Our Privacy Policy

Who we are

Whoosh is made by Fastlane Technology Pty Ltd, an Australian company based in Erskineville, Sydney NSW. We decide how the personal information described here is used, and we are responsible for it.

For any question about your privacy, email admin@getwhoosh.ai.

What this policy covers

This policy covers:

• getwhoosh.ai, in every language we publish it in
• the free audits linked from it: the Whoosh Value Audit (speedaudit.getwhoosh.ai) and the Free Speed Audit (freeshopifyspeedaudit.getwhoosh.ai)
• our partner programme, its agreements and the partner portal
• the Whoosh app for Shopify

Shopify runs the Shopify App Store and the Shopify admin, and Shopify's own privacy policy covers those.

When you visit our site

Every public page of getwhoosh.ai sends us a short record when it is opened, so we can see which pages people read and follow up with the brands we have shared an offer with. Each record holds the page, the link you came from, any campaign tags on that link, your browser's time zone and language, and whether you have been before. From your connection we work out your approximate location (city, region, postcode and country), the network operator it belongs to, and your type of device, browser and operating system.

We keep a cookie that lets us recognise a returning browser without knowing who you are, and we do not use device fingerprinting. We only know your name or email address if you tell us, by filling in a form, or if you open a personalised link we sent you.

We use your IP address to look up that approximate location and to stop automated floods of requests. On our offer and invite pages (for example our SHE-com offer pages), a visit also sends a message to our team's Slack with the details above, including your IP address, so we can follow up.

If you open a partner's link to us (getwhoosh.ai/go/ followed by their code), or a page of ours made for their offer (such as our Founder Series page), that partner can see the visit in their partner portal, under a made-up name: when it happened, your approximate location (city, region and country), your network operator, your type of device and browser, your browser's language, the site or campaign tags that sent you, how many times you have opened it, and whether you went on to claim their offer or to the Shopify App Store. They never see your IP address, your postcode or anything else we know about you. We show a partner the last 90 days of visits.

To opt out on any device, visit freeshopifyspeedaudit.getwhoosh.ai/api/track?mute=1, or turn on Global Privacy Control or Do Not Track in your browser. We honour both, and these visit records then stop.

Analytics, chat and cookies

We use Google Analytics 4 to measure visits, clicks and how fast our pages load. Google may set cookies and process usage data. We ask Google to anonymise IP addresses, and we have turned off Google signals and ad personalisation. We also use Google Analytics on our Shopify App Store listing (configured in the Shopify Partner Dashboard) to measure listing views and installs.

We work with Microsoft Clarity and Microsoft Advertising to see how visitors use our website, through behavioural metrics, heatmaps and session replays (where you click, how far you scroll and how long you stay), so we can improve the site and market Whoosh. They collect this with first-party and third-party cookies and similar technologies, and the data is also used for site optimisation, fraud prevention, security and advertising. Clarity hides what you type into forms, and it never sees our chat. Our own visit records can link to the replay of a visit, so our team can see how it went. Clarity does not run if your browser sends Global Privacy Control or Do Not Track, or once you have used the opt-out link above. To learn how Microsoft collects and uses your data, see the Microsoft Privacy Statement.

We use the LinkedIn Insight Tag to measure our LinkedIn ads: which ads bring visitors to our site and what they do here, such as claiming an offer. LinkedIn sets cookies and may match a visit to a LinkedIn member, which lets us show our ads again to people who have visited and see reports that never name anyone. We do not load it for visitors in Europe, or if your browser sends Global Privacy Control or Do Not Track, or once you have used the opt-out link above. You can choose how LinkedIn uses this in your LinkedIn ad settings.

We use Leadfeeder to see which companies visit our site, from the business network a visit comes from, and which pages they read. It sets a cookie to recognise a browser that comes back, and it does not tell us who you are. We do not load it for visitors in Europe, or if your browser sends Global Privacy Control or Do Not Track, or once you have used the opt-out link above. To learn how Leadfeeder handles data, see its privacy policy.

We use Sentry to find out when part of our site breaks in a visitor's browser. When an error happens, Sentry receives a report of it: the page, the browser and device, and what the page was doing just before. We ask Sentry not to store IP addresses, we leave out the part of a page's address after the question mark, and Sentry sets no cookies. To learn more, see Sentry's privacy policy.

We run our own chat. Its script loads only when you point at or press the chat button, or after the page has loaded if you have chatted with us before on this device, so it can show you our replies. What you write, the files you add, and the name and email you give us are kept in our database (Upstash) until a year after your last message, and shared with our team in Slack. A conversation you start also notes where that visit began: the site that sent you and the first page you opened. If we reply after you have left, we email the reply to you. Your browser keeps a key to the conversation in its storage so you can pick it up later; clearing this site's data removes it.

