WisClub · The essentials
Privacy policy
Updated 14 November 2026
1. Who is responsible
Valetus AS, organisation number 937 113 269, Steinhammerveien 6E, 1177 Oslo, Norway, is responsible for personal data processed to operate WisClub and Captain Jack. Contact marcusdahle@valetus.no for privacy questions or requests.
2. Information we process and why
| Information | Purpose and legal basis |
|---|---|
| Whop account identifier, membership/access status and available course progress | Sign you in, provide purchased access and show your learning progress. Performance of our contract. |
| Messages, uploads, relevant conversation history, roadmap and saved preferences or memories | Generate the answers, plans and files you request and maintain useful context. Performance of our contract. Please avoid unnecessary sensitive information. |
| Model/tool usage, request identifiers, timestamps, allowance totals and login/session records | Apply allowances, recover interrupted work, prevent misuse and keep accounts secure. Performance of our contract and legitimate interests in a reliable, secure service. |
| Order, transaction and support correspondence | Deliver purchases, handle cancellation/refunds and support, and meet legal accounting obligations. Contract, legal obligation and legitimate interests in handling claims. |
| IP addresses, browser/request metadata and operational error information | Deliver and protect the website and investigate faults. Legitimate interests in security and availability. |
We do not receive your full payment-card number or card security code. Whop and its payment providers process payment details. We do not sell your chats or use them for advertising profiles.
3. Local history, memory and deletion
Jack uses browser storage, including IndexedDB and local preferences, separated by your signed-in account. This includes chat titles and messages, uploaded attachments, plans, completion checkmarks and saved facts such as your name. You can inspect and remove saved facts in Memory, export a backup and manage plans in Settings. “Forget everything & start a new plan” removes plans and saved memories but keeps old chats as history, excluded from recall in new chats. It does not delete the account, payments or server usage records.
Removing a memory does not delete the original statement from a saved chat. Clearing this site's browser data removes local history on that browser. Export files are under your control and may contain personal information. Contact us to request deletion of information we hold on our systems. Deleting local data does not reset the paid allowance or cancel a subscription.
4. Who receives information
- Anthropic: provides the Claude API used by Jack. We send the selected prompt, relevant context, uploaded content needed for the request and tool results. Anthropic's commercial/API terms govern its handling; API content is not used for model training by default. See Anthropic's Privacy Center.
- DigitalOcean: hosts Jack's application server and operational account/usage database. The current server is in the United States.
- Whop and its payment providers: provide storefront hosting, account login, memberships, course delivery, checkout and billing management. Whop also processes data for its own platform purposes under Whop's Privacy Policy.
- Search and source websites: queries and relevant search terms are processed when web research is requested. Opening a source or loading an externally hosted product image can disclose your IP address and normal request metadata to that website.
- Google Fonts: the storefront currently loads its Archivo font from Google. Your browser contacts Google's font servers, which receive your IP address and request metadata. See Google Fonts privacy information.
We may also disclose information where required by law, to handle a dispute, or to protect the service and its users. Service providers receive only what is needed for their role.
5. International processing
Some providers process data outside Norway and the European Economic Area, including in the United States. Where required, transfers rely on applicable adequacy decisions or contractual safeguards such as the European Commission's Standard Contractual Clauses, including the safeguards in our providers' data-processing terms. You can contact us for information about the applicable safeguards.
6. How long information is kept
Local chat and memory data remain in your browser until removed by you, the application controls or the browser. Jack's login session currently lasts up to 12 hours. Temporary response-recovery data are normally held in server memory for about 10 minutes; completed plan jobs may be held for about an hour to allow delivery. We do not intentionally store full customer chat transcripts in Jack's server database.
Account, usage and security records are kept for as long as needed to run access and allowances, investigate misuse or resolve claims. These records are not automatically erased when you clear browser data. We review deletion requests and retain only information still needed for a lawful purpose. Transaction records are retained for applicable accounting periods. Backups may retain earlier records until replaced or deleted.
Anthropic normally deletes API inputs and outputs within 30 days, subject to its published exceptions, including legal or safety requirements and different contractual arrangements. Whop's retention periods are described in its policy. Provider retention is separate from deletion in your browser.
7. Cookies and similar storage
Jack uses essential login and temporary sign-in cookies and browser storage for your workspace and preferences. These are needed for requested functionality. We have not added advertising pixels or third-party analytics to Jack. Whop and external services may use their own necessary platform technologies. If we add optional tracking that requires consent, we will ask before enabling it; accepting these terms is not consent to optional tracking.
8. Your rights
Depending on applicable law, you can request access, correction, deletion, restriction or portability of your personal information and object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. We may ask for proportionate identity verification. We normally respond within one month, with any lawful extension explained. You may complain to Datatilsynet or your local supervisory authority.
Providing the account and request information needed for a feature is necessary to use that feature; optional profile information is not required. Jack's suggestions do not make legal or similarly significant decisions about you. Access and allowance checks are automated; contact us if you want a suspected error reviewed.
9. Security and updates
We use measures such as encrypted connections, server-side secret storage, account-scoped access and local-data separation. No online service or device is completely secure. Keep your device and account protected. This policy will be updated when our processing changes; we will highlight material changes where appropriate.