Whodini Privacy Policy

Effective Date: October 5, 2026 | Previous version: March 27, 2026

1. Introduction

This Privacy Policy ("Policy") describes how Whodini AI, Inc. ("Whodini," "we," "us," or "our"), a Delaware corporation, collects, uses, processes, shares, and protects information in connection with the Whodini browser extension, the Whodini web application, and all related services (collectively, the "Service").

Scope, and our two roles. Whodini handles personal information in two distinct roles, and this Policy covers both.

For information about the people who use the Service, and for the professional profile information Whodini compiles for its own databases (Sections 3.6 and 4.6), Whodini is the controller and this Policy governs how we use it.

For material a user uploads or submits, including documents, profile URLs, job descriptions, and questions (Sections 3.5 and 4.5), Whodini acts as that user's service provider and processor. That material belongs to the user, we handle it only on their instructions, and the user, not Whodini, decides why and how it is used. Sections 3.5, 4.5 and 11.5 describe the limits on our role and how individuals can exercise rights in that material.

This Policy applies to all users of the Service. By installing the extension or using the Service, you acknowledge that you have read and understood this Policy. Your use of the Service is also governed by our Terms of Service.

Corporate structure. The Service was developed by WARP 10 AI, LLC ("WARP 10"), a Connecticut limited liability company, which owns Whodini AI, Inc. in its entirety and owns the intellectual property underlying the Service. Whodini AI, Inc. operates the Service under authorization from WARP 10 and is the entity responsible for personal information processed in connection with it, in the roles described above. References to "Whodini" in this Policy include WARP 10 AI, LLC where the context requires.

If you upload resumes or import profiles, here is the short version. Your uploads, and the candidate records we build from them, are private to your account. We use them only to do the analysis you ask for. We do not train AI models on them, our AI providers are not allowed to either, and we do not add them to the databases that power the Service for other customers. You can delete them at any time, and we delete them when you close your account. You are responsible for having the right to share a person's information with us and for the decisions you make; for that material we act as your service provider. Details are in Sections 3.5, 4.5, 6, 8 and 11.

If you are not a Whodini user and want to know whether we hold information about you, see Section 11.5.

2. What the Service Does

Whodini is a browser extension and web application for professionals in the pharmaceutical and life sciences industries, including recruiters. The Service has four principal parts.

• Browser extension. When enabled, the extension reads the content of web pages you visit, transmits relevant portions to Whodini's servers for processing using artificial intelligence and machine learning, and augments the page with tooltips and insight panels containing information about the drugs, companies, and related industry terms it identifies, including related drugs and related companies. The extension does not currently identify individuals named on a page. Whodini may in the future add the ability to recognize a person's name and display information about their professional background from Whodini's own databases.
• Research. The web application lets you search and filter Whodini's databases of drugs, companies, and clinical trials, and save results into projects.
• Ask Whodini. The web application lets you ask questions in natural language, about drugs and companies and more generally, and to attach documents or profile URLs to a conversation. Answers are generated by AI models using Whodini's databases and, for general questions, the model's own training data. Conversations are saved to your account so that you can return to them.
• People and Projects. The web application lets you keep lists of individuals you have viewed or added, upload resumes and similar documents in PDF or Word format, import profile URLs, store a job description with a project, and organize all of it into projects you can return to. Whodini may in the future provide a score or comparison indicating how closely a person's background appears to match criteria you define.

Information you view, save, upload, or organize in the People, Projects, Companies, and Drugs areas is stored on our servers and associated with your account.

The Service is designed for research, evaluation, sourcing, and informational purposes. All output is informational only. Whodini does not provide medical, legal, financial, or regulatory advice, and does not make employment decisions about anyone. Users are solely responsible for how they evaluate, interpret, and act upon information provided by the Service, including compliance with all applicable laws and regulations.

3. Information We Collect

3.1 Account and Authentication Information

When you create a Whodini account or authenticate, we collect information necessary to identify and authorize you, which may include:

• Email address
• Name and organization (if provided)
• Authentication tokens and session identifiers
• Account preferences and settings

3.2 Web Page Content

When the extension is enabled on a supported page, it reads the content of the web page you are viewing, which may include:

• Page text and structured content (the Document Object Model, or DOM)
• The page URL
• Metadata associated with the page

This web page content is transmitted to our servers for processing. We do not retain web page content scanned by the extension after processing is complete, unless you choose to save something from it to your account (for example, by adding a person, drug, or company to a project). Anything you save is stored as Your Content under Section 3.5. Web page content may contain personal information about third parties, such as names, job titles, and biographical information. It is processed as part of the page content necessary to deliver the Service and is not stored unless you save it.

