Privacy Policy

Last updated: February 27, 2026

1. Introduction

This Privacy Policy describes how WhatISupport LLC ("WhatISupport," "we," "us," or "our") collects, uses, and shares personal information when you access or use our website at whatisupport.com and related services (collectively, the "Services"). By using our Services, you agree to the collection and use of information as described in this policy.

2. Information You Provide

When you create a profile, we collect the following information that you voluntarily provide:

  • Display name
  • Bio (optional)
  • Twitter/X handle (optional)
  • Cryptocurrency wallet addresses and associated details (memos, destination tags, network selection)
  • Email address
  • Payment information (processed by Stripe; we do not store your card details)

3. Information Collected Automatically

When you visit our website, we may automatically receive:

  • IP address
  • Browser type and version
  • Device information and operating system
  • Pages visited and time spent on our website
  • Referring URL

This information is collected through standard server logs and is used solely for security, debugging, and improving our Services.

4. How We Use Your Data

  • Profile creation: Your display name, bio, Twitter handle, and wallet addresses are written to the Hedera blockchain to create your public profile.
  • Payment processing: Your email and payment details are shared with Stripe to process your purchase.
  • Email delivery: Your email address is used via Resend to send you your profile link after purchase.
  • Security and fraud prevention: We may use collected information to detect, prevent, and address fraud, abuse, or security issues.
  • Legal compliance: We may use or disclose your information as required by applicable law, regulation, or legal process.

5. Public Blockchain Data

We may access and analyze publicly available blockchain data, including wallet addresses, transaction timestamps, and transaction amounts associated with profiles created through our Services. This data is inherently public on the Hedera blockchain and accessible to anyone.

6. Blockchain Storage & Immutability

Your profile data (display name, bio, Twitter handle, and wallet addresses) is permanently stored on the Hedera blockchain via the Hedera Consensus Service (HCS). This data is publicly accessible on the blockchain.

Data written to the blockchain cannot be edited, modified, or deleted — by you or by us. This is an inherent property of blockchain technology. Please ensure all information is correct before completing your purchase.

7. NFC Card Data

If you purchase a WIS Black Card, the following applies to the NFC chip embedded in the card:

  • Data Stored on the Chip: The NFC chip contains only a URL that points to your public WhatISupport profile. No private keys, wallet credentials, passwords, or other sensitive personal information is stored on the NFC chip.
  • Read Access: The URL stored on the NFC chip can be read by any NFC-enabled device in close physical proximity. This is the intended functionality of the product and is necessary for the card to work as designed.
  • Write Protection: The NFC chip is configured with password-based write protection before shipping to prevent unauthorized modification of the stored data. This protection is reasonable but not absolute.
  • Physical Security: Once the card is delivered to you, you are responsible for the physical security of the card and the data stored on the NFC chip. WhatISupport LLC cannot remotely monitor, update, or secure the NFC chip after delivery.

The NFC chip is a convenience mechanism. Your blockchain profile data is independently accessible via your profile URL regardless of the state of the NFC chip.

8. Third-Party Services

We share your information with the following third-party service providers to operate our Services:

  • Stripe — payment processing. Your payment information is handled directly by Stripe and is subject to the Stripe Privacy Policy.
  • Hedera — blockchain data storage. Profile data stored on Hedera is public, permanent, and accessible to anyone.
  • Resend — email delivery of your profile link after purchase.
  • Shippo — shipping label creation and tracking for physical card orders. Your shipping address is shared with Shippo and the selected carrier (USPS, UPS, or FedEx) to fulfill delivery.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We may share information with law enforcement or government authorities if required by law.

Business Transfers: In the event of a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred or disclosed as part of that transaction, subject to applicable data protection obligations.

International Processing: Your personal information may be transferred to and processed in the United States, where our service providers (including Stripe, Resend, and Hedera) operate. By using our Services, you consent to the transfer and processing of your information in the United States.

9. Third-Party Websites

Our Services may contain links to third-party websites or services not operated by us. We are not responsible for the content, privacy practices, or availability of any third-party websites. We have no control over and assume no responsibility for the collection, use, or disclosure of your personal information by any third party. We encourage you to review the privacy policies of any third-party websites you visit.

