Privacy policy
In force from 21 September 2026. Whyzit is a product of Audit AI, Inc., a Delaware corporation.
Who we are
Whyzit is a product of Audit AI, Inc., a Delaware corporation. Audit AI, Inc. controls the personal information described on this page.
Our mailing address is 3611 Aberdeen Way, Houston, TX 77025, United States.
Write to privacy@whyzit.com with any question about this policy, or to ask us to delete what we hold.
What Whyzit does
You type a question. Whyzit makes a narrated film that answers it, about one minute long, and plays it back to you.
Making a film needs an account. You make one with an email address and a password, or with Sign in with Google. Watching a film needs no account, so a link opens straight into the film.
What we collect
- Your question and the style you pick. We need both to make the film.
- The film we make, and the files it is built from.
- Records of making it, which are timings, the cost of each step and any error. We use these to keep the service fast and to find faults.
- Ordinary web request records, such as your network address, your browser and the time of the request. Cloudflare records these when you load a page.
- Your account, which is the name, the email address, the profile picture and the account identifier Google gives us when you sign in. We ask Google for nothing else.
- Anything you send us, which is your email address and your message when you write to us.
We ask Google for your name, your email address, your profile picture and your account identifier, and for nothing else. We do not ask for your address or your date of birth. We never see your Google password.
Your question may contain personal information, because you choose what to type. Do not put sensitive personal information in a question, such as an identifiable health record. Do not send private information about another person without a lawful reason.
Why we use your information
We use your question, your chosen style and the files we make to give you the film you asked for. Where the GDPR applies, our legal basis is performing our agreement with you. We need your question to make a film, and you choose whether to ask for one.
We use the records of making a film, and ordinary web request records, to keep Whyzit working, to find faults and to stop misuse. Our legal basis is our legitimate interest in running a reliable and secure service.
We use your account to sign you in, to count your films, to know which plan you are on, and to show you the films you made. Where the GDPR applies, our legal basis is performing our agreement with you.
When you buy a plan, we keep the Stripe customer id and subscription id with your account, so we know what you paid for. Our legal basis is performing our agreement with you.
We use your message to answer you when you write to us. Our legal basis is our legitimate interest in helping the people who use Whyzit.
Where a law requires us to keep a record, our legal basis for keeping it is that legal obligation.
We do not train on your questions
We do not use your questions or your films to train an AI model. We build no model of our own.
The companies in the next section run the models we call. Their own terms govern what they may do with what we send them. Write to privacy@whyzit.com to ask what we have agreed with a particular one.
What we do not collect
Whyzit does not connect to your inbox, your calendar, your contacts or your files.
We never see or store your card details. Stripe holds them when you buy a plan.
We set no advertising cookies and we run no analytics. This website loads nothing from another company, so no third party learns that you visited it.
We do not work out your location from your network address. Cloudflare uses network addresses to protect this site, in the way it protects every site it serves.
Who else sees your question
We use the companies below to make and deliver films, to store files, and to run the service. The table says what each one receives. Text and film clips can still hold personal information that came from your question. Google also appears here as the company that signs you in.
| Company | What we send it | Where it runs |
|---|---|---|
| Cloudflare, Inc. | Your question, the film, and ordinary request records. | United States |
| Google LLC | Your question, and your name, email address and picture when you sign in. | United States |
| OpenAI, L.L.C. | Short text we write from your question. | United States |
| FAL AI, Inc. | Short text we write from your question. | United States |
| ElevenLabs, Inc. | Short text we write from your question. | United States |
| Modal Labs, Inc. | Parts of the film. We send it no question text. | United States |
| Stripe, Inc. | Your card details, your email address and the plan you buy, when you buy one. We never see the card. | United States |
These companies process this information for us, and none of them is allowed to use your question to sell you anything. We update this table when we change a provider, and the date at the top of this page tells you when we last did.
Where we process your information
We process your information in the United States. The companies in the table above run there too.
We offer Whyzit from the United States and we aim it at people in the United States. Write to privacy@whyzit.com if you use Whyzit from another country and want to know how we handle your information.
If you reach Whyzit through another assistant
You may reach Whyzit through a connector inside another company's assistant. The assistant sends us your request, along with any context it chooses to include for that request. We send back a film and a link.
A connector does not give us general access to your account with that assistant, or to your other conversations there. We also receive ordinary request records, in the same way we do when you use the website.
That assistant has its own privacy policy, and it governs what the assistant does with the film and the link once we return them. Deleting our copy does not delete a copy that company holds.
How long we keep things
We do not store the text of your question once your film is made. Our records keep how long the question was, and never what it said. A film can of course restate the question that produced it.
We keep your film and the files it is built from for 12 months from the day we make it. Your link works during that time.
We keep the records of making a film for 12 months. We keep ordinary web request records for 30 days. We keep a message you send us for 24 months after we close the matter.
When we delete something, a copy can stay in a backup for up to 35 days. We restrict those copies until the deletion finishes.
Ask us at privacy@whyzit.com to delete a film sooner, and we will.
We may keep a particular record for longer when a law requires it, or when we need it for a legal claim. We keep it only for that purpose and we delete it when that need ends.
Your choices
Email privacy@whyzit.com to ask what we hold about you, to ask for a copy, to ask us to correct it, or to ask us to delete it.
Depending on your law, you may also ask us to restrict how we use your information, or ask for a copy you can take elsewhere. You may object when we rely on a legitimate interest.
We answer within the time your law allows, which is usually one month in Europe and the United Kingdom. If the law lets us take longer, we tell you why inside that first month. If we refuse, we explain why and how to challenge it.
Include your film link or your request reference, so that we can find the right records. We may ask for a little information to check that the request is yours. You need no account to make a request.
You can complain to your data protection authority in the European Economic Area, or to the Information Commissioner's Office in the United Kingdom. You do not have to contact us first.
We do not sell personal information and we do not share it for advertising.
Deleting your account
You can ask us to delete your account and everything attached to it. Write to privacy@whyzit.com from the address you signed in with, and say that you want the account deleted.
We delete your account, the films you made, the files they are built from, and the records of making them. We confirm when it is done, and we do it within 30 days.
Two things outlive that. A record a law requires us to keep, which we then keep only for that purpose. And a copy inside a backup, for up to 35 days, which we restrict until the deletion finishes.
Signing out is not deletion. It ends the session and leaves the account in place.
Children
Whyzit is not directed to children under 13, and we do not knowingly collect anything from a child under 13.
Write to privacy@whyzit.com if you believe a child below that age has sent us personal information. We look into it and take the steps the law requires, including deletion where that is required.
Security
Traffic to Whyzit is encrypted. We keep provider credentials on our own servers and we restrict access to them.
No service is perfect. Tell us at privacy@whyzit.com if you find a weakness and we will answer.
Changes to this policy
We post any change on this page and move the date at the top. A change that affects what we collect or who receives it gets a note at the top of the page for 30 days.
We explain a material change before it takes effect, and we ask for your consent where the law requires it. A notice alone does not let us apply a new purpose to information we already hold.