3.3 Usage and Analytics Data

We automatically collect certain information about how you use the Service, including:

• Extension activation and feature usage events
• Web application pages you visit and features you use, for example opening a project or asking a question, recorded as events that do not include Your Content
• Pages on which the extension is activated, at the domain level rather than the full URL
• Performance and error data
• Browser type, version, and operating system
• IP address, used for server communication and security. IP addresses appear in server logs retained as described in Section 8 and are not used for tracking or profiling.

3.4 Information We Do Not Intentionally Collect

Whodini does not intentionally collect:

• Financial account numbers, Social Security numbers, or government-issued identifiers
• Passwords to third-party services
• Health records or protected health information (PHI) as defined by HIPAA
• Biometric data

Because the Service processes web page content as displayed in your browser, and documents and other material you choose to provide, such content may contain personal or sensitive information about you or third parties. Section 3.5 explains how we handle sensitive information that appears in documents you upload.

3.5 Content You Provide, Including Candidate Information

The web application lets you bring your own material into Whodini so that we can analyze it for you. This includes:

• Documents you upload, such as resumes, CVs, and cover letters in PDF or Word format;
• Profile URLs you paste or import, and the publicly available professional profile information we retrieve for those URLs through a third-party data provider;
• Job descriptions and criteria you store with a project;
• Questions, instructions, and other text you enter in Ask Whodini, and the answers, summaries, and comparisons we generate in response;
• Projects, people lists, saved drugs and companies, notes, ratings, and feedback you create in the Service.

We refer to all of this as "Your Content."

Your Content will often contain personal information about people who are not Whodini users, such as job candidates ("Candidate Information"). Candidate Information typically includes a person's name, contact details, work history, education, skills, and publications, and the drug, company, and clinical-trial experience we identify from that history.

Sensitive information. Resumes sometimes contain information that a person chose to include but that we do not need, such as a photograph, date of birth, nationality, citizenship or work-authorization status, marital status, health information, or government identification numbers. We do not seek out or intentionally use this information, we do not include it in the structured candidate records we create, and we do not use it to draw inferences about anyone. We ask that you remove it before uploading where practical. Do not upload documents that contain government identification numbers, financial account numbers, or health records.

Who can see Your Content. Your Content is private to your account. It is not visible to other Whodini users, it is not added to the databases that power the Service for other customers, and it is not incorporated into the Whodini Profiles described in Section 3.6. Section 4.5 explains how we use it, and Section 6 describes the categories of service providers that help us process it.

3.6 Whodini Profiles

Separately from Your Content, Whodini maintains its own databases about drugs, companies, clinical trials, and professionals in the pharmaceutical and life sciences industries. These databases include profile records about individuals ("Whodini Profiles").

Sources. We and our data providers compile Whodini Profiles from publicly available sources, including professional profiles, resumes and CVs published on websites, company websites, regulatory filings and agency publications, clinical trial registries, scientific and medical publications, conference materials, and press coverage. We also license professional profile information from third-party data providers.

Contents. A Whodini Profile may include a person's name, professional contact information, current and past employers and roles, education, publications, and the drugs, companies, and clinical trials we associate with their professional history. We may consolidate information about the same individual from multiple sources into a single record.

Inferences. We may infer professional characteristics from publicly available professional information, such as seniority level, therapeutic area or industry expertise, or the likelihood that a person would be a relevant match for a given role. These inferences are derived from professional information and are used to improve the relevance of search results and Service output.

What Whodini Profiles are not built from. Whodini Profiles are not built from Your Content. Documents you upload, profile URLs you submit, job descriptions you store, and your Ask Whodini conversations are not incorporated into Whodini Profiles and are not made available to other customers.

