Privacy Policy

1. Who we are

WhispSocio provides a global social platform with profiles, posts, comments, follows, messages, live streaming, stream battles, thumbnails, gifts, XP rewards, creator subscriptions, personalised recommendations, analytics, events, and a marketplace for physical and digital goods. This policy explains how we collect, use, and protect personal information when you visit or use our services.

2. Data we collect

We collect information in three main ways: data you provide directly, data generated through your use of the platform, and data supplied by trusted third parties. We never sell personal data.

3. How we use personal information

We only process personal information when we have a lawful basis. The main purposes are listed below.

Your content is not our advertising inventory. We process posts, photos, videos, streams, comments, messages, marketplace listings, and other user-created material only to provide the WhispSocio features you use, show content to the audience you selected, keep the service secure, enforce our rules, comply with law, and support disputes or deletion requests. We do not use user-created content in WhispSocio ads, external marketing campaigns, sponsored content, product demos, promotional material, or AI/model training unless you give separate, clear permission for that specific use.

4. When we share information

We share personal information with carefully selected service providers that help us operate WhispSocio. Each provider is bound by contract to safeguard data and may only use it for our documented instructions.

We may also disclose information when required by law, in response to valid legal requests, or to protect the rights, property, or safety of our users, employees, or the public.

4.1 Public information and other users

Some information is public or visible to other users by design, including usernames, display names, profile images, bios, public posts, public media, live streams, stream thumbnails, marketplace listings, comments, follower/following counts, and public engagement. Private messages and non-public account data are not shown publicly, but may be reviewed where necessary for safety, security, legal compliance, or support.

5. International data transfers

• Personal data may be transferred outside the UK or European Economic Area when we use providers such as Stripe or email services hosted in the United States.
• Whenever we transfer data internationally, we rely on Standard Contractual Clauses or other legally recognised safeguards and perform risk assessments.
• We monitor developments in international data transfer law and will update our safeguards where required.

6. Data retention

7. Security measures

• Encryption in transit (TLS 1.3) and at rest for sensitive data.
• Role-based access controls and multi-factor authentication for administrative accounts.
• Automated monitoring, logging, and alerting to detect unusual activity.
• Regular patching and infrastructure reviews, including backup and disaster recovery procedures.
• Access to reports, moderation tools, payment records, and admin analytics is limited to authorised staff or contractors with a business need.

8. Your privacy rights

If you are located in the UK or EU you have the following rights under the UK GDPR/EU GDPR:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete information.
• Erasure: Request deletion of your data when it is no longer needed or you withdraw consent.
• Restriction: Ask us to pause processing while a request is investigated.
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interests (including profiling) or direct marketing.
• Withdraw consent: Withdraw consent for optional processing at any time.

To exercise your rights, email legal@whispsocio.com or use the self-service tools above. We may ask for proof of identity before responding. We aim to reply within one month and will let you know if we need longer for complex requests.

9. Marketing and cookies

• We only send promotional emails with your explicit consent. You can withdraw consent via account settings or the unsubscribe link in any message.
• Service announcements, security alerts, and transaction emails are essential and cannot usually be opted out of.
• Our cookie practices are explained in the Cookie Policy. Non-essential cookies are only used after you provide consent through the cookie banner or settings.
• We may use first-party analytics, server logs, and Google Search Console information to understand search performance, traffic sources, countries/regions, and technical issues. Where this uses cookies or similar technologies, we ask for consent unless the technology is strictly necessary.

10. Recommendations, profiling & automated processing

10.1 Personalized recommendations

We use software algorithms to rank and suggest content that is more likely to interest you, including on Discover, your feed, Events (recommended sort), and the physical marketplace. Signals may include:

• Interest tags you set in account settings
• Your interactions (views, likes, comments, follows, RSVPs, marketplace views/favourites/purchases)
• Profile location fields used for nearby events and regional marketplace relevance
• Recency and popularity of content in the community

This is profiling for personalisation under UK GDPR. It is not used to make decisions that produce legal or similarly significant effects (for example employment, credit, or housing). You may object to processing based on legitimate interests by contacting us; we will balance your rights against our need to operate the service.

You can influence recommendations by editing interests, changing sort options where available, and adjusting your profile location. See our FAQ for more detail.

10.2 Safety and moderation automation

Automated tools (including keyword filters and abuse detection) help identify spam, prohibited content, and policy violations. Significant enforcement actions are subject to human review where practicable, and you may appeal moderation outcomes as described in our Terms and Conditions.

10.3 No solely automated significant decisions

We do not make solely automated decisions about you that produce legal or similarly significant effects without meaningful human involvement.

11. Children

WhispSocio is not directed at children under 13. We remove accounts where we learn that the user is under the minimum age or has provided false information. Parents or guardians can contact us at legal@whispsocio.com to request removal of unauthorised accounts.

In some regions, including Australia, social media services must take reasonable steps to prevent users under 16 from holding accounts or using age-restricted social media features. The UK government has also announced planned rules for under-16 social media access and under-18 restrictions for high-risk features such as livestreaming and stranger contact. Where these rules apply to WhispSocio, we may restrict account creation, remove or suspend underage accounts, switch off stream creation and broadcast controls, switch off other restricted features, and request age assurance or parent/guardian confirmation.

For users aged 13-17 who are allowed to use WhispSocio in their location, we aim to apply age-appropriate protections where practical, including limiting access to seller, payout, adult, gambling-style promotion, livestreaming, stranger-contact, personalised-feed, notification, autoplay, and other restricted or higher-risk features. We do not knowingly use children's data for targeted advertising based on sensitive characteristics.

Age assurance data is used only to check eligibility, apply age-appropriate settings, protect children, prevent misuse, comply with law, and keep necessary audit records. We aim to use proportionate checks and avoid collecting more age-verification information than needed for the relevant feature or legal requirement.

12. Complaints and supervisory authority

If you have concerns about how we handle your data, contact us first at legal@whispsocio.com so we can resolve the issue. You also have the right to complain to the Information Commissioner's Office (ICO):

• Website: https://ico.org.uk/make-a-complaint/
• Telephone: +44 303 123 1113

13. Changes to this policy

• We review this policy whenever we launch new features, update our processing, or to reflect legal requirements.
• Material changes will be notified at least 30 days in advance via email or on-site notice. Minor updates take effect immediately upon publication.
• The "Effective date" at the top shows when the latest version came into force.

14. Contact us

15. Regional notices

We operate globally and apply additional privacy provisions where local law requires them. These regional notices supplement the rest of this policy:

Version history