Whimsical

Description Features Permissions Security & Compliance

Whimsical makes work more calm by unifying your ideas, docs, and projects in one interconnected workspace—streamlining your workflow and reducing the chaos of juggling multiple apps.When you integrate Whimsical with Slack, you can:Receive notifications in Slack
• Notifications for comments, @-mentions, and reactions
• Notifications for file invitations, file access requests, editor role requests, and moreDisplay rich link previews in Slack:
• Links shared in Slack will display an up-to-date, expanded preview
• Link to a section or object to create a preview focused on a specific piece of content
• Search for Whimsical files shared in Slack by their title, URL, and text in the fileHave feedback or a feature request? Email us at help@whimsical.com.

Permissions

Whimsical will be able to view:

Whimsical will be able to do:

Review the details to better understand this app’s security practices. To learn more about assessing apps for your workspace visit our Help Center.

General

Privacy & data governance

Data retention policy

Whimsical complies with our privacy policy available at whimsical.com/privacy. We store the personal information we receive for as long as you use our services or as necessary to fulfill the purpose(s) for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. Unless there is a legal requirement to retain data, we delete personal data in response to user or customer requests.

Data archiving and removal policy

We have a specific, generalized section (added at Slack's request that is not GDPR or CCPA specific) to our privacy policy that notes how users can request to access and delete their individual data. See section `How to Access and Control Your Personal Information` on https://whimsical.com/privacy. Customers can choose to delete their account at any time. The account is completely purged from our system after 30 days, and then expired from backups after 60 days from account deletion. We also have a help article that details how to delete your account that includes a link to our support contact form, and a link to a separate article on exporting account data. https://help.whimsical.com/article/584-how-to-delete-your-account https://help.whimsical.com/article/577-exporting-content-from-whimsical

Data storage policy

Whimsical stores customer data in accordance with our privacy policy and terms available at whimsical.com/privacy and https://whimsical.com/terms. We store the personal information we receive for as long as you use our services or as necessary to fulfill the purpose(s) for which it was collected, provide our services, resolve disputes, establish legal defenses, conduct audits, pursue legitimate business purposes, enforce our agreements, and comply with applicable laws. Unless there is a legal requirement to retain data, we delete personal data in response to user or customer requests.

Data center location(s)

United States

Data hosting details

Our data is hosted on AWS and Google Cloud in US data centres.

Data hosting company

AWS, Google Cloud

App/service has sub-processors

yes

Guidelines for sub-processors

https://whimsical.com/privacy/sub-processors

App/service uses large language models (LLM)

Certifications & compliance

SOC attestation

https://whimsical.com/security

Data deletion request procedure

Users are able to delete data on their own via account settings. https://help.whimsical.com/article/584-how-to-delete-your-account They can also contact Whimsical Support to delete data. We verify that the request was from the customer, and then delete their data. This is noted in our privacy policy under the 'deletion' bullet of our 'Your Consumer Rights' section. https://whimsical.com/privacy. Here is the contents of this section: Deletion: You may request that we delete the personal information we have collected about you. Please note that we may retain certain information as required or permitted by applicable law, and we may deny your deletion request if retaining the personal information is necessary for us or our service providers under one of the nine statutory exceptions listed in Cal. Civ. Code § 1798.105, as amended by AB 1146. We are required by law to verify your identity prior to deleting your information in order to protect your privacy and security. If you request to delete your personal information, certain of our Services may no longer be available to you. To exercise the rights described above, please submit a verifiable consumer request to us in writing at Whimsical, Inc., 1630 Welton Street, 7th Floor, Denver, Colorado 80202, United States of America (“USA”) or send an email to privacy@whimsical.com. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. You may only make a verifiable consumer request for access twice within a 12-month period. The verifiable consumer request must (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative, and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We endeavor to respond to a verifiable consumer request within 45 days of its receipt. If we require more time, we will inform you of the reason and extension period in writing. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. We may not be able to provide all of the information requested, for example: (i) if the personal information was collected for a single one-time transaction and if, in the ordinary course of business, such information was not retained; (ii) we would be required to reidentify or otherwise link any data that, in the ordinary course of business, was not maintained in a manner that would be considered personal information; (iii) the consumer used different browsers, devices or identifying information and we have not linked all such information together; or (iv) if the information was collected, sold or disclosed prior to January 1, 2019 or 12 months prior to the receipt of such verifiable consumer request, whichever is later.

HIPAA compliant

While this app may offer HIPAA compliance, Slack does not have a business associate agreement with any third-party application providers, including those in the Slack Marketplace, so you are responsible for validating the provider's compliance and executing an appropriate agreement before enabling.

Security