Privacy
Last updated 10 November 2026. Whetstn is in a free, invite-only Alpha.
Whetstn helps you build and stress-test a business strategy. A strategy is often commercially confidential even when it holds no personal information, so we treat everything you put into Whetstn as confidential. This page explains what we keep, where it's kept, and what you can do about it. Questions go to [email protected].
What we keep, and where
| What | Where it's kept | Why |
|---|---|---|
| Your name and email, when you join the list or sign up | Loops, our email service | To invite you, tell you what's changing, and ask what you think. Every email has an unsubscribe link. |
| Your sign-in email, if you sign in to save to an account | Supabase, in Sydney, Australia | To send you a sign-in link and keep your strategies to you. |
| The strategies you save to your account | Supabase, in Sydney, Australia | So you can open your work on any device. Only you can read them: the database itself refuses everyone else. |
| Work you don't save to an account | Your own browser | It never leaves your device unless you send it to the AI (below) or download it. |
Some of this is stored overseas. Loops and Anthropic are based outside Australia, mainly in the United States, so your name and email (Loops) and anything you send to the AI (Anthropic) may be stored there. Your saved strategies stay in Australia.
The site is served by Cloudflare. Like any web host, it handles basic connection details such as your IP address to deliver pages and stop abuse.
The AI
Whetstn's AI steps run on Anthropic's Claude, using your own Anthropic API key. When you use an AI step, the parts of your strategy that step needs go from your browser straight to Anthropic. They don't pass through Whetstn's servers. Anthropic handles them under your own agreement with Anthropic.
Your key stays in your browser. By default it's kept only until you close the tab, and it's kept longer only if you tick "remember on this device". We never see it, store it or send it anywhere but Anthropic.
What we don't do
- We don't sell or share your information, or use your strategies to train anything.
- We don't read your saved strategies. In the app, nobody but you can reach them. Outside the app, the database is touched only to keep the service running, such as backups or fixing a fault, and never to read what you've written.
- We don't log what's in your strategies, prompts or AI replies on our servers.
- We don't use advertising or tracking cookies. If we measure visits to this website, it's with cookieless, aggregate analytics on the public pages only, never inside the app.
Your choices
- Download your work at any time as a working file (Strategy menu, then "Download working file").
- Delete your account from the account panel in the app. It removes your sign-in and every strategy saved to it straight away. Any copy in our encrypted backups is gone within 14 days.
- Stop the emails with the unsubscribe link in any of them. To be removed from our list completely, email us.
- Ask what we hold about you, or ask us to correct it, by emailing [email protected]. We'll answer within 30 days.
Keeping it safe
Your account data stays in Australia. Access to it is controlled in the database, not just in the app, and sign-in uses emailed links rather than passwords. If something ever went wrong that put your information at risk, we would tell you, and we would tell the regulator where the law requires it.
The law
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you're unhappy with how we've handled your information, email us first. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Changes
If this page changes in a way that matters, we'll email people on the list before it takes effect.