Privacy policy

1. Who is responsible

The data controller is Raphaël Stanislas. For any question or request about your data: privacy@wh3re.com.

WH3RE applies the European Union’s General Data Protection Regulation (GDPR) and Israel’s Privacy Protection Law.

2. Your account

Your email address, your language, and the date you accepted these terms. If you sign in with Google, Google also passes on your verified email address, your first name, your name and the address of your profile photo (openid, userinfo.email and userinfo.profile permissions); WH3RE keeps the photo’s address at Google, not the image. Your first name and photo are shown to you, to the friends you have accepted and to the members of your groups (section 6), never to third parties.

3. Gmail and Google Calendar, if you connect them

When you click “Connect Google”, Google offers you two permissions, each of them optional: reading your email headers (gmail.metadata) and reading your calendar events (calendar.events.readonly). You can grant only one: WH3RE then imports that source only, tells you so, and offers you the other whenever you want. No Google token is kept: at the end of each import, WH3RE revokes with Google the access it has just used. The token exists only during the import, in the memory of your browser and of the function doing the reading; if Google pauses the reading, your browser retries by itself within 45 minutes, then the access is revoked the same way.

• What is read in Gmail: for each email from the last 24 months (at most 3,000 sent and 3,000 received), the From, To and Cc headers, the message’s internal timestamp (internalDate), its Gmail labels (Sent, Inbox, Primary, Promotions…) and whether it carries a List-Unsubscribe header, which marks a newsletter and leaves it out. WH3RE also reads your Gmail account’s address, so as not to count you among your contacts, and the number of emails in your folders, for the progress bar.
• What is read in Calendar: in your primary calendar, your past events from the last 24 months (5,000 at most), with their date, status and attendees (email address, display name, reply to the invitation, room or resource). A cancelled event or one you declined, an attendee who declined, a room, do not count.
• What is never read or kept: the subject, body and attachments of your emails; the title, description, location and attachments of your events.
• What is kept: one record per person you wrote to or met (name, email address, company guessed from the address), with counters (emails sent and received, meetings, date of last contact) and a tie strength from 1 to 5. Newsletters, bots and mailing lists are left out.
• What is derived from it, and for whom: to answer your questions, your contacts’ job title, company (including one guessed from an address’s domain) and tie level (1 to 5, computed from the counters) are sent to Anthropic, without any name, email address, counter or LinkedIn link (section 7). When you ask for a message, the person’s first name (their full name for an intro), job title and company also go to Anthropic (section 7). Your friends and the members of your groups may see the name, company, job title and tie level of some of your contacts, within the limits of section 6. Your email headers and your contacts’ email addresses are passed on to no one.
• How to delete everything: in one click, from Connectors or Profile › Privacy › Connected sources (“Delete Google contacts”). The records that came from Google are erased right away; the Google counters of records also known through LinkedIn are reset to zero.

WH3RE’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This information is used only to show you your network. It is not sold, not used for advertising or to train AI models, and no human reads it, except at your request, for security, or where the law requires it.

4. LinkedIn, if you add your file

The file LinkedIn sends you is read on your device. Only your connections file (Connections.csv) is opened, and only this information is sent to WH3RE: name, company, position, profile link, connection date. The rest of the archive (messages, invitations, email addresses) is never read or sent.

WH3RE never signs in to LinkedIn for you and reads nothing on the LinkedIn website. When you open LinkedIn from WH3RE to request your export, WH3RE notes the date, to remind you once by email to drop the file if it hasn’t arrived the next day.

5. The people in your network

The records in your network are about people other than you. They are never contacted by WH3RE. They contain only what your own accounts already show: who wrote to or met you, and when. They are visible only to you, with one exception that you choose: your friends and the members of your groups (section 6).

Basis: the legitimate interest in helping you find who you know, and in asking your friends to introduce you, limited to this information. Anyone who thinks they appear in a user’s network can ask for their record to be erased by writing to privacy@wh3re.com.

6. Your friends and groups

You can add friends on WH3RE. A friendship exists only if both people accept it, and sharing goes both ways: when your friend asks a specific question (a company, a role or a person’s name), they can see at most three people in your network who match, with their name, company, job title and the level of your connection (for example “email often”, “connected on LinkedIn”). And the other way round.

