Whip procurement policy evidence
Only topics backed by verified findings appear below. Each row preserves the platform's exact policy words and capture provenance.
| Topic | Plan or tier | Risk | Their words | Source |
|---|---|---|---|---|
| DPA, audit rights & data residency | All applicable tiers | unknown | “ This section applies to Users located in Singapore and describes rights available under the PDPA. Subject to applicable exceptions, Users in Singapore have the right to: Access: Request access to personal data in Tensorfuse’s possession or control, as well as information about how such personal data has been used or disclosed; and Correction: Request correction of personal data that is inaccurate or incomplete. Requests to exercise access or correction rights may be submitted by contacting TensorFuse at: Email: privacy@tensorfuse.com . Subject Line: Singapore PDPA Request.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Under India’s DPDP Act and IT Rules, 2021 as amended, (“IT Rules”), established a grievance redressal mechanism to address questions, concerns, or complaints relating to the processing of personal data of individuals located in India. Users in India may submit grievances or exercise their rights under the DPDP Act and IT Rules, including requests for access, correction, erasure, or withdrawal of consent, by contacting Tensorfuse’s designated Grievance Officer as provided below: Grievance Officer. Name: Saurabh Singh, Grievance Officer, Tensorfuse Technology India Private Limited” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We are committed to complying with applicable data protection and privacy laws across Asia, including India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”), Singapore’s Personal Data Protection Act (“PDPA”), and other relevant regional regulations. Where required, we implement appropriate technical and organizational measures to safeguard personal data, ensure lawful bases for processing, provide transparency regarding data use, and enable Users to exercise their statutory rights, including rights of access, correction, withdrawal of consent, and data portability, where applicable.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ We are committed to complying with applicable data protection laws across Africa. We implement appropriate safeguards to ensure the lawful, fair, and transparent processing of personal data, respect Users’ rights of access, correction, objection, and deletion where applicable, and take necessary steps to ensure that cross-border data transfers comply with local regulatory requirements.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ This section applies to California residents and describes rights provided under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, the “CCPA”). Tensorfuse does not sell personal information as defined under the CCPA. Subject to certain exceptions, California residents have the following rights: Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for which it is used, and the categories of third parties with whom it is disclosed. Right to Delete: You may request that we delete personal information we have collected from you, subject to legal and operational exceptions. Please note that publicly published Whips will not be deleted upon account deletion but will be anonymized as described in Section 5 above. Right to Correct: You may request that we correct inaccurate personal information maintained about you. Right to Limit Use of Sensitive Personal Information: You may request limitations on the use or disclosure of sensitive personal information, where applicable. Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising any CCPA rights. To submit a California privacy rights request, please contact us at privacy@tensorfuse.com . We may need to verify your identity before processing your request.” | Captured 2026-09-25Open source →Finding permalink → |
| DPA, audit rights & data residency | All applicable tiers | unknown | “ Grievance Officer Email: grievances@whip.run Postal Address: G-001, South End Sampurna, No 11/94 Model House Street, Basavanagudi, Bangalore South, Bangalore, 560004, Karnataka, India We acknowledge complaints within twenty-four (24) hours and resolve them within fifteen (15) days of receipt.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon account deletion, your attribution on all publicly published Whips will be replaced with an anonymized tag (such as “@Anonymous” or “[Deleted User]”) across all instances of your published Whips and any downstream remixes thereof. This approach is intended to balance your right to erasure under applicable privacy law with the need to preserve the integrity and functionality of the App’s remix ecosystem. Tensorfuse shall not be liable for any downstream impact on remixed Apps resulting from your account deletion.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Publicly published Whips will not be removed from the App upon account deletion or personal data deletion request. Removal of Public Content would disrupt the functionality of downstream Whips remixed by other members of the community. Upon deletion of your account, your publicly published Whips will be anonymized in accordance with Section 12.3 below.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Tensorfuse retains personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide and improve the Platform, comply with legal and regulatory obligations, resolve disputes, enforce agreements, and maintain appropriate business and financial records. Retention periods vary depending on the nature of the information, the context in which it was collected, and applicable legal requirements. Upon a verified request for deletion, Tensorfuse will delete or anonymize personal information in accordance with applicable laws and regulations, subject to permitted exceptions. Please note that: (i) Private Drafts will be deleted upon your written request; and (ii) publicly published Whips will not be deleted upon account deletion but will be anonymized as described in Section 5 above.