Security of Whimsical customers’ data is our core concern. All data you store in Whimsical remains yours, and we are committed to ensuring that your data is not seen by anyone who should not see it.
Whimsical’s data is encrypted both when it is sent to and from our servers, as well as when it is at rest. To protect your content in transit, Whimsical uses a strong TLS 1.2 encryption. At rest, Whimsical content is protected using the industry standard AES-256 encryption.
Whimsical’s production data is regularly backed up to a separate, isolated location and all backups are encrypted.
If you have found a security-related issue, we are eager to hear about it. At the moment we do not offer bug bounties but we do guarantee plenty of good karma.