Whodini is the controller of the information in Whodini Profiles. Because we compile this information from publicly available and licensed sources rather than from the individuals themselves, it is not always possible or proportionate to notify each person directly that we hold information about them. This Policy, together with the request and removal mechanism described in Section 11.5, is intended to serve as the notice required in those circumstances by applicable law, including Article 14 of the GDPR. If you are described in a Whodini Profile, Section 11.5 explains your rights and how to exercise them.

4. How We Use Information

4.1 To Provide and Operate the Service

• Authenticate your access to the Service
• Process web page content to identify and augment drug, company, and related information
• Display information via tooltips, side panels, or page modifications
• Provide search, filtering, and chat features using our databases
• Store and analyze the documents, profiles, job descriptions, and questions you provide, as described in Section 4.5
• Maintain and improve Service functionality

4.2 AI and Machine Learning Processing

The Service uses artificial intelligence and machine learning ("AI/ML") systems to process web page content, our own databases, and Your Content. Specifically:

• Web page content you view is transmitted to our servers, where AI/ML models analyze the text to detect drug names, company names, people, and related industry information.
• The AI/ML system cross-references detected terms against our own and third-party databases to generate the information displayed to you.
• Ask Whodini generates answers using AI models together with our databases. Answers to general questions are generated by the underlying model from its training data, which we do not source or verify.
• AI/ML-generated output may be inaccurate, incomplete, or out of date. Whodini makes no representations regarding the accuracy, reliability, or completeness of any output.
• Web page content scanned by the extension is processed in real time and is not retained on our servers after processing unless you save it. Documents, URLs, job descriptions, and questions you provide are processed by AI/ML systems, including third-party AI model providers, as described in Section 4.5.
• We do not use Your Content to train or improve our AI/ML models, and we do not permit our AI model providers to use it to train theirs. We do not use web page content to train or improve our AI/ML models unless we obtain your separate, explicit consent.

4.3 Analytics and Service Improvement

• Analyze usage patterns to improve Service features and performance
• Monitor for errors, outages, and security incidents
• Generate aggregated, de-identified insights about Service usage

4.4 Legal and Safety

• Comply with applicable laws, regulations, and legal processes
• Enforce our Terms of Service
• Protect the rights, safety, and security of Whodini, our users, and the public

4.5 How We Use Your Content, and Our Role When We Process It

We use Your Content only to provide the Service to you. Specifically, we:

• Extract text from documents you upload and structure the work history, education, and skills they describe;
• Retrieve publicly available professional profile information for profile URLs you submit;
• Match that history against our drug, company, and clinical-trial databases and generate summaries, comparisons, and answers to your questions, including AI-assisted analysis of how a person's experience relates to criteria you define;
• Store Your Content in your account and projects so that you can return to it, edit it, and delete it;
• Diagnose and fix problems, protect the Service and its users, and evaluate the accuracy and safety of our AI features.

What we do not do with Your Content.

• We do not use Your Content, including Candidate Information, to train or improve our AI/ML models, and our AI providers are contractually prohibited from using it to train theirs.
• We do not add Your Content to the Whodini Profiles or to any database that powers the Service for other customers, and we do not make it available to other customers.
• We do not sell it, share it for advertising, or use it for any purpose unrelated to providing the Service to you.

AI providers. To analyze documents and generate answers, we send the relevant portions of Your Content to third-party AI model providers. They process it on our behalf under agreements that prohibit training on Your Content and limit retention to the short periods required for abuse monitoring and legal compliance.

Human review. A small number of authorized Whodini personnel may view Your Content, including Candidate Information, when necessary to respond to a support request you make, to investigate suspected abuse or a security incident, or to evaluate the accuracy and safety of our AI features. Such access is limited to what is necessary, is logged, and is subject to confidentiality obligations.

Our role. When you upload or import Candidate Information, you (or the organization on whose behalf you use the Service) decide what to submit, what to ask, and how to use the results. For Candidate Information, we act as your service provider under the CCPA/CPRA and as a processor under the GDPR and similar laws: we process it only on your instructions, as described in this Policy and our Terms of Service. You are responsible for having a lawful basis to submit Candidate Information to us, for providing individuals with any notice required by applicable law, including laws that require notice when artificial intelligence is used in recruiting or hiring, and for the decisions you make.