• What your friend never sees: the list of your network, email addresses and counters (number of emails or meetings), your questions, and the people you removed from your network.
• Removing a friend stops the sharing immediately, both ways. They are not notified.
• Findable by email: if someone who has your email address in their network uses WH3RE, they see you on their Friends page (first name, Google photo, approximate size of your network) and can send you a friend request. You are notified by a WH3RE email and in the app; nothing is shared until you accept. You can turn this setting off in Profile › Privacy.
• Inviting someone: WH3RE creates a personal link, valid for 30 days and usable once, and drafts a message. You send it yourself. The person becomes your friend only if they accept on the link’s page.
• Asking a friend for an intro: WH3RE drafts a message to your friend (section 7). Nothing is sent to the person they know.
• Groups: a community can create a group on WH3RE. Joining a group is an explicit choice, made on its link page. Each member can then find people in your network the way a friend would (at most three, on a specific question, with their name, company, job title and how close you are), and you can find people in theirs. Never the list, email addresses or counts, and never a member’s friends or other groups. The person who runs the group sees who joined (first name, Google photo, approximate network size, date joined), never your contacts. A group’s public page shows its number of members, the approximate number of people within reach and the companies known by at least two members. It’s give-to-get: you can only search a group once your own network is connected, and the person who runs it sees how many members have done so. You can leave a group whenever you want: your network leaves its searches right away, and no one is notified.
• Asking a group member for an intro: your request, with your message, lands in their “My requests”, and WH3RE lets them know by email. Your email addresses are only exchanged if they answer “I’ll take it”. If they answer “Not now”, you are not told.

Basis: your consent and your friend’s, or each group member’s, for the sharing, which anyone can withdraw at any time; legitimate interest for the people in your networks, limited to the information above.

7. Your questions and artificial intelligence

The questions you ask in the chat are saved in your history. To answer them, they are sent to Anthropic’s API (Claude model). To find the right people, your question is sent with your contacts’ job titles and companies and how close you are (a level from 1 to 5), without their names, emails, LinkedIn profiles or the history of your exchanges. When your question names a specific company or person, only your question is sent. Anthropic acts as a processor: it does not use this data to train its models and keeps it only for a limited time, under its commercial terms.

When you choose “Write to…” on a person, WH3RE prepares a first draft of the message with Claude. Anthropic then receives: the person’s first name, their company and job title if known, your question and your first name. Nothing else from your network. For an intro asked of a friend or a group member: your friend’s first name, the name, job title and company of the person they know, your question and your first name. You edit the message, and nothing goes out without your confirmation: WH3RE opens Gmail, WhatsApp or LinkedIn with the text ready, or copies it, and you send it yourself.

When you confirm a message, WH3RE records to whom, when and on which channel, to show it in “My requests”. The text of the message is not kept, except for an intro request sent to a group member in WH3RE: it is kept with its text so they can read and answer it.

8. Why, and on what basis

• Providing the service (signing you in, importing your sources, showing your network, answering your questions): performance of the contract, i.e. the terms of use.
• Importing Gmail, Calendar and LinkedIn: your explicit request, at each import. You can delete each source at any time.
• Security, abuse prevention, usage limits: legitimate interest in keeping the service safe and available.
• Usage log: WH3RE records a few simple events to know whether the service is useful and to improve it (sign-in; import started, finished, failed or interrupted, with its duration and the number of people imported; question asked; message drafted; sending confirmed and its channel; friend request, friend accepted, invitation prepared or accepted; group created, joined or left, member removed, search or intro request in a group). Never a person’s name or address, nor the text of a question or message. No cookie or third-party tool for this. Basis: legitimate interest; you can object by writing to privacy@wh3re.com.
• Service emails (sign-in code; a single reminder the next day if you joined a group without connecting your network, or requested your LinkedIn export without dropping it): performance of the contract.

