WhaleRiderWe collect the information needed to create and secure your organization, provide WhaleRider, process subscriptions, and support you. We do not sell personal information or use it for cross-context behavioral advertising.
Scope and controller
This Privacy Policy explains how ROCKSOLDI LTD, operating the WhaleRider Service at whalerider.org, collects, uses, discloses, and protects personal information when you visit the website, create or recover organization access, purchase a subscription, connect an integration, or otherwise use the Service.
ROCKSOLDI LTD, Company No. 517177309, is the controller of personal information processed for the operation of WhaleRider. Paddle separately controls payment and buyer information it processes as Merchant of Record under the Paddle Privacy Notice.
Information we collect
- Organization and contact information: organization name, admin email, and information you provide in support communications.
- Account and security information: organization and principal identifiers, authentication and verification status, access-key metadata, recovery events, and security logs. A newly issued key is revealed once; you are responsible for saving it securely.
- Subscription information: Paddle customer, transaction, subscription, offer, and status identifiers; purchase amount, currency, and billing state. We do not receive or store your full payment-card number.
- Service content: user-defined research rules, simulation settings, tool inputs, research artifacts, and other content you choose to submit through an AI, CLI, editor, API, or website flow.
- Technical and usage information: IP address, device and browser information, timestamps, requested endpoints, diagnostic events, error records, and activity needed to operate, secure, and troubleshoot the Service. If you allow optional analytics, Google Analytics also receives website visit and page-view information.
- Local browser data: your light or dark theme preference in local storage and temporary enrollment context in session storage. The temporary context is used to reconnect a completed Paddle checkout to your enrollment flow.
How we use information
We use personal information to provide and administer the Service; create and verify organizations; issue and recover credentials; process and reconcile subscriptions; run requested research and simulations; maintain security and prevent abuse; communicate transactional and service notices; respond to support; diagnose and improve reliability; enforce our terms; and comply with legal obligations.
Where applicable, our legal bases include performance of a contract, steps requested before entering a contract, our legitimate interests in operating and securing the Service, compliance with law, and consent where the law requires it. We do not use WhaleRider to make solely automated decisions that produce legal or similarly significant effects about you.
How information is disclosed
We may disclose information:
- to infrastructure, hosting, database, identity, email, security, support, and other vendors that process it for us under appropriate obligations;
- to Paddle for checkout, subscription, tax, fraud-prevention, cancellation, and refund handling;
- to AI providers, editors, command-line tools, or integrations when you direct the Service to communicate with them;
- to professional advisers, auditors, insurers, and potential transaction counterparties subject to confidentiality protections;
- when required by law or reasonably necessary to protect rights, safety, users, the public, or the Service; and
- in connection with a financing, reorganization, merger, acquisition, insolvency, or sale of all or part of the business.
We do not sell personal information or share it for cross-context behavioral advertising.
Third-party services and data sources
When you connect WhaleRider to ChatGPT, Claude, a market-data source, or another supported service, that provider may receive information under its own terms and privacy policy. Your organization controls which integrations it enables and what it sends. We encourage you to review each provider’s practices and avoid submitting information you are not authorized to use.
International transfers
We and our service providers may process information in countries other than your own. Where required, we use recognized transfer mechanisms and contractual or organizational safeguards. No transfer mechanism eliminates all risk, and laws in the destination country may differ from those where you live.
Retention
We retain personal information for as long as reasonably necessary to provide the Service, maintain security and business records, resolve disputes, enforce agreements, and satisfy tax, accounting, payment, and legal obligations. Retention varies by data type and context. We may retain de-identified or aggregated information where it can no longer reasonably identify you.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including access controls, credential protections, logging, and service-provider controls. No system is completely secure. You must protect your admin access key, devices, email account, and connected services, and notify us promptly of suspected compromise.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or obtain a portable copy of personal information; object to certain processing; withdraw consent; or appeal a decision concerning a request. You may also complain to your local data-protection authority.
To submit a request, email whalerider@rocksoldi.com. Describe the request and the email associated with your organization. We may verify your identity and authority before responding. Rights can be limited by law, including where retention is needed for security, fraud prevention, legal claims, or statutory records. We will not discriminate against you for exercising a privacy right.
Cookies and browser storage
WhaleRider uses essential browser storage for theme selection and temporary checkout-flow continuity. Paddle and connected third parties may use their own cookies or similar technologies under their policies.
We use Google Analytics 4 to understand website visits and page views. Google may receive your IP address, device information, and pages visited and may set analytics cookies. We do not load Google Analytics on the payment checkout page. See Google’s Privacy Policy for Google’s data practices.
Children
The Service is intended for adults and organizations and is not directed to children under 18. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information so we can take appropriate action.
Changes and contact
We may update this Privacy Policy as our Service or legal obligations change. We will post the revised policy and update the date above. We will provide additional notice when required for a material change.
For privacy questions or requests, contact ROCKSOLDI LTD / WhaleRider at whalerider@rocksoldi.com.