Decision support only. Whodini does not make hiring or other employment decisions about anyone. Features that summarize, compare, score, or rank people against criteria you set are tools to support your review. Any score is a heuristic, is not the result of a validated formula, has not been validated as a predictor of job performance, and may be wrong. The decisions are yours, and our Terms of Service require you to maintain independent human review of, and responsibility for, every decision.

4.6 How We Use Whodini Profiles

We use the information in Whodini Profiles to operate and provide the Service, specifically to:

• Identify people, drugs, companies, and clinical trials referenced on web pages and in our databases;
• Provide search, filtering, and question-answering across our databases;
• Display professional background information to our users;
• Derive the inferences described in Section 3.6 to improve the relevance of results;
• Maintain the accuracy, completeness, and currency of our databases, including by consolidating records that describe the same individual; and
• Detect and prevent fraud, abuse, and security incidents.

We do not use Whodini Profiles for advertising, for credit or lending decisions, or to make decisions about any individual. We do not sell Whodini Profiles as a standalone data product.

Making profile information available to our users may qualify as a "sale" or "sharing" of personal information under some state privacy laws. Section 11.5 explains how to opt out.

5. Legal Bases for Processing

For individuals located in the European Economic Area ("EEA"), the United Kingdom, or Switzerland, we rely on the following legal bases under the General Data Protection Regulation ("GDPR") and equivalent laws:

• Contract: Processing necessary to perform the Service a user has requested, including account authentication, content processing, and delivery of results.
• Legitimate Interest: Compiling and maintaining the Whodini Profiles and our other databases, and providing them to our users, based on our legitimate interest in operating and providing a professional research and sourcing platform, where that interest is not overridden by the fundamental rights and freedoms of the individuals concerned. We also rely on legitimate interest for analytics, security monitoring, and service improvement. We conduct and document a balancing assessment for each such use.
• Consent: Where required by applicable law, and where you activate and control the browser extension. You may withdraw consent at any time by disabling or uninstalling the extension.
• Legal Obligation: Processing required to comply with applicable laws, regulations, or legal processes.

Where we process Candidate Information on a user's behalf as a processor (Section 4.5), that user determines the legal basis for the processing. The bases above apply to information for which we are the controller.

6. How We Share Information

We do not sell or share personal information for advertising purposes, and we do not use or transfer personal information for advertising or for profiling unrelated to the Service. We do not sell Your Content or Candidate Information. Section 4.6 describes how professional profile information is made available to our users, which may qualify as a "sale" under some state privacy laws; Section 11.5 explains how to opt out. We share information only as described below.

6.1 Service Providers

We use third-party service providers to operate the Service. Each processes information only for the purposes described and under contractual obligations to protect it. The categories of service providers we use are:

• Cloud hosting and infrastructure, for hosting the Service and storing data
• Third-party AI model providers, such as OpenAI, Anthropic, and Google, for generating answers and analyzing documents
• Observability and monitoring providers, for request tracing, performance monitoring, and error tracking
• Product analytics providers, for measuring feature usage
• Authentication providers, for login and session management
• Professional data providers, for the profile information described in Sections 3.5 and 3.6
• Email delivery providers, for account, onboarding, and product email

Our analytics providers receive usage data only. They do not receive web page content or Your Content, and we exclude people records, uploaded documents, and Ask Whodini conversations from any session recordings.

Our AI model providers receive only the portions of Your Content and other content needed to answer a request. We require them not to use it to train their models, and we require our service providers to delete personal information within thirty (30) days of the end of processing unless retention is required by law.

Our service providers are located in the United States unless otherwise stated. The specific providers we use may change as the Service develops, including the AI models we use, which may be commercial or open-source. Organizations that require a current list of our service providers may request one by contacting privacy@whodini.ai.

6.2 Legal Disclosures

We may disclose information if required by law, subpoena, court order, or other legal process, or if we believe in good faith that disclosure is necessary to protect the rights, safety, or security of Whodini, our users, or the public, or to investigate or prevent fraud, abuse, or security incidents.

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, information may be transferred as part of that transaction. We will notify affected users via email or prominent notice on our website before their information becomes subject to a different privacy policy.

7. Third-Party Websites and Content

The Service operates in part by reading and processing content from third-party websites that you choose to visit. Whodini is not responsible for the content, accuracy, or privacy practices of any third-party website.

