Privacy Policy
Interim version. WhySet is in private testing. A lawyer has not reviewed this page yet, and one will before public launch. Some features described here are still being built. If we make a change that materially affects you, we'll email you before it takes effect.
This policy explains what personal information WhySet collects, why, who can see it, and the choices you have. It covers whysetai.com and its subdomains.
The short version
- We collect your email address, what you submit, and the basic technical data needed to run the site.
- Your original concern is never published and is never put into training data. Our AI model and our reviewers do read it.
- A reviewed summary of your concern, and content based on it, may be published for anyone to use. Neither includes your name or email address.
- We don't sell your information, show ads, use analytics or tracking cookies, or send marketing email.
- You can download or delete your information at any time from your account page, or by emailing hello@whysetai.com.
Who we are
WhySet is run by Bit Developers, LLC, doing business as Bit Ghost Security, which is responsible for your information. You can reach us by email at hello@whysetai.com or by mail at 999 Corporate Drive, Suite 100, Ladera Ranch, CA 92694, USA.
What we collect
- Account details: your email address, which is also your username, and the date you joined.
- Login records: a protected (salted and hashed) copy of each one-time code, when it was sent, and how many attempts were made. We don't store the code itself in readable form.
- Concerns: the text you submit, when you submitted it, and where it is in the process. Please leave out names, employers, health details and anything else that identifies someone.
- Messages: anything you send us by email, including your address.
- Technical data: your IP address, the pages you request, the time of each request, and your browser details, as recorded in server logs. We also use your IP address to limit repeated login attempts.
- Email delivery records: our email provider records whether each message was delivered or bounced. We don't turn on open or click tracking.
We don't buy information about you or collect it from other sources.
Why we use it
If you are in the EU, UK or a similar region, the legal basis for each use is shown in brackets.
- To create your account, log you in, and send login codes and status emails (performing our agreement with you).
- To generate, review and publish content from concerns (performing our agreement with you, and our legitimate interest in building an open library of AI training content).
- To keep the site secure, prevent abuse and fix problems (our legitimate interest in running a safe service).
- To respond to you, and to meet legal duties (our legitimate interest in responding, and legal obligation).
What happens to your concern
- It enters the queue. The text is stored on our server.
- An AI model reads it. The model runs on computers we operate ourselves in the United States, not on an outside AI service. It decides whether training content could address the concern, and writes a summary meant to leave out personal details. The original text is not passed to the later generation steps. Our software doesn't save it on those computers, though the model server's own temporary logs may hold it, and we clear those within 30 days.
- People may read it. Our administrators and reviewers can see the original text so they can run the service and check the summary.
- Content may be published. A person reviews the summary and generated content before anything is published. Published material doesn't include your name or email address, and we don't publicly say who submitted a concern.
Software may label a concern as something training content can't address. This has no legal effect on you. Email us if you'd like a person to look at it.
Published content is meant to be reused. Anyone may copy it, and AI developers may use it to train models. Once it is public, we can't recall copies other people have made. If you think published material identifies someone, tell us and we'll review it promptly and correct or remove our copy if it does.
Who can see your information
- Our team: administrators and reviewers, only as needed to run the service.
- DigitalOcean hosts the site and database on servers in San Francisco, California.
- Mailgun delivers our emails, so it handles your email address and the message content, including login codes.
- Authorities or other parties, when the law requires it, or when needed to protect people's safety or our legal rights.
- A new owner, if WhySet or Bit Developers, LLC is sold or reorganized. This policy would continue to apply to your information until you are told otherwise.
We don't sell your personal information or share it for advertising.
Cookies
We only use cookies the site needs to work: one keeps you logged in, one protects forms against forged requests, and one carries your email address briefly between login steps. We don't use advertising or analytics cookies, so we don't show a cookie banner. A login stays active on a device until 14 days after you last use the site there.
We don't track you across other websites, so browser "Do Not Track" signals don't change how the site works. Because we don't sell or share personal information, we also have nothing to stop in response to a Global Privacy Control signal.
How long we keep it
- Login records: removed about a day after the last code was sent.
- Account details and concerns: until you ask us to delete them, or we close the service.
- Server logs: up to 30 days.
- Emails you send us: as long as needed to deal with your request and keep a reasonable record of it.
- Backups: deleted information can stay in backups for up to 30 days, until those backups expire.
- Published summaries and content: indefinitely, because they are part of the public library.
Security
We use encrypted connections, store login codes only in protected form, limit login attempts, restrict server access, and keep the database off the public internet. No system is perfectly secure, and there are limits you should know about:
- Anyone who can read your email can log in to your account, so keep your mailbox secure.
- Login codes pass through our email provider and your own email provider.
- Concerns aren't encrypted in a way that stops us reading them, because our model and reviewers need to read them.
If a breach affects your information, we'll notify you and the authorities as the law requires.
Your rights and choices
Wherever you live, you can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it, including changing your email address;
- delete your account and your concerns;
- stop or limit a particular use of your information, or review an objection to it.
On your account page you can download your data, change your email address and delete your account. For anything else, email hello@whysetai.com from your account's address. We'll reply within 30 days and won't charge you or treat you differently for asking. We may need to confirm that you control the address, and we may keep what the law requires us to keep. An authorized agent may make a request for you if you confirm you gave them permission. If we refuse a request, we'll explain why, and you can ask us to reconsider.
Deleting your account removes your email address and original concerns. It doesn't remove published summaries or content, which don't identify you.
Login codes and status emails are part of how the service works, so they have no unsubscribe option. To stop them, stop using the site or ask us to delete your account.
California residents
In the past 12 months we have collected identifiers (such as your email and IP address), internet activity (such as server logs), and the content you submit, for the purposes and from the sources described above, and have disclosed them to the service providers listed above. We don't sell or share personal information as California law defines those terms, and we don't disclose it to others for their direct marketing. Where California privacy law applies to us, you have the rights to know, delete and correct, and not to be retaliated against for using them. We offer the same rights to everyone.
EU, UK and similar regions
You also have the rights to restrict or object to how we use your information, to take a copy with you, and to complain to your local data protection authority. Our servers and team are in the United States, so your information is transferred there and handled there. United States privacy law may differ from the law where you live. We don't currently have a representative in the EU or UK.
Age limit
WhySet is only for people aged 18 or older. If you believe someone younger has given us information, tell us and we'll delete it.
Changes to this policy
We'll post any change here and update the date at the top. If a change materially affects you, we'll email you before it takes effect.
Contact
Bit Developers, LLC d/b/a Bit Ghost Security
999 Corporate Drive, Suite 100, Ladera Ranch, CA 92694, USA
hello@whysetai.com