Privacy policy

• We store professional data only — no patient data, ever.
• Your card details never touch our servers; Stripe handles payment.
• No third-party advertising trackers, and we never sell your data.
• Unsubscribe from any email in one click; export or delete your data by emailing us.

Today, Whetstone has no user accounts. What we hold is limited to:

• Waitlist: your email address and which page you signed up from — used only to send the alerts you asked for.
• Founding deposit: the email you enter at checkout, plus the payment record Stripe returns (amount, status, receipt). Card numbers go directly to Stripe and are never seen or stored by us.
• Eligibility calculator: the professional facts you enter (license, certification, CME counts) may be stored as an anonymous snapshot so we can audit that the calculator gave you the right answer. Snapshots are not linked to your name or email.
• Product events: anonymous usage events (for example, “calculator completed”) tied to a random session identifier that lives in your browser tab and disappears when you close it. We do not use advertising cookies or third-party analytics trackers.

• Patient data. Whetstone is a professional tool for clinicians; there is no patient information anywhere in it.
• Health information about you.
• Social Security numbers or DEA numbers.
• Data bought from, or shared with, advertisers or data brokers.

To deliver what you asked for (deadline alerts, receipts, your reserved seat), to answer your emails, to make sure the product gave you correct results, and to understand which parts of the product get used. That’s the list.

Every marketing or alert email we send includes an unsubscribe link, and replying “unsubscribe” to any email works too. Transactional email (a receipt, a refund confirmation) is sent only when triggered by your own action.

Three infrastructure providers process data on our behalf, each under its own security and data-processing terms: Stripe (payments and receipts), Supabase (our database), and Vercel (website hosting). We share data with them only as needed to run the service — never for their marketing, and never sold.

We may also disclose information if the law genuinely requires it. We have never been asked to.

• Unsubscribe from emails at any time — link in every email, or just reply.
• Export: email us and we’ll send you a copy of everything we hold about you.
• Delete: email us and we’ll erase your data, keeping only what payment law requires us to retain (Stripe transaction records).

All requests: hello@whetstoneprep.com. A founder answers, typically within one business day.

Data is encrypted in transit and at rest on our providers’ infrastructure. We keep data only while it serves the purpose you gave it to us for — a waitlist email until you unsubscribe or we launch and you tell us to stop; payment records for as long as tax and payment regulations require.

If this policy changes, we update this page and its effective date; if a change is material and we have your email, we’ll tell you directly. Our data posture — professional data only, minimal by design — does not change. See also our terms of service and refund policy.