User Responsibility for Third-Party Terms. You are solely responsible for your compliance with any terms of service, license agreements, or usage policies governing the third-party websites on which you use the Service. Whodini is not a party to any such agreement and has no liability arising from your use of the Service on any third-party website. Some third-party websites may restrict or prohibit the use of browser extensions, automated access, or modification of their content. It is your responsibility to determine whether your use of the Service on any particular website complies with that website's terms.

8. Data Retention

We retain information only as long as necessary for the purposes described in this Policy, or as required by law.

9. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, or destruction, including:

• All data transmitted between the extension or web application and our servers is encrypted in transit using TLS/HTTPS.
• Data at rest on our servers is encrypted using industry-standard encryption.
• Access to production systems is restricted to authorized personnel and subject to audit logging.
• Your Content is stored in access-controlled storage and is logically separated by account, so that one user's content is not accessible to another.
• We conduct regular security assessments of our infrastructure and codebase.

No method of electronic transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

9.1 Data Breach Notification

In the event of a security breach involving personal information, we will notify affected individuals without undue delay and in accordance with applicable law. For individuals in the EEA, we will notify the relevant supervisory authority within 72 hours of becoming aware of a qualifying breach, as required by GDPR Article 33. For California residents, we will provide notice consistent with California Civil Code Section 1798.82.

10. International Data Transfers

Our servers are hosted in the United States. If you access the Service from outside the United States, or if information about you is processed by us, that information will be transferred to, processed in, and stored in the United States. Some of our personnel and contractors are located outside the United States and may access information in the course of operating and supporting the Service.

For individuals in the EEA, United Kingdom, or Switzerland: we rely on the European Commission's Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum, as the legal mechanism for transferring personal data to the United States. You may request a copy of the applicable clauses by contacting privacy@whodini.ai.

11. Your Rights and Choices

11.1 All Users

• Toggle the extension: You can enable or disable the extension at any time, which stops data collection and processing on web pages.
• Uninstall: You can uninstall the extension to permanently stop all data collection through the extension.
• Manage Your Content: You can delete uploaded documents, people records, projects, and conversations at any time from within the web application, or by contacting support@whodini.ai. Deleting a document also deletes the records we extracted from it.
• Export Your Content: You may request a copy of Your Content in a commonly used, machine-readable format by contacting privacy@whodini.ai.
• Close your account: You may close your account by contacting support@whodini.ai. We delete your account information and Your Content on the schedule described in Section 8.
• Account data requests: You may contact us to request access to, correction of, or deletion of information we maintain about you.

11.2 Rights Under the GDPR (EEA, UK, Switzerland)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights under applicable data protection law:

• Right of access: Obtain confirmation of whether we process your personal data and a copy of that data.
• Right to rectification: Request correction of inaccurate personal data.
• Right to erasure: Request deletion of your personal data, subject to legal exceptions.
• Right to restrict processing: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: Object to processing based on legitimate interests, including the compilation and use of Whodini Profiles described in Sections 3.6 and 4.6, and including direct marketing.
• Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
• Right regarding automated decision-making: We do not make automated decisions that produce legal effects concerning you or similarly significantly affect you. Features that compare, score, or rank people are decision-support tools used by our users, who make the decisions themselves and are required to apply independent human review (see Section 4.5). If you believe an automated decision has been made about you, you may contact us to request human review, and we will refer the matter to the relevant user where appropriate.
• Right to lodge a complaint: File a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at privacy@whodini.ai. We will respond within one month, extendable by two further months for complex requests, with notice to you.

11.3 Rights Under the CCPA/CPRA (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"):

• Right to know: Request disclosure of the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties with whom we share it.
• Right to delete: Request deletion of personal information we have collected about you.
• Right to correct: Request correction of inaccurate personal information.
• Right to opt out of sale or sharing: We do not share personal information for cross-context behavioral advertising. Making professional profile information available to our users may qualify as a "sale" under the CCPA/CPRA, and you may opt out as described in Section 11.5. We honor Global Privacy Control and other opt-out preference signals that we receive from your browser.
• Right to limit use of sensitive personal information: We do not use sensitive personal information for purposes beyond those permitted by the CCPA/CPRA.
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at privacy@whodini.ai. We will verify your identity before processing any request. We will respond within 45 days, extendable by an additional 45 days with notice to you.