10. Cookies, Tracking & Browser Signals

WhatISupport LLC does not use tracking cookies, analytics scripts, or any third-party advertising or tracking tools. We do not track your browsing activity across other websites.

Do Not Track (DNT): Some browsers offer "Do Not Track" signals. Because we do not use tracking technologies, DNT signals do not change how our Services operate.

Global Privacy Control (GPC): Where required by applicable law, we honor Global Privacy Control opt-out preference signals. Because we do not sell or share personal information for advertising purposes, GPC signals do not require any change to our data practices, but we acknowledge and respect them.

11. Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information. However, no method of transmission over the Internet or method of electronic storage is 100% secure. In the event of a hack, unauthorized access, or security breach, WhatISupport LLC is not responsible for any loss of funds, exposure of profile data, or any damages that may result. By using our Services, you acknowledge and accept this risk.

12. Law Enforcement Requests

We may disclose your personal information to law enforcement agencies, government authorities, or other third parties if we are required to do so by applicable law, regulation, legal process, or enforceable governmental request (such as a subpoena, court order, or search warrant).

Unless we are prohibited by law or court order from doing so, we will generally attempt to notify affected users before disclosing their information in response to a law enforcement request. We will take care to ensure that we do not disclose information beyond what is legally required.

In rare cases where we reasonably believe it is necessary to prevent a serious threat to the life, health, or safety of any individual, we may provide user information to law enforcement without a formal binding request.

13. Breach Notification

If your personal information is subject to a data breach that requires notification under applicable law, we will take appropriate action and provide notice without undue delay as required by law. Such notice will include, to the extent known, the nature of the incident, the categories of information affected, and steps taken or proposed to address the incident and mitigate potential impacts.

14. Data Accuracy

We rely on the accuracy of the personal information you provide. You are responsible for ensuring that all information you submit is accurate, complete, and up to date. If any of your personal information changes, please contact us. Note that profile data already written to the blockchain cannot be corrected.

15. Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy. Specific retention periods include:

  • Blockchain profile data: Permanently retained on the Hedera blockchain and cannot be removed.
  • Email address: Retained for the purpose of delivering your profile link and for customer support. Not used for marketing.
  • Payment transaction records: Retained for at least seven (7) years for tax, legal, and regulatory compliance.
  • Server logs: Retained for up to ninety (90) days for security and debugging purposes.
  • Customer support communications: Retained for at least three (3) years after resolution.

When personal information is no longer needed, we will delete, de-identify, or aggregate it unless retention is required or permitted by law.

16. Your Rights

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of your personal information. Please note that data stored on the Hedera blockchain cannot be modified or deleted due to the immutable nature of blockchain technology.

To exercise any applicable rights regarding your off-chain data, contact us at [email protected].

17. U.S. State Privacy Rights

Depending on your state of residence, U.S. state privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, and similar laws in Virginia, Colorado, Connecticut, and other states) may provide you with additional rights, subject to certain exceptions:

  • Right to Know/Access: Request information about what personal information we collect and how we use it.
  • Right to Delete: Request deletion of personal information we hold about you (note: data on the blockchain cannot be deleted).
  • Right to Correct: Request correction of inaccurate personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Sale/Sharing of Personal Information: WhatISupport LLC does not "sell" or "share" personal information as those terms are defined under the California Consumer Privacy Act (CCPA/CPRA). We do not disclose personal information for cross-context behavioral advertising.

To exercise any applicable rights, you or an authorized agent may contact us at [email protected]. We will respond within the timeframes required by applicable law. Requests may require identity verification.

18. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete such information.

19. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of the State of Wyoming, United States, without regard to its conflict of laws provisions. Any disputes arising from this policy shall be resolved in accordance with the dispute resolution provisions in our Terms of Service.

20. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Services after any changes constitutes acceptance of the updated policy.

21. Contact

If you have questions about this Privacy Policy, contact us at [email protected].