Privacy, in plain English.
What you share
We receive the WhatsApp text export, participant names, your relationship context, your chosen participant, and your verified delivery email. Media files are not analyzed. Upload only conversations you have permission to share. You can change display names before analysis; this does not automatically redact names or other details inside message text.
What happens to it
We parse your export and calculate chat statistics on our server. The transcript is encrypted before it is saved in object storage. We send message text, participant details, conversation statistics and analysis instructions to xAI to generate an English report. For long conversations we process sections and combine their evidence. We request that API responses are not stored using store:false; this request does not override xAI’s own data retention policies. Resend processes your email address and sends verification codes and private report links. Our infrastructure also processes the data needed to operate this service.
Who can open your preview
Your browser receives a private access cookie. A secret link in the delivery email can restore access in another browser. Anyone holding that link can access the preview and delete the report, so keep it private. We do not put report contents in public pages, search indexes or analytics. We do not run advertising trackers or session recordings on this version of the site. We store a hashed rate-limit identifier to help prevent automated abuse.
How long we keep it
An unstarted upload expires after 48 hours. Once analysis starts, its transcript is retained for up to 7 days. Your report, statistics, email address and private-access record expire after 90 days. Short analysis notes are removed with the transcript. Report excerpts and quotations remain part of the report until it expires or you delete it. Expired records are removed by the background cleanup worker; expired report links stop working immediately.
Delete or ask for help
Use “Delete conversation and report” on your private report page to remove its stored transcript and report and revoke access. Deleting here does not remove emails already delivered or data subject to a provider’s own retention requirements. For access or deletion help, contact our support address below. Include the report ID, but do not send the secret link or the chat transcript.
Current release
Full reports remain locked and checkout is unavailable. No payment details are collected by this version. This is an independent service at whatbrandonthinks.co. Updated October 16, 2026.
Support: support@sherlock-search.org