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon your written request, Tensorfuse will delete your personal data and Private Drafts in accordance with applicable law and our Privacy Policy. Please send deletion requests to privacy@tensorfuse.com . Tensorfuse will respond to and process deletion requests within the timeframes required by applicable law. Please note that if you request deletion of all personal data, Tensorfuse may be unable to continue providing the App to you.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Publicly published Whips will be accessible to all Customers of the App and to members of the general public without requiring an account. Public Content will be indexed by third-party search engines. Tensorfuse does not control third-party search engine indexing practices and cannot guarantee the removal of indexed content from third-party search engines following account deletion or content removal.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon account deletion, the following applies: Personal data (PII) associated with your account will be deleted or anonymized in accordance with applicable law and our data retention policies; Private Drafts will be deleted upon your written request to privacy@tensorfuse.com ; and Publicly published Whips will NOT be removed from the Platform upon account deletion, as removal would disrupt downstream Whips remixed by other members of the community. Instead, your attribution on all publicly published Whips will be replaced with an anonymized tag (such as “@Anonymous” or “[Deleted User]”) across all instances and downstream remixes thereof. This approach is designed to balance your right to erasure under applicable privacy law with the need to preserve the integrity of the Platform's remix ecosystem.” | Captured 2026-09-25Open source →Finding permalink → |
| Data retention | All applicable tiers | unknown | “ Upon account deletion, your likes and comments associated with Public Content may be anonymized rather than deleted, to preserve the integrity of public content and social interactions on the App. Your personal data will be handled in accordance with our Privacy Policy and applicable law.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We use Google Analytics to collect and analyze information about how Users interact with the Website and WHIP Platform, such as page views, traffic sources, device information, and usage patterns. Information collected through Google Analytics is used in aggregated form to improve Platform performance, functionality, and User experience. To learn more about how Google processes this data, please visit: https://policies.google.com/privacy/google-partners . We may use certain Google advertising and measurement features, such as remarketing, impression reporting, and interest-based reporting, to measure the effectiveness of our marketing efforts. You may control or limit the use of cookies through your browser or device settings and, where available, through Google's ad settings.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ We do not sell, rent, or trade personal information to third parties. We may disclose personal information to hosting providers and other service providers that assist us in operating the Platform, conducting our business, or servicing Users, provided that such parties agree to protect the information and use it only for permitted purposes. We do not disclose non-personally identifiable information for third-party marketing purposes in a manner that would allow re-identification of individuals.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 101 Townsend Street, San Francisco, CA 94107, USA. Object storage (R2), content delivery, and video streaming Generated mini experience content, uploaded images, screenshots ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may share personal information as necessary to operate the Platform, provide Services, and comply with legal obligations. Any disclosure of personal information is made in accordance with this Privacy Policy and applicable law.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ The App utilizes third-party large language model APIs and AI services, including but not limited to those provided by Google (Gemini), Anthropic, and OpenAI (collectively, “Third-Party AI Providers”), to generate Whips. Your use of the App is subject to the applicable terms of service and policies of these Third-Party AI Providers. A current list of Third-Party AI Providers is set out in our Privacy Policy. Tensorfuse does not control the outputs, availability, accuracy, or conduct of any Third-Party AI Provider and shall not be liable for any issues, inaccuracies, errors, or harms arising from their outputs or actions.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. AI/LLM model — mini experience generation User prompts (anonymized where possible) ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: Gethsemanestr. 4, 10437 Berlin, Germany. AI/LLM observability and tracing Prompts and AI-generated responses, generation traces (anonymized where possible) AppsFlyer Inc. