Privacy policy

Who we are

Whilehaus is the business name under which Martin Bonafede trades, Argentine tax ID (CUIT) 20-33215496-7, registered under the simplified tax regime (monotributo), domiciled at Av. Rivadavia 5785, floor 15, apartment 1, City of Buenos Aires (postcode 1406), Argentina. A studio for business, design and systems.

For any question about this policy or your data, write to info@whilehaus.com.

What data we collect on this site

Data you give us: if you request a callback, we store your phone number, your name (if you leave it) and your country. If you use the live chat, we store the messages of that conversation and, if you leave it, your email to follow up. If you write to us by email or WhatsApp, we receive whatever you send through those channels.

Usage data: visit metrics (page views, approximate country, device type) through the analytics tools described below. We do not use this data to identify you.

What we use it for

To reply to you and continue the conversation you started, to understand how the site is used and improve it, and for nothing else. We do not sell your data or use it for targeted advertising.

Google integration: your account and your Google Drive

Whilehaus products integrate with Google APIs for two things: signing in with your Google account, and storing files in Google Drive when you enable it. Both use a single Google application registered under the name Whilehaus, which is the one you see on the consent screen.

We request three permissions and no more. openid and userinfo.email: to identify the account and obtain your email address, solely to establish the session or to show you in the interface which Drive account is connected. drive.file: access limited exclusively to the files and folders the application itself creates, or that you deliberately open with it.

drive.file does NOT give us access to the rest of your Google Drive. We cannot read, list, modify or delete files or folders the application did not create. Your personal Drive, your documents and anything that does not go through the app are outside our technical reach, not merely outside our commitment.

Whilehaus’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Specifically, with respect to data obtained from Google APIs: it is used exclusively to provide and improve the user-facing features of the product; it is not transferred to third parties, except as strictly necessary to provide those features, where required by law or a competent authority, or where you give express consent; it is not used for advertising purposes, nor disclosed to advertising platforms, data brokers, information resellers or market intelligence providers; it is not read by humans, unless you expressly consent to a specific support operation, it is necessary for security purposes (including the investigation of abuse or vulnerabilities), or it is required by law; and it is not used to train generalised artificial intelligence models.

Credentials issued by Google (access and refresh tokens) are stored encrypted with AES-256-GCM and are used solely to operate the application’s folder within the connected account.

Because the Google application is a single one for all of Whilehaus, in your Google account permissions screen you will see one entry named Whilehaus. Revoking it there cuts off access for all our products at once. To revoke access for one product only, do it from that product’s storage settings.

You can revoke access at any time, from the product itself or from myaccount.google.com/permissions. Revoking does not delete files already in your Google Drive: they remain yours and under your exclusive control.

Analytics and cookies

Cloudflare Web Analytics: measures visits without cookies or identifiers. Always on.

Google Analytics 4: uses cookies to measure site usage. If you visit from the European Union or the European Economic Area, GA4 does not load until you accept it in the cookie notice; you can reject it and the site works the same. Your choice is stored in your browser.

Language cookie (wh_lang): stores the language you picked for the site. A preference, not a tracker.

Whilehaus products use their own cookies, all technically necessary (session, language, interface preferences). The detail is in each product’s policy.

Advertising

This site does not show ads. Some Whilehaus products show ads on their free plans; that happens on each product’s domain and is governed by that product’s privacy policy. This site includes an AdSense verification tag that sets no cookies and loads no scripts.

We never use data obtained from Google APIs, or the content you upload to our products, to target advertising.

Who we share data with

With the providers that run the site: Vercel (hosting), Supabase (live chat infrastructure), Google (analytics, under the conditions of the previous section), Cloudflare (cookieless analytics) and Resend (email delivery). Each processes data on our behalf, to provide us the service.

The providers that run each product are listed in that product’s policy.

We do not sell personal data to third parties.

The products and their policies

Client Portal, at app.whilehaus.net: terms at app.whilehaus.net/terms and privacy at app.whilehaus.net/privacy.

Markery, at markery.whilehaus.net: terms at markery.whilehaus.net/terms and privacy at markery.whilehaus.net/privacy.

Whallet, at wallet.whilehaus.net: terms at wallet.whilehaus.net/terms and privacy at wallet.whilehaus.net/privacy.

Those policies describe in detail what data each product processes, with which providers, where it is hosted and for how long. This policy does not replace them.

How long we keep it

Contact data is kept while the conversation or business relationship remains open. You can ask us to delete it at any time.

Retention periods within each product are set out in that product’s policy.

Your rights

You can request access, correction or deletion of your data by writing to info@whilehaus.com.

If you are in Argentina, you are covered by Law 25,326 on Personal Data Protection. The data subject is entitled to exercise the right of access to their data free of charge at intervals of no less than six months, unless a legitimate interest to the contrary is established, pursuant to section 14, subsection 3 of Law 25,326. The Agency for Access to Public Information, the supervisory body under Law 25,326, has the power to hear complaints and claims brought by persons whose rights are affected by non-compliance with the rules in force on personal data protection.

If you are in the European Union, the European Economic Area or the United Kingdom, you additionally hold the rights conferred by the GDPR and equivalent United Kingdom legislation, including the right to lodge a complaint with the supervisory authority of your jurisdiction.

Changes to this policy

We may update this policy when the site, the products or the tools they use change. The current version always lives on this page, with its update date.