Information we collect
- Account and contact information: email address, account and sign-in records, subscription status, and information you provide in inquiries or support messages. A contact inquiry may include your name, company, role, and project requirements.
- Planning information: facility addresses, building geometry, storage settings, uploaded product and operational datasets, filenames, saved scenarios, and calculation results. Dataset uploads may include original files and processed copies.
- Technical and usage information: browser and device information, IP addresses, cookies or similar identifiers, pages visited, referral information, actions, timestamps, and errors. Collection varies by service and feature.
- Billing information, when payments are available: Stripe processes payment details. WHS stores customer and subscription references and payment-related status, rather than full card details.
For image/PDF tracing, the original reference file is read locally in your browser; the traced geometry is saved to WHS. This differs from uploading a product dataset, which is stored on our servers. The website contact form prepares an email; we receive its contents when you send it.
How we use information
We use information to provide calculations, save and reopen work, manage accounts, respond to inquiries, send service communications, measure website use and advertising conversions, diagnose problems, and protect the service. Authorized WHS personnel can access saved work for service administration and support; account calculation activity can generate internal email notifications.
We do not sell customer planning information or use customer uploads, facility addresses, layouts, or results for sales prospecting, benchmarking, research, or AI model training.
Service providers and sharing
We use providers for hosting, authentication, storage, email, maps, analytics, security, and payment processing. Depending on the feature, these include Replit, Supabase, Cloudflare, Resend, Mapbox, Amplitude, Google, Stripe, and content-delivery services that supply browser assets. They receive information needed for their functions, including ordinary network-request information.
Information may be processed and stored in the United States or other countries outside your country or province. It may be accessible to courts, law enforcement, or other authorities under the laws of those locations. Contact us with questions about our providers and processing locations.
Map searches send search text to Mapbox through WHS; satellite-map requests also send the requested map location and view settings. Manual drawing and rectangular buildings do not require an address.
If you publish or share a result, story, or listing, recipients can see the included content. Some sharing options include selected product data. Password protection is available for some shared views. We may also disclose information when legally required, to protect rights or security, or as part of a business transfer, subject to applicable law.
ChatGPT and other MCP clients
The free planner does not require a WHS account. WHS receives the scenario inputs and editor changes submitted through the integration. It does not retrieve your full chat history. When supplied by the client, limited diagnostic metadata can include user or conversation identifiers, language, and client software information. These identifiers are not verified identities.
Scenario information and results are returned to the connected client. That provider handles the conversation and its copies under its own policies.
Anyone with a scenario's private link can view, change, run, or delete it. Keep the link private. The browser may also store recovery copies of unfinished edits.
Retention and deletion
Saved plugin scenarios and results remain until you delete them. Plugin diagnostic interaction events, including recorded input changes and initial client context, are scheduled for removal after 14 days. Saved scenario inputs and run records are separate from those diagnostics.
Deleting a plugin scenario removes its draft and run records and disables its private link. Underlying result files are queued for separate cleanup; a file still referenced by another saved result is retained. Deletion is not immediate removal of every copy. Browser recovery data, provider backups, and copies held by chat providers or recipients are separate. Backup copies and security logs may remain for recovery, security, and legal needs under the applicable retention schedules. Clear WHS site data to remove local recovery copies.
Account information, uploaded datasets, saved app work, and business records are retained for ongoing service access, support, security, and applicable legal or recordkeeping needs. Archiving a dataset or disabling an account does not delete its data. Contact us to request removal of information that cannot be deleted through the interface.
Your choices and rights
You can edit information through available controls and ask WHS in your plugin chat to delete its scenario. For other access, correction, export, or deletion requests, email koy@wherehowspace.com. We may need information to verify your authority over the account or scenario. Do not send passwords or API keys.
Where we rely on consent, you can contact us to withdraw it, subject to applicable restrictions. We will explain any effect on services that need the information. Depending on applicable law, you may have additional rights to opt out of certain uses or appeal a decision about your request. We handle requests within applicable legal time limits and subject to permitted exceptions.
You can raise a privacy concern with our privacy contact. Canadian users may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy regulator.
Security and policy changes
We use access controls and other safeguards to protect information, but no system is completely secure. Our services are intended for business planning and are not directed to children under 13. Contact us if you believe a child has provided personal information.
We may update this policy as the service changes. We will identify the updated date and provide additional notice of material changes when required.