Whetstn

Privacy

Last updated 10 November 2026. Whetstn is in a free, invite-only Alpha.

Whetstn helps you build and stress-test a business strategy. A strategy is often commercially confidential even when it holds no personal information, so we treat everything you put into Whetstn as confidential. This page explains what we keep, where it's kept, and what you can do about it. Questions go to hello@whetstn.com.

What we keep, and where

WhatWhere it's keptWhy
Your name and email, when you join the list or sign upLoops, our email serviceTo invite you, tell you what's changing, and ask what you think. Every email has an unsubscribe link.
Your sign-in email, if you sign in to save to an accountSupabase, in Sydney, AustraliaTo send you a sign-in link and keep your strategies to you.
The strategies you save to your accountSupabase, in Sydney, AustraliaSo you can open your work on any device. Only you can read them: the database itself refuses everyone else.
Work you don't save to an accountYour own browserIt never leaves your device unless you send it to the AI (below) or download it.

Some of this is stored overseas. Loops and Anthropic are based outside Australia, mainly in the United States, so your name and email (Loops) and anything you send to the AI (Anthropic) may be stored there. Your saved strategies stay in Australia.

The site is served by Cloudflare. Like any web host, it handles basic connection details such as your IP address to deliver pages and stop abuse.

The AI

Whetstn's AI steps run on Anthropic's Claude, using your own Anthropic API key. When you use an AI step, the parts of your strategy that step needs go from your browser straight to Anthropic. They don't pass through Whetstn's servers. Anthropic handles them under your own agreement with Anthropic.

Your key stays in your browser. By default it's kept only until you close the tab, and it's kept longer only if you tick "remember on this device". We never see it, store it or send it anywhere but Anthropic.

What we don't do

Your choices

Keeping it safe

Your account data stays in Australia. Access to it is controlled in the database, not just in the app, and sign-in uses emailed links rather than passwords. If something ever went wrong that put your information at risk, we would tell you, and we would tell the regulator where the law requires it.

The law

We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth). If you're unhappy with how we've handled your information, email us first. You can also complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes

If this page changes in a way that matters, we'll email people on the list before it takes effect.