11.4 Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Montana, Texas, Oregon, and other states with comprehensive privacy laws may have similar rights to access, correct, delete, obtain a copy of, and opt out of certain processing of personal information, including profiling. To exercise any such rights, contact us at privacy@whodini.ai.

11.5 Information About People Who Are Not Whodini Users

If you are not a Whodini user, information about you may be held by us in one of two ways, and the route to exercise your rights depends on which.

If a Whodini user uploaded or imported information about you. For example, if a recruiter uploaded your resume or added you to a project. That user, or the organization they work for, controls that information and decides how it is used. We process it on their behalf as their service provider and processor. To access, correct, or delete it, or to object to its use, contact the recruiter or organization that has your information; they are responsible for responding under applicable law. You may also contact us at privacy@whodini.ai, and where we can identify the user who submitted your information we will forward your request to them and assist them in responding. Where the law requires us to act directly, we will do so.

If you are described in a Whodini Profile. Whodini compiles professional profile information from publicly available sources and licensed data providers, as described in Section 3.6. For that information, Whodini is the controller. You may:

• Request removal from our databases, which removes your information from the results we display to our users, and opt out of the sale or sharing of your information;
• Request access to the information we hold about you, or a copy of it;
• Request correction of inaccurate information;
• Object to our processing of your information, where the GDPR or similar law applies.

To make any of these requests, contact us at privacy@whodini.ai. We will verify your identity before processing a request and will respond within the time required by applicable law.

Whodini does not make hiring or other employment decisions about anyone, does not sell Whodini Profiles as a standalone data product, and does not use profile information for advertising or for credit or lending decisions.

12. Cookies and Tracking Technologies

The extension itself does not set cookies in your browser. The web application uses cookies or similar technologies that are strictly necessary to keep you signed in and to secure your session. Our analytics providers may also use cookies or similar technologies to collect usage data. These are used solely for product analytics and improvement, not for advertising or cross-site tracking.

You can manage cookie preferences through your browser settings. Disabling analytics cookies will not affect the core functionality of the Service.

13. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18, and our Terms of Service prohibit users from submitting information about anyone under 18. If we learn that we have collected personal information from or about a child under 18, we will take steps to delete that information promptly. If you believe a child under 18 has provided us with personal information, or that information about a child under 18 has been submitted to us, please contact us at privacy@whodini.ai.

14. Chrome Web Store and Limited Use Disclosure

The Whodini extension's use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Specifically:

• Our use of data obtained through Chrome APIs is limited to providing and improving the Service as described in this Policy.
• We do not use data obtained through Chrome APIs for serving advertisements.
• We do not use data obtained through Chrome APIs to determine creditworthiness or for lending purposes.
• We do not sell data obtained through Chrome APIs to third parties.
• We do not use or transfer data obtained through Chrome APIs for purposes unrelated to the extension's single purpose of pharmaceutical and life sciences information enrichment.

15. Relationship to the Terms of Service

The Service and its output, including AI-generated output, are provided for informational purposes and may be inaccurate, incomplete, or out of date. Warranty disclaimers, limitations of liability, indemnification, and the other commercial terms that govern your use of the Service are set out in our Terms of Service, not in this Policy.

16. Data Processing Agreements

Organizations that require a Data Processing Agreement or Data Processing Addendum in connection with GDPR or other data protection regulations may request one by contacting privacy@whodini.ai. Whodini will execute agreements that incorporate Standard Contractual Clauses where required. The processor and service-provider commitments that apply to every user are set out in Section 16 of our Terms of Service.

17. Changes to This Policy

We may update this Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we do, we will update the "Effective Date" at the top of this Policy. Changes take effect when posted, and we are not obligated to provide advance notice, though we may choose to do so.

Your continued use of the Service after any change constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

18. Contact Us

For questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

Whodini AI, Inc.
Privacy requests: privacy@whodini.ai
Support: support@whodini.ai
Mailing address: 36 Green Acre Lane, Westport, CT 06880
Website: https://whodini.ai

For GDPR-related inquiries, use the subject line "GDPR Request." If you are not a Whodini user and want to know what information we hold about you, see Section 11.5.

© 2026 Whodini AI, Inc. All Rights Reserved.