Privacy Policy

This Privacy Policy explains how Digital Raspberry LLC, which operates WhyHire, collects, uses, shares, and retains personal information when you browse WhyHire, submit a request or public business website for analysis, create an account, purchase a project, upload materials, request access to an analysis or sample, or receive a deliverable.

WhyHire is an AI-native service platform. The information you submit may be processed by software, artificial intelligence providers, automation, third-party service providers, and people involved in fulfillment or quality review.

The information WhyHire processes depends on how you use the service.

• Account information, such as name, email address, authentication-provider identity, and account or session identifiers.
• Project information, such as requests, clarification questions and answers, approved scopes, pricing, status, instructions, project communications, and source or referral context submitted with an intake.
• Customer Content, such as documents, spreadsheets, images, datasets, business records, brand assets, and other files or materials you choose to provide.
• Payment and purchase information, such as transaction amount, currency, status, Stripe customer and Checkout references, and billing-related metadata needed to administer an order.
• Technical and security information, such as IP address where processed, browser or device information, cookies, timestamps, application and security logs, errors, diagnostics, upload metadata, and authorization events.
• Fulfillment information, such as workflow records, AI processing records, validation and quality records, internal fulfillment notes where applicable, and deliverables.

When a visitor requests an anonymous business analysis, WhyHire processes the submitted website address, normalized domain, request and session identifiers, timestamps, Google Analytics client ID and first-touch source or referral attribution where available, and technical and anti-abuse information such as IP-derived rate-limit data. WhyHire also records a homepage analysis-submission measurement event. WhyHire then reviews a bounded selection of publicly accessible pages from the submitted business website.

WhyHire may retain source URLs and metadata, retrieval status, content hashes and sizes, bounded supporting excerpts, citations, findings, assumptions, limitations, confidence labels, report records, and collection diagnostics. The current workflow is not represented as retaining complete raw copies of every fetched webpage.

The person submitting a website may not own or represent the analyzed business. Information on public business pages may therefore concern the business, its personnel, or other people who did not submit the request. WhyHire uses that information only for the analysis, access, security, support, quality, scoping, and legal purposes described in this Policy.

WhyHire uses information to provide and administer the service you request, including to interpret and scope work, ask clarification questions, generate a proposal and price, authenticate users, provide project workspaces, receive files, process payments, perform fulfillment, validate quality, and deliver completed work.

WhyHire also uses information to communicate about projects and transactions, provide support, maintain service reliability and security, prevent fraud and abuse, enforce agreements, improve generalized service quality, and comply with legal obligations.

WhyHire does not use Customer Content for unrelated public marketing. A customer name, logo, testimonial, case study, identifiable deliverable, or identifiable project detail requires separate permission.

WhyHire uses anonymous-analysis information to validate public destinations, prevent abuse, collect and structure public website evidence, produce and quality-gate informational findings, provide status and report access, evaluate optional sample requests, and convert a selected finding into a separate scoping request. Submitting or viewing an analysis does not by itself enroll a person in marketing.

WhyHire may use artificial intelligence models and automated systems to understand requests, ask questions, scope work, research or analyze information, generate or transform content, perform portions of fulfillment, and support validation or quality review. Provider and method use varies. WhyHire does not represent that every anonymous business analysis sends information to an external AI provider.

Project information and Customer Content may be sent to third-party AI service providers when reasonably necessary to provide the requested service. WhyHire currently uses AI services provided by OpenAI and Anthropic. Provider use may vary by project and workflow.

WhyHire does not make a public promise about whether every provider uses submitted information for model training or how long a provider retains it because those practices depend on applicable provider configurations and terms. Do not submit information you are not authorized to share.

You may choose to upload project-related files. WhyHire uses those materials to scope, fulfill, validate, secure, support, and deliver the requested project. Access is restricted through the application's account, project, session, and capability-based authorization controls.

The browser may upload files directly through time-limited presigned URLs. The current generic intake limit is 50 MB per declared file, presigned upload access normally expires after 15 minutes, and pending uploads that were not confirmed are normally eligible for cleanup after about 30 minutes. These are operational safeguards, not a promise that every file will be retained for a fixed period.

WhyHire stores project files through Replit object-storage infrastructure backed by Google Cloud Storage. Application and project records are stored in PostgreSQL.

Files may be processed by infrastructure, storage, AI, and other service providers needed for fulfillment. WhyHire is not represented as a system designed for protected health information, privileged legal material, payment-card storage, or other specially regulated records unless Digital Raspberry LLC expressly agrees otherwise in writing.

WhyHire uses Stripe-hosted Checkout for one-time project payments. Stripe collects and processes payment-card and payment-method information under Stripe's own privacy practices. WhyHire does not receive or store complete payment-card numbers through this flow.

WhyHire receives and retains purchase information such as amount, currency, payment status, Stripe identifiers, customer or billing metadata needed to administer the purchase, and refund or payment-review records.

WhyHire uses necessary cookies and similar technologies for anonymous intake continuity, authentication, account security, project access, and application functionality. The opaque wh_anon cookie is HttpOnly and SameSite=Lax. Only a SHA-256 hash of that anonymous token is stored in the application database, and the current anonymous-session time to live is up to 30 days. Clerk manages authentication sessions for signed-in users.

