Privacy Policy

1. Controller

The controller responsible for this website and the related support services is:

Marybeth Kuttner Tong
acting under codeofwhisper
c/o Impressumservice Dein-Impressum
Stettiner Str. 41
35410 Hungen
Germany

Email: hello@codeofwhisper.com

2. Data we process

When you use or contact codeofwhisper, we may process:

• your name, email address, and optional company name,
• information submitted through the inquiry form, including your description of the issue, the affected tool, website, account, workflow or system, device/system context, service area, preferred support format, urgency, and what you have already tried,
• content from emails, replies, clarifications, recommendations, bookings, support messages, and optional feedback,
• case numbers, recommendation details, payment status, booking and scheduling details, support progress, completion, cancellation, and rescheduling information,
• technical data such as IP address, browser data, timestamps, security data, and log data where this is generated by the website, API, hosting, or security services.

codeofwhisper does not intentionally request special-category data. Please do not send unnecessary sensitive information, passwords, private keys, recovery codes, or other secrets through the inquiry form.

3. Purposes and legal bases

We process personal data where necessary to review inquiries, communicate with you, prepare recommendations, provide booked support, manage cases and schedules, process payments, document support, troubleshoot errors, protect the service against misuse, meet legal obligations, and improve the service.

The legal bases may include performance of a contract or pre-contractual steps, legal obligations, legitimate interests in operating and protecting the service, and consent where you explicitly allow optional use of an anonymized feedback quote.

4. Inquiry form and email communication

The inquiry form is used to review your request and prepare the next suitable support step. The information you submit is sent to the codeofwhisper API, stored in the internal database, and sent by email through Zoho Mail to codeofwhisper. You may also receive a confirmation email or other case-related messages.

Case-related emails may include clarification requests, recommendations, booking, payment, scheduling, rescheduling, support, continuation, cancellation, closure, completion, and feedback communication. codeofwhisper does not currently operate newsletters or promotional email campaigns.

5. Recommendations, payments, and private links

If your inquiry appears suitable, codeofwhisper may prepare a private recommendation. Viewing or receiving a recommendation does not create a contract. A contract is formed only when you accept the recommendation and complete payment through Stripe.

Private recommendation, booking, feedback, cancellation, rescheduling, or workspace links are token-based and are not public user accounts. Please do not share private links with other people.

6. Guided Support Workspace, messages, and screenshots

For Guided Support, a private browser-based workspace may be provided. Text support messages are stored and tied to the case. Temporary screenshots or image files may be used during the session if they are needed for support.

The workspace is not a public account and does not expose client-facing camera or video controls. Chat history and transcript records remain tied to the case. Temporary screenshots are working materials and are deleted after the relevant access and completion process unless further retention is required.

7. Service providers

codeofwhisper uses service providers needed for hosting, security, communication, internal case management, and payments:

• Cloudflare for the static website, DNS/network functions, security, and Cloudflare Turnstile,
• a Hetzner VPS for the backend, API, and database,
• Zoho Mail for email sending and case-related email communication,
• Notion for internal planning, support, and case documentation,
• Stripe for payment processing, Checkout, payment status, and refunds where applicable.

For Cloudflare and Notion, the applicable data processing terms are incorporated into their respective customer terms. A data processing agreement has been concluded with Hetzner, and Stripe's data processing agreement forms part of the Stripe Services Agreement. A data processing agreement has been requested from Zoho and remains pending signature and final verification.

Depending on the provider and processing activity, data may also be processed outside the EU/EEA. Where required by applicable data protection law, the processing relies on appropriate safeguards or another permitted transfer mechanism.

8. Cloudflare Turnstile and technical protection

The inquiry form uses Cloudflare Turnstile to reduce automated abuse. Technical information needed for the security check is processed by Cloudflare. The backend verifies the Turnstile token server-side with Cloudflare.

The website code does not intentionally set analytics cookies. External security, payment, or infrastructure providers may use technically necessary cookies, tokens, or similar technologies where needed for security, fraud prevention, payment processing, or service operation.

9. Stripe payments

Payments are processed through Stripe. codeofwhisper does not store full card details. Stripe processes payment and transaction data needed for Checkout, payment confirmation, fraud prevention, refunds, and legal obligations.

10. Notion as an internal workspace

If an inquiry becomes a planning item, recommendation, or support case, case-related information may be documented in an internal Notion workspace. Clients are not given Notion accounts or publicly shared Notion pages.

11. Retention and deletion

Personal data is kept only for as long as needed for inquiry review, contractual support, case documentation, troubleshooting, legal claims, or statutory retention obligations.

No automatic deletion or anonymization after a fixed period is currently configured for inquiries that do not lead to a recommendation, booking, or further communication. Those records are retained until their continued necessity is reviewed manually. Contract, payment, and accounting records may need to be kept longer due to legal obligations.

12. Your rights

Subject to the applicable legal requirements, you may have the right to access, correct, delete, restrict, transfer, or object to the processing of your personal data. Where processing is based on consent, you may withdraw that consent for the future.

You can send privacy requests to hello@codeofwhisper.com. You also have the right to lodge a complaint with a competent data protection authority.