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Aggregated and De-identified Information. We may disclose aggregated or de-identified information that does not reasonably identify any individual for purposes such as analytics, research, reporting, marketing, or business insights. Affiliates. We may disclose personal information to our subsidiaries and affiliates for purposes consistent with this Privacy Policy. Service Providers and Partners. We may disclose personal information to contractors, service providers, and other third parties that perform services on our behalf, such as hosting, analytics, customer support, payment processing, insurance eligibility verification, and communications. These parties are contractually required to protect personal information, maintain confidentiality, and use the information only for authorized purposes. Business Transfers. We may disclose personal information in connection with a merger, acquisition, reorganization, sale of assets, financing, or similar corporate transaction, subject to appropriate confidentiality protections. With Your Direction or Consent. We may disclose personal information to third parties when you direct us to do so or provide your consent, where required by applicable law. Purpose Fulfillment. We may disclose personal information as necessary to fulfill the purpose for which it was provided, such as facilitating communications or delivering requested Services. Tensorfuse does not sell personal information as defined under applicable privacy laws, and does not disclose health or medical information for targeted advertising purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: San Francisco, CA, USA. Transactional email delivery Email address, message content (e.g. verification codes) Cloudflare, Inc. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 548 Market St, San Francisco, CA 94104, USA. AI/LLM model — mini experience generation User prompts (anonymized where possible) ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 548 Market Street, PMB 48141, San Francisco, CA 94104, USA. Customer data platform — analytics event pipeline that routes events to the analytics providers listed above Email, handle, usage and social events, device information ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “ We may disclose personal information where we believe disclosure is necessary or appropriate to: Comply with applicable laws, regulations, court order, or legal process; Respond to lawful requests from public or regulatory authorities; Enforce or apply our Terms of Service when using our App and other agreements, including for billing and collection purposes; Protect the rights, property, or safety of Tensorfuse, our Users, or others; or Detect, prevent, or address fraud, security, or technical issues.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “ Tensorfuse uses the following third-party service providers to support the operation of the Platform and deliver Services. These providers may process personal information on our behalf and are contractually obligated to use such information only for authorized purposes and to implement appropriate confidentiality and security measures. Tensorfuse does not authorize its service providers to use personal information for their own independent purposes.” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 3180 18th Street, San Francisco, California 94110, USA. AI/LLM model and moderation — mini experience generation User prompts, User handles, bio, comments (anonymized where possible) PostHog, Inc. ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Push notification delivery Device push token, notification content Plus Five Five, Inc. (Resend) ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | medium | “Address: 100 1st Street, Floor 25, San Francisco, CA 94105, USA. Mobile install attribution and marketing analytics Device identifiers, IP address, install and in-app event data This list is not exhaustive and may be updated as Tensorfuse’s service architecture evolves or additional providers are engaged. Any material changes will be reflected in this Privacy Policy as required by applicable laws and regulations. For questions regarding our third-party service providers or data processing practices, please contact us at privacy@tensorfuse.com .” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 410 Terry Avenue North, Seattle, WA 98109, USA. Cloud hosting and infrastructure Encrypted platform data ” | Captured 2026-09-25Open source →Finding permalink → |
| Subprocessors & data sharing | All applicable tiers | unknown | “Address: 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. Crash reporting, error and performance monitoring (incl. masked session replay) Diagnostic and crash logs, masked session recordings, device and app information RudderStack, Inc. ” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | unknown | “ Tensorfuse reserves the right to introduce creator monetization features, including but not limited to tipping and revenue sharing, at a future date. Such features will be subject to separate terms and conditions. For further information, please contact support@whip.run .” | Captured 2026-09-25Open source →Finding permalink → |
| Tier differences | All applicable tiers | medium | “ The App is currently made available to Customers free of charge. Tensorfuse reserves the right to introduce subscription fees or other charges for access to certain features or Services in the future. Any such fees will be communicated to Customers in advance, along with applicable terms, pricing, and billing details. Customers will not be charged without prior notice and, where required by applicable law, express consent.” | Captured 2026-09-25Open source →Finding permalink → |
Informational only, not legal advice. Terms can change; verify every cited source and capture date during procurement review.
📢 POLICY UPDATES ALERT
AIRIN Brief
Built for compliance officers, legal counsel, and SaaS founders. Subscribe to the email digest — one short brief when a tracked vendor materially changes its terms, training policy, or risk rating. Prefer in-app? Watch platforms in your alerts inbox instead.