SYSTEM PROTOCOL: DATA SOVEREIGNTY
Operational parameters for the exchange of information.
// THE SOVEREIGN PLEDGE //
In the Legacy OS, 'Privacy Policies' are designed to hide extraction.
In this Network, we operate on Transparency.
- WE DO NOT FARM YOU. We do not sell your behavior to data brokers.
- THE SIGNAL IS ENCRYPTED. Payment data is handled directly by Stripe (PCI Level 1).
- THE EXIT IS ALWAYS OPEN. If you delete your account, we scrub your data, subject to lawful retention requirements for tax and legal compliance.
*Below is the standard legal framework required by International Law to operate this node.*
Introduction
Whispers ("Follow Whispers," "Following Whispers," "we," "us," or "our"), a property of LastMile Innovations Inc. (DBA: The Network), operates the website located at followwhispers.com and related services (collectively, the "Network").
This Privacy Protocol describes how we collect, use, disclose, and safeguard your information when you visit our Network, subscribe to our newsletter, purchase products, or otherwise interact with us. By accessing or using the Network, you consent to the practices described in this policy.
System Note on Data Sovereignty: In this Protocol, "Data Sovereignty" refers to your right to access, port, and delete your data. It does not imply immunity from valid legal process or total independence from third-party infrastructure described in Section 3.
If you do not agree with this Privacy Protocol, please discontinue use of the Network immediately.
1. Information We Collect
Information You Provide Directly
- Account Information: When you register for an account, we collect your email address and password. You may optionally provide a display name or profile information.
- Newsletter Subscription: When you subscribe to The Transmission (our newsletter), we collect your email address and the source of your subscription.
- Payment Information: When you make a purchase or subscribe to a paid tier, payment details (credit card number, billing address) are collected and processed directly by our payment processor, Stripe, Inc. We receive only a limited subset of this information (e.g., last four digits of card, expiration date, billing postal code) for record-keeping and fraud prevention.
- Communications: When you contact us via email or other channels, we collect the content of your messages and any information you choose to provide.
Information Collected Automatically
- Device & Browser Data: We automatically collect information about your device, including IP address, browser type, operating system, device identifiers, and referring URLs.
- Usage Data: We collect information about how you interact with the Network, including pages visited, time spent on pages, links clicked, and features used.
- Cookies & Similar Technologies: We use cookies, pixels, and similar tracking technologies to enhance functionality and gather analytics. See Section 4 for details.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide Services: To create and manage your account, process transactions, deliver purchased content, and fulfill subscription benefits.
- Communications: To send newsletters, transactional emails (purchase confirmations, account updates), and, with your consent, promotional communications.
- Improve the Network: To analyze usage patterns, diagnose technical issues, and enhance the functionality, content, and user experience.
- Security & Fraud Prevention: To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activities.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
- Enforce Terms: To enforce our Terms of Service, including the Binding Arbitration and Class Action Waiver provisions contained therein.
3. Third-Party Services
We partner with trusted third-party service providers to operate the Network. These providers have access to your information only to perform specific tasks on our behalf and are obligated to protect your data.
Payment Processing
Stripe, Inc. — Processes all payment transactions. Stripe collects and stores your payment information subject to their Privacy Policy. We do not have access to your full credit card numbers.
Authentication & Database
Supabase, Inc. — Provides authentication services and secure database hosting. Your account credentials and data are stored on Supabase infrastructure subject to their Privacy Policy.
Email Delivery
Resend — Delivers transactional and newsletter emails on our behalf. Email addresses are shared with Resend for delivery purposes.
Analytics
Vercel Analytics — Provides privacy-friendly website analytics to help us understand how visitors use the Network. Vercel Analytics does not use cookies for tracking and is GDPR-compliant.
Hosting
Railway / Vercel — Hosts the Network infrastructure. Access logs and server-side data may be stored on their systems.
We may disclose your information to other third parties when:
- Required by law, subpoena, or other legal process
- Necessary to protect our rights, safety, or property, or that of others
- In connection with a merger, acquisition, or sale of assets (you will be notified of any such change)
- With your explicit consent
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Protocol, unless a longer retention period is required or permitted by law.
- Account Data: Retained while your account is active and for a reasonable period thereafter to allow for reactivation or support requests.
- Transaction Records: Retained for at least 7 years to comply with tax, accounting, and legal obligations.
- Newsletter Subscriptions: Retained until you unsubscribe. Upon unsubscription, we may retain your email in a suppression list to honor your opt-out preference.
- Server Logs: Automatically deleted after 90 days unless required for security investigations.
When data is no longer needed, we securely delete or anonymize it.
6. Your Rights (Universal)
Depending on your location, you may have certain rights regarding your personal information:
We believe privacy is a fundamental human right, not a jurisdictional privilege. Therefore, we grant all users, regardless of location (California, Europe, or elsewhere), the following rights:
- Right to Access: You currently have the right to request a copy of the personal information we hold about you.
- Right to Rectification: You have the right to request correction of inaccurate or incomplete data.
- Right to Deletion: You have the right to request deletion of your personal information (also known as the "Right to be Forgotten"), subject to legal retention requirements.
- Right to Portability: You have the right to request your data in a structured, commonly used, machine-readable format.
- Right to Opt-Out: You have the right to opt-out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising. (Note: We do not sell your data, but we honor this right and the GPC signal universally.)
- Right to Non-Discrimination: We will not discriminate against you (e.g., by denying services or changing prices) for exercising your privacy rights.
How to Exercise Your Rights
You can exercise any of these rights by contacting us. We will verify your identity to protect your security.
Email: [email protected]
Response Time: We endeavor to respond to all valid requests within 30 days.
7. Children's Privacy
The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].
If we become aware that we have inadvertently collected personal information from a child, we will take steps to delete such information promptly.
8. International Data Transfers
The Platform is operated from the United States. If you access the Network from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.
By using the Network, you consent to the transfer of your information to countries outside your country of residence, which may have different data protection rules than your country. We take steps to ensure that your information receives an adequate level of protection in the jurisdictions in which we process it.
For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.
9. Security
We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:
- Encryption of data in transit (TLS/SSL) and at rest
- Secure password hashing and authentication protocols
- Access controls limiting data access to authorized personnel
- Regular security assessments and monitoring
- Use of reputable, security-conscious third-party providers
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials.
10. Changes to This Privacy Protocol
We may update this Privacy Protocol from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Effective Date" at the top of this page
- Post a notice on the Platform
- For significant changes, notify registered users via email
Your continued use of the Platform after the updated Privacy Protocol takes effect constitutes your acceptance of the changes. We encourage you to review this page periodically.
11. Contact Us
If you have questions, concerns, or requests regarding this Privacy Protocol or our data practices, please contact us:
Whispers
A property of LastMile Innovations Inc.
Privacy Inquiries: [email protected]
Website: followwhispers.com
Mailing Address:
LastMile Innovations Inc.
[INSERT PHYSICAL ADDRESS OR REGISTERED AGENT ADDRESS HERE]
[CITY, STATE, ZIP CODE]
We will endeavor to respond to all privacy-related inquiries within 30 days.
End of Protocol Document • Last Updated: December 24, 2025 • Your Data, Your Sovereignty