Privacy Policy

This Privacy Policy explains how WHOLESTACK AI CORP. ("WholeStack," "we," "us," or "our") collects, uses, stores, and discloses information when you use the WholeStack platform, website, project workspace, billing tools, previews, build workflows, and publishing workflows.

WHOLESTACK AI CORP. is incorporated in Ontario, Canada. If you have privacy questions or requests, contact privacy@wholestack.dev.

We collect account and identity information such as your name, email address, authentication identifiers, plan information, and account settings. If you sign in through a third-party provider, we receive the information that provider makes available to us.

We collect project and usage information you choose to provide through the platform, including prompts, chat messages, project names, generated code, uploaded files, release configuration, preview activity, build and publish settings, and logs needed to operate and troubleshoot the service.

We collect transaction and billing information such as subscription status, credit purchases, Stripe customer or subscription identifiers, invoices, payment status, and balance history. We do not store full payment card numbers; payment processing is handled by Stripe.

We also collect technical and operational information such as IP address, browser and device metadata, timestamps, request metadata, session identifiers, diagnostics, and workflow logs used to secure, maintain, and improve the service.

We use personal information to provide and operate the WholeStack platform, including authenticating users, creating and managing projects, generating AI-assisted outputs, supporting preview/build/publish workflows, processing billing, and maintaining account balances and entitlements.

We use information to secure the service, detect abuse, investigate incidents, enforce our Terms of Service, prevent fraud, debug failures, and monitor performance, reliability, and product health.

We may use service data to improve our product, support users, develop new features, and analyze aggregate usage trends. Where practical, we limit internal access to information required for those purposes.

When you use AI features, WholeStack processes your prompts, instructions, project files, and related context to generate responses, code changes, and workflow outputs. That information may be transmitted to carefully selected subprocessors that support model inference, hosting, logging, or workflow execution.

You are responsible for the content you submit to the platform. You should not submit sensitive regulated data unless you have independently confirmed that WholeStack is appropriate for that use and you have all required rights and permissions.

We share information with service providers that help us operate WholeStack, such as providers for authentication, hosting, databases, billing, AI model access, analytics, customer support, error monitoring, build/release tooling, and app distribution workflows.

We may disclose information where required by law, court order, valid governmental request, or where reasonably necessary to protect the rights, safety, property, or security of WholeStack, our users, or others.

If WholeStack is involved in a merger, acquisition, financing, corporate reorganization, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

We retain information for as long as reasonably necessary to provide the service, maintain business and security records, comply with legal obligations, resolve disputes, and enforce our agreements.

Retention periods vary based on the type of data, the sensitivity of the data, the purpose for which it was collected, and applicable legal requirements. We may retain logs, billing records, and security records for longer periods where needed for legitimate business or legal reasons.

WholeStack and its service providers may process information in Canada, the United States, and other jurisdictions where our providers operate. By using the service, you understand that your information may be transferred to and processed outside your province, state, or country, subject to applicable safeguards and law.

Depending on your location, you may have rights to request access to, correction of, deletion of, or information about the personal information we hold about you, and to request portability or object to certain processing.

To make a privacy request, contact privacy@wholestack.dev. We may need to verify your identity before acting on a request, and some rights may be limited where exceptions or legal obligations apply.

We use administrative, technical, and organizational safeguards designed to protect information against unauthorized access, loss, misuse, and alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we may provide notice through the website, the product, or by other reasonable means. Your continued use of the service after an updated Privacy Policy becomes effective means the updated policy will apply.