reaching relevant audiences on Meta platforms. This data is processed by Meta in accordance with Meta's Data Policy available at facebook.com/privacy/policy. You can manage your ad preferences through your Meta account settings.

7. Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this policy:

•       Voice recordings: permanently deleted within 48 hours of order delivery

•       Order information including name, email address, and order details: retained for up to 3 years for accounting and legal compliance purposes

•       Email correspondence: retained for up to 2 years

•       Analytics data: retained in anonymised form as per Google Analytics and Meta Pixel default retention settings

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. Voice recordings are stored in encrypted form while in our system. All data transmissions between your browser and our website are encrypted via HTTPS.

While we take every reasonable precaution, no method of transmission over the internet is completely secure and we cannot guarantee absolute security.

9. International Data Transfers

Some of our third party service providers, including Google and Meta, may transfer and process your data outside of Switzerland and the European Economic Area. Where this occurs it is governed by the respective provider's data transfer mechanisms and privacy policies, which are designed to ensure an adequate level of data protection.

10. Your Rights

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

•       The right to access the personal data we hold about you

•       The right to request correction of inaccurate data

•       The right to request deletion of your personal data

•       The right to object to or restrict the processing of your data

•       The right to data portability

•       The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights please contact us at contact@innerwhisper.io. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

11. Cookies

Our website uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us understand how visitors use our site and enable certain functionality.

We use the following types of cookies:

•       Analytics cookies: placed by Google Analytics to collect anonymised data about site usage

•       Marketing cookies: placed by Meta Pixel to measure advertising effectiveness and enable targeted advertising

•       Functional cookies: necessary for the website to operate correctly

When you first visit our website you will be asked to consent to the use of non-essential cookies. You can withdraw your consent or manage your cookie preferences at any time through your browser settings or by contacting us at contact@innerwhisper.io.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The most current version will always be available at innerwhisper.io. We encourage you to review this policy periodically. Continued use of the website following any update constitutes acceptance of the revised policy.

13. Contact

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us at:

contact@innerwhisper.io

We aim to respond to all privacy-related enquiries within 5 business days.

innerwhisper.io