Privacy Policy

WhaleMirror (copy-whales.com)

Effective Date: 17 April 2026

Introduction

This Privacy Policy explains how WhaleMirror (copy-whales.com)

(“Platform,” “we,” “us,” or “our”) collects, uses, and protects your personal data.

This Policy applies to all users and members of the Platform.

WhaleMirror (copy-whales.com)

is operated by Global Skill LLC.

By using the Platform, you agree to the terms of this Privacy Policy.

1. Data We Collect

We collect the following types of personal data:

• Email address provided at signup

• Full name automatically provided by Stripe during payment processing and used as your platform username

• Payment information, processed entirely by Stripe (we do not store card numbers or payment credentials)

• IP address

• Device and browser information

• Usage data, including pages visited, features used, and time spent on the Platform

• Communications, including messages sent via email or support chat

2. Data We Do Not Collect

We do not:

• Store card numbers or payment credentials

• Collect data from individuals under 18

• Sell, rent, or trade personal data to third parties for marketing purposes

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

We collect and use your email address, Stripe-provided name, and payment-related information in order to create your account, manage your subscription, and provide access to the Platform. This is necessary for the performance of a contract between you and us.

We collect IP address, device information, and usage data to maintain the security of the Platform, prevent fraud and abuse, and improve performance. This is based on our legitimate interest in operating a secure and reliable service.

We also store support communications (such as emails or chat messages) to respond to your requests and provide customer support. This is also based on legitimate interest.

4. How We Use Your Data

We use your data to:

• Provide access to the Platform

• Manage your subscription and account

• Process payments

• Improve platform performance and security

• Provide customer support

• Prevent fraud, abuse, or unauthorized access

5. Third Parties We Share Data With

We only share data with trusted service providers:

• Stripe – payment processing and billing

• Thenty.io – software site protection & transactional emails (e.g. account and billing notifications)

• Zapier – workflow automation and data routing between internal tools

We do not sell personal data and do not share it with any third parties for marketing purposes.

6. Data Retention

• Active user data is retained for the duration of the subscription

• After cancellation or termination, account data is retained for 12 months for legal, tax, and accounting purposes

• After this period, data is securely deleted or anonymised

• Payment records may be retained longer where required by law

7. GDPR Rights (EU/EEA Users)

If you are located in the European Economic Area (EEA), you have the following rights:

• Right of access – request a copy of your personal data

• Right to rectification – correct inaccurate or incomplete data

• Right to erasure (“right to be forgotten”) – request deletion of your data

• Right to restrict processing – limit how your data is used

• Right to data portability – request transfer of your data to another service

• Right to object – object to processing based on legitimate interests

• Right to withdraw consent – where consent is the legal basis

How to exercise your rights:

You may contact us at: info@copy-whales.com

We will respond to all valid requests within 30 days.

8. Data Breach Notification

In the event of a personal data breach, we will notify affected users and relevant supervisory authorities where required by applicable law within 72 hours of becoming aware of the breach.

9. Cookies

We use only essential cookies necessary for the operation of the Platform.

This includes:

• Session cookies to keep users logged in

• Cookies set by Stripe for payment processing and fraud prevention

We do not use:

• Advertising cookies

• Tracking cookies

• Marketing cookies

• Non-essential analytics cookies

Because we only use essential cookies, a cookie consent banner is not required.

Disabling cookies in your browser may prevent you from logging in or using the Platform properly.

10. Analytics

We use a GDPR-compliant analytics tool that:

• Tracks session behaviour (pages visited and time spent)

• Does not use cookies

• Does not collect personally identifiable information

• Does not track users across websites

• Does not require a cookie consent banner

All analytics data is aggregated and cannot be used to identify individual users.

11. International Data Transfers

Your data may be processed outside the European Economic Area (EEA), including by Stripe and our email provider.

Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Automated Decision Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on users.

13. Data Security

We implement reasonable technical and organisational security measures to protect your personal data against unauthorised access, loss, misuse, or disclosure.

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

14. Children’s Privacy

The Platform is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from minors. If we become aware that such data has been collected, we will delete it immediately.

15. Data Controller

WhaleMirror (copy-whales.com) is the data controller responsible for your personal data.

For all privacy-related requests, including exercising your GDPR rights, you may contact us at:

info@copy-whales.com

16. Changes to This Policy

We may update this Privacy Policy from time to time.

We will notify users of material changes via email or through a notice on the Platform.

Continued use of the Platform after changes take effect constitutes acceptance of the updated Policy.