Privacy Policy

What we collect

We collect only what's needed to provide the service:

• Email address — used to identify your account and credit wallet. No password is stored.
• Phone numbers you look up — stored to power your lookup history and to cache results so repeated lookups don't cost extra credits.
• Payment information — processed entirely by Stripe. We never see or store your card number, CVV, or billing address.
• Usage data — standard server logs including IP address, browser type, and pages visited. Used to detect abuse and maintain service reliability.

How we use your data

• To provide caller lookup results and manage your credit balance.
• To process payments and issue receipts via Stripe.
• To detect and prevent fraud, abuse, and unauthorized lookups.
• To respond to support requests.

We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising.

Third-party services we use

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Twilio — phone number data provider. Numbers you look up are submitted to Twilio to retrieve caller information.
• Railway — cloud infrastructure hosting our API.
• Cloudflare — CDN and DNS for the website.

Data retention

Lookup results are cached for up to 30 days to avoid charging repeat credits for the same number. Account data is retained as long as your account is active. You can request deletion at any time by emailing us.

Important use limitations

WHODIS is intended for personal use only — identifying unknown callers for your own awareness. It is not a consumer reporting agency and may not be used for:

• Employment or background screening
• Tenant or credit decisions
• Stalking, harassment, or surveillance of any individual
• Any purpose regulated by the Fair Credit Reporting Act (FCRA)

Your rights

You may request access to, correction of, or deletion of your personal data at any time. California residents have additional rights under the CCPA. To exercise any of these rights, email help@whodisapp.com.

Cookies

We do not use tracking cookies. Your login token is stored in your browser's localStorage and is used only to authenticate your session with our API.

Changes to this policy

We may update this policy as the service evolves. Material changes will be noted on this page with an updated date.

Contact

Questions? Email help@whodisapp.com. We respond quickly.