Our pages also keep a few small notes in your browser's storage, such as the store you entered for an audit, so you do not have to type it again on the next page. You can block or delete cookies in your browser settings. Some parts of the site may not work as well without them.

Free audits, offers and forms

• Free audits. You give us a store address. We pass it to our two audit tools, which look at that store's public pages to build the reports, and we add it to your visit record. On some offer pages the audit form also asks for your email address, so we can email you the finished report.
• Claiming an offer. You give us your store address and, if you like, your email address so we can send you a copy of the offer. If you claim through a partner's link or code, we record your store as that partner's referral, and the partner can see your store address, and your email address if you gave one, in their partner portal.
• Our blog's email list. We keep your email address, the date and the page you signed up from. Every email has a one-click unsubscribe link.
• Beta requests. If you ask to join a beta, such as theme optimisation, we keep your store, your email address and what you tell us, and use them to reply.
• Competitions. If you enter one of our competitions, we keep your name, email address and guess and, if you give them, your phone number and your brand, and use them to run the competition and to contact you if you win. If you ask for them, we also email you updates; you can unsubscribe at any time.

Our team is told about claims, beta requests, competition entries and visits to our offer pages in Slack, so we can follow up.

Partner programme and portal

If you become a Whoosh partner, we collect what we need to run the partnership and pay you: your name, email address and phone number; your business name, address, website and logo; your tax and company numbers (such as an ABN or a VAT number); the currency you want to be paid in and your bank details; and the stores you refer to us.

When you sign the partner agreement, we keep the signed copy with your name and title and, as a record of the signature, the time, your IP address and your browser details. We email you a copy. If you connect a Google Sheet to the portal, we read and update your lead list in that sheet.

We use this to run the programme: tracking your referrals, working out and paying your commission, and keeping our accounts.

The Whoosh app for Shopify

When a merchant installs Whoosh, the app runs a script on their storefront. The script manages when other apps' scripts load, preloads the page a shopper is likely to open next, and measures page speed and whether visits end in orders. To show what Whoosh changes, it compares a Whoosh group of visits with a control group: 50/50 for a store's first few weeks, then 90/10, with a 10% control group.

We use this data to run these features and to report the results to the merchant. Shopify tells us which stores install the app, the plan each store is on, what it pays, and when a store uninstalls it. Shopify bills merchants for Whoosh.

Who we share it with

We do not sell your personal information. We share it only with the service providers that run parts of Whoosh for us, with the partner who referred you (as described above), or when the law requires it. Our providers are:

• Vercel: hosts our site and runs its servers
• Upstash: the database (Redis) that keeps visit records, chat conversations, claims, partner records and our email list
• Resend: sends our emails, such as audit reports, chat replies, copies of offers and partner agreements
• Google: Google Analytics, and Google Sheets for partners who connect one
• LinkedIn: the Insight Tag, which measures our LinkedIn ads
• Microsoft: Microsoft Clarity, which shows us how visitors use our website
• Leadfeeder: shows us which companies visit our site
• Sentry: tells us when part of our site breaks in a browser
• Intercom: our help centre
• IPinfo: turns an IP address into an approximate location and network operator
• Slack: where our team receives notifications and answers the chat
• Shopify: lists the app, bills for it and tells us about installs
• Airwallex: partners' bank details and commission payments

Keeping it safe

We take reasonable steps to protect your personal information from misuse, loss and unauthorised access, change or disclosure. Our sites use encrypted connections (HTTPS), and our internal tools need a team sign-in. No way of sending or storing information over the internet is completely secure, so we cannot promise absolute security.

Your rights and choices

You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it, by emailing admin@getwhoosh.ai. We may need to check it is you before we act.

You can leave our blog's email list at any time with the link in every email. To stop the visit records described above, Microsoft Clarity, the LinkedIn Insight Tag and Leadfeeder, use the opt-out link or turn on Global Privacy Control or Do Not Track. You can block cookies in your browser, and you can turn off Google Analytics on every site with Google's opt-out browser add-on.

Complaints

If you are unhappy with how we have handled your information, please email us first at admin@getwhoosh.ai so we can put it right. If our answer does not resolve it, in Australia you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. If you are in the European Union or the United Kingdom, you can also contact your local data protection authority.

Changes to this policy

We may update this policy when what we do changes. We will post the new version on this page and change the date at the top.

Contact us

Fastlane Technology Pty Ltd, Erskineville, Sydney NSW, Australia. Email admin@getwhoosh.ai