9. What WH3RE does not do

• No reading of the subject, body or attachments of your emails, nor of the title or description of your events.
• No selling or renting of your data, or of your network’s.
• No advertising, no ad profiling, no third-party trackers in the app.
• No message sent on your behalf to the people in your network. The only emails WH3RE sends to someone other than you tell a WH3RE user that you sent them a friend request, or that you are asking them for an intro in a group (and, if they take it on, give you their address and give them yours).
• No training of AI models on your data.
• No browser extension reading LinkedIn or other sites for you.

10. Who holds your data

WH3RE relies on a few providers, bound by data processing agreements:

• Supabase: database and sign-in (servers in Ireland, European Union);
• Vercel: hosting of the app;
• Anthropic: understanding questions, picking the people in your network who match them (based on their job title and company) and drafting messages;
• Resend: sending sign-in emails and friend request emails (otherwise Supabase sends the sign-in ones).

Google provides “Continue with Google” and the data you import from Gmail and Calendar.

Some providers are based in the United States. These transfers are covered by the European Commission’s standard contractual clauses or by the Data Privacy Framework. Israel benefits from an EU adequacy decision.

11. How long

• Your account and your network: as long as your account exists.
• A source you delete (“Delete Google contacts”, “Delete LinkedIn contacts”, from Connectors or Profile › Privacy): what it brought is erased right away.
• A person you remove from your network: they disappear from your list and searches; their record is kept so a new import doesn’t bring them back, until you restore them or delete the source.
• Your account deleted: all your data is erased from the database immediately. Technical backups disappear as they rotate, within 30 days at most.
• My requests: as long as your account exists.
• Groups: as long as you stay a member. An intro request through a group, with its text: as long as your account and the member’s exist.
• Friendships: as long as you stay friends; a declined request is kept so the same person cannot send you another one for 30 days. Invitation links: usable for 30 days, erased with your account.
• Usage log: 13 months at most.
• Technical logs: a few weeks at most, depending on the host.

12. Your rights

You can at any time access your data, correct it, erase it, receive a copy in a readable format, object to processing or ask for it to be restricted, and withdraw your consent.

Most of it is done directly in the app: Connectors for sources, Your network for people, Friends for your friends, Profile › Privacy for the account and the “findable by email” setting. For the rest, write to privacy@wh3re.com: you will get an answer within a month.

WH3RE keeps no access to your Google account between two imports: the access is revoked at the end of each one. You can check this at any time at myaccount.google.com/permissions.

You can lodge a complaint with a data protection authority: the CNIL in France, your country’s authority in the European Union, or Israel’s Privacy Protection Authority.

13. Security

Traffic is encrypted (HTTPS). Every piece of data is tied to its owner, and the database refuses any access to other people’s. No Google access token is kept. If a data breach affects you, you and the competent authority will be told within the legal time limits.

14. Cookies

The app uses only strictly necessary cookies: your session, your language, the page to return to after signing in, and the fact that you already accepted these terms on this device. No advertising or analytics cookies, hence no banner.

15. Changes

If this policy changes significantly (for example when a new feature processes new data), the app shows you the new version at your next sign-in and asks you to accept it again before continuing. The date and version number at the top of the page show the version in force.

16. Version history

• 2026-11-08.1 (November 8, 2026): Google in detail (headers and fields read, token revoked at the end of each import, a single permission is enough); what is derived from Google data and who it goes to (Anthropic, friends and groups); one-click deletion from Profile › Privacy. Terms of use: a significant change is shown at your next sign-in, to be accepted again, instead of an email 15 days in advance.
• 2026-11-07.1 (November 7, 2026): give-to-get groups; one reminder email the next day (group joined without a network, LinkedIn export not dropped); Calendar limited to events (calendar.events.readonly).
• 2026-11-06.2 (November 6, 2026): groups, and intro requests to a member kept with their text.
• 2026-11-06.1 (November 6, 2026): Google import over 24 months instead of 12.
• 2026-11-05.2 (November 5, 2026): your contacts’ job titles and companies are sent to Anthropic to answer your questions.
• 2026-11-05.1 (November 5, 2026): app address wh3re.com.
• 2026-11-04.4 (November 4, 2026): database location.
• 2026-11-04.3 (November 4, 2026): first published version.