Legal
Last updated: 16 April 2026
Whal (“we”, “us”, “our”) operates the whal.com.au warehouse management platform. We are based in Australia and our service is designed for Australian businesses. This policy explains how we collect, use, store, and protect your personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We collect the following types of information:
Account information: name, email address, company name, and password when you sign up or are invited to a workspace.
Warehouse data: product catalogues, pallet records, stock movements, client details, invoices, and other operational data you enter into the platform. This is your data — we store it on your behalf.
Usage data: pages visited, features used, browser type, IP address, and device information. We use this to improve the product and diagnose issues.
Payment information: if you subscribe to a paid plan, payment is processed by Stripe. We do not store your credit card number — Stripe handles that directly.
We use your information to provide and improve the Whal platform, process payments, send you service-related communications (account confirmations, security alerts, product updates), respond to support enquiries, and comply with legal obligations. We do not sell your personal information to third parties. We do not use your warehouse data for any purpose other than providing the service to you.
We may share your information with the following third-party service providers, solely for the purpose of operating the platform:
Hosting: Vercel (application hosting) and Neon (database hosting). Your data is stored on servers in regions operated by these providers.
Payments: Stripe processes all payment transactions.
Email: we may use a transactional email service to send account-related messages.
We require all service providers to handle your data in accordance with applicable privacy laws. We do not share your data with advertisers or data brokers.
We use essential cookies to keep you logged in and remember your preferences (such as your preferred display unit). We do not use advertising or third-party tracking cookies. Analytics, if used, are privacy-respecting and do not track you across other websites.
We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification, and disclosure. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. Database access is restricted to authorised personnel only.
We retain your account and warehouse data for as long as your account is active. If you cancel your subscription, your data will be retained for 90 days to allow for reactivation, after which it will be permanently deleted. You may request earlier deletion by contacting us.
Under the Australian Privacy Principles, you have the right to access the personal information we hold about you, request correction of inaccurate information, and request deletion of your data. To exercise these rights, contact us at the email below. We will respond within 30 days.
We may update this policy from time to time. If we make significant changes, we will notify you via email or through a notice in the application. The “Last updated” date at the top of this page reflects the most recent revision.
If you have questions about this policy or want to make a privacy-related request, email us at hellowhal@icloud.com.