Data processing addendum

For business and enterprise customers: how LED TECHNO FUSION S.R.L. processes the personal data the service can see while you use WhispShare with your customers.

Last updated October 29, 2026

Scope

This addendum covers the data our servers hold — the privacy table is its inventory. Content is out of scope by construction: files, messages, cards, voice messages, calls, room contents, bookings and reviews travel device to device and never reach our servers, so there is nothing for us to process on your customers' content.

Roles

For the data in the privacy table, LED TECHNO FUSION S.R.L. is the processor of account, session, usage and registry rows on your behalf, and the controller of the few rows it needs to run and bill the service (sign-in, billing, abuse limits). You are the controller of what your customers send you.

Measures

Sessions are encrypted device to device; a relay forwards ciphertext only. The pairing secret stays in the link fragment and is never sent, logged or put in history. Server logs hold ids, codes and durations only, for 14 days. The sealed slot is ciphertext to the receiver's key, kept 7 days or until pickup.

Sub-processors

The service runs on our own endpoints in the regions the architecture names, plus Stripe for billing and the relay providers listed on the status page. We update this addendum when the list changes and give notice for paid plans.

Requests, export and deletion

The account export lists every row the privacy table marks for export; deleting the account deletes the rows kept until deletion. For a request we cannot answer from the table — because the data never existed here — we say so plainly. Write to support@whispshare.com.

Breach notice

If a breach touches the data our servers hold, we tell the affected customers without undue delay, with what happened, which rows it touched and what we did.