WhyHire also uses browser sessionStorage for short-lived project claim and intake capability information. This storage is limited to the browser session. A user-interface preference cookie may be used for layout state.

The current application does not include an advertising or behavioral-tracking SDK. If WhyHire later adds materially different analytics or advertising practices, this Policy will be updated before those practices are represented here.

WhyHire may use first-party attribution and Google Analytics 4 on eligible public marketing pages to understand how visitors find and use the service. Private analysis capability routes are excluded from client analytics. WhyHire does not intentionally send analysis reports, submitted business metrics, verification emails, or capability tokens to Google Analytics. Depending on location and applicable law, WhyHire may provide a consent or opt-out control for non-essential analytics.

WhyHire shares information only as reasonably necessary for the purposes described in this Policy.

• Replit and related infrastructure or storage services, including Google Cloud Storage and PostgreSQL infrastructure, used to host, operate, store, and secure the application.
• Clerk for authentication and account sessions.
• Stripe for payment processing and order administration.
• OpenAI and Anthropic for AI-assisted scoping, fulfillment, or quality workflows where applicable.
• Other data, software, external API, or fulfillment providers used for the specific service, including customer-authorized systems.
• Professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights or security, investigate abuse, or complete a business transaction subject to appropriate safeguards.
• Transactional email providers, currently Resend, to send analysis verification and access messages and record delivery status.
• Public website operators and network providers necessarily involved when WhyHire requests a publicly accessible page for analysis.

If you request a full report, WhyHire stores the email address you provide, a hashed verification challenge, verification status, attempts, and timestamps. The verification message is transactional and does not itself add the address to marketing. Verification links normally expire after about 30 minutes.

After verification, WhyHire may issue a scoped report-access token. WhyHire stores a hash of the token, while the usable token appears in the emailed capability link. Full-report access normally expires after 7 days and may be revoked. Anyone with the link may be able to access the report until expiration or revocation, so recipients should protect it.

Optional business metrics are intended to be non-public Customer Content and are available through the report's access controls. WhyHire uses them to calculate or refine report scenarios, support the report, and prepare a requested scope. Prior values may be superseded or marked removed while audit and integrity records are retained. WhyHire does not represent this feature as suitable for regulated or highly sensitive information.

WhyHire does not currently sell personal information and does not currently use personal information for cross-context behavioral advertising. WhyHire does not grant itself permission to sell Customer Content.

WhyHire retains information for as long as reasonably necessary to provide services, maintain accounts and projects, administer purchases, deliver and support work, maintain security, resolve disputes, enforce agreements, and satisfy legal or accounting obligations.

Retention varies by the type of record and the purpose for which it is held. WhyHire does not publish a universal fixed retention period that the current system does not enforce. Some temporary upload records and session technologies have shorter operational lifetimes.

Expiration of a verification link, report grant, sample request, or status does not by itself delete the related analysis or audit record. Analysis, source and evidence, email access, optional metric, sample, conversion, diagnostic, audit, legal, and financial records are retained only as reasonably necessary for approved business, security, contractual, legal, and accounting purposes. WhyHire may preserve minimal suppression records for removal requests and records required for security, disputes, law, or an existing paid order.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or an appeal concerning personal information. These rights are not universal and may be subject to exceptions.

Send privacy questions or applicable rights requests to privacy@whyhire.ai. WhyHire may need to verify your identity and authority before completing a request. WhyHire will respond as required by applicable law.

A person authorized to act for an analyzed business may request review, correction, access restriction, or removal by contacting privacy@whyhire.ai and identifying the business and analysis. WhyHire may verify identity and authority, balance the request against applicable rights and obligations, preserve a minimal suppression or audit record, and explain any denial or available appeal. This process is separate from rights that applicable privacy law grants to an individual.

WhyHire uses administrative, technical, and organizational safeguards designed to protect information. These include authenticated account access, project authorization checks, restricted file access, signed upload and download mechanisms, payment webhook verification, and logging controls that redact selected sensitive request fields.

No method of transmission, storage, or processing is completely secure. WhyHire does not claim that information can never be accessed, lost, altered, or disclosed without authorization.

WhyHire is a business and professional-work service intended for adults. It is not directed to children, and Digital Raspberry LLC does not knowingly solicit personal information from children under 13. If you believe a child submitted personal information, contact privacy@whyhire.ai.

WhyHire is operated from the United States. Information may be processed and stored in the United States and other locations where WhyHire's service providers operate. Privacy protections in those locations may differ from those where you live.

WhyHire may update this Privacy Policy as the service or its data practices change. The page will show the effective date, last-updated date, public version, and fingerprint. Material changes will be communicated or presented for acknowledgement where appropriate.

An order keeps the Terms and Privacy Policy version and fingerprint recorded for that order. A later policy version does not silently rewrite the purchase record.

WhyHire may record the public version, deterministic fingerprint, notice version, presentation surface, and timestamp associated with an anonymous analysis. Approved revisions do not silently overwrite those historical records or the Terms and Privacy versions pinned to an existing order.

WhyHire is operated by Digital Raspberry LLC. For privacy questions and applicable privacy-rights requests, email privacy@whyhire.ai.