privacy_policy

winsta.ai ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website and our mobile applications for Android (Google Play) and iOS (App Store). Our platform includes social features such as profiles, feeds, connections, user-generated content, and messaging. Our apps and payment processing may involve Apple, Google, and other trusted partners as described below.

When you upload photos, videos, or audio for our AI tools, we process this content to provide the requested features. Processing may include temporary storage on our or our providers' systems for the duration of the operation. We do not use your media for training our AI models without your separate consent. General retention of media is limited to what is necessary to deliver the service and as described in our Data Retention section. You may request deletion of specific media or associated data by contacting support@winsta.ai; we will process deletion requests in accordance with this policy and applicable law.

We collect information that you provide directly to us and information that we obtain when you use our website or our iOS and Android apps, including:

• Account and profile information (name, email address, phone number, profile photo, bio, and other details you choose to provide)
• Social and connection data: who you follow or connect with, how you interact with content (e.g. likes, comments, shares), and feed or activity preferences
• User-generated content: posts, media, messages, and other content you create, upload, or share on the platform
• Payment and purchase information: we support multiple payment methods including Apple Pay and Google Pay, as well as other card and payment options. We do not store your full card number. Payment data is processed by Apple (for iOS in-app purchases), Google (for Google Play), or other certified payment processors in accordance with their respective privacy and security standards.
• Campaign data, advertising content, and AI tool usage
• Usage data and analytics (e.g. app opens, feature use, device type, content viewed, time spent)
• Device and browser information (e.g. OS version, device identifiers, language)

Purchases made within our iOS app may be processed by Apple; purchases within our Android app may be processed by Google or other authorized providers. When you use Apple Pay or Google Pay, payment details are handled by Apple or Google respectively—we do not receive or store your full payment credentials. We may receive transaction identifiers and purchase history necessary to provide the services you paid for. For refunds and payment disputes related to App Store or Google Play purchases, please refer to Apple's or Google's respective policies and support channels.

We use the information we collect to:

• Provide, maintain, and improve our services (website and mobile apps), including social features, feeds, and messaging
• Personalize your experience (e.g. feed ranking, recommendations, and content relevant to your connections and activity)
• Process transactions and deliver purchased features (including via Apple Pay, Google Pay, and other methods)
• Send technical notices, support messages, and important updates
• Respond to your comments, questions, and reports
• Enforce our Terms, Community Guidelines, and Safety Standards; detect and address harmful content, abuse, and security issues
• Monitor and analyze trends and usage to improve the product
• Detect, prevent, and address fraud, spam, and technical issues

We do not sell your personal information to third parties. Content you post with public or connection-based visibility may be visible to other users according to your settings. We may share information only in the following circumstances:

• With your explicit consent or when you choose to make content or profile information visible to others (e.g. public profile, followers, or specific connections)
• With Apple (for iOS app and in-app purchases), Google (for Android app and Google Play), and other payment or service providers necessary to operate the apps and process payments
• To comply with legal obligations or valid legal process
• To protect our rights, safety, and the safety of our users (including in connection with content moderation and abuse prevention)
• With service providers who assist in operating our platform under strict confidentiality and data protection agreements
• In connection with a merger, sale, or other business transfer

You can often control who sees your profile and content through in-app privacy and visibility settings (e.g. public, connections only, or private). We may show your name, profile information, or content to other users in accordance with these settings and our product design (e.g. in feeds, search, or notifications). Changing visibility settings may not affect content already shared or copied by others. We recommend reviewing your settings regularly.

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Payment processing via Apple Pay, Google Pay, and other providers is subject to their respective security standards. However, no method of transmission over the Internet or electronic storage is 100% secure.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. By way of example: account and profile data are retained while your account is active and for a reasonable period after closure for legal and security purposes; usage and analytics data may be retained in aggregated or anonymized form; media uploaded for AI processing may be retained only for the duration of the operation or as needed to deliver the feature; support and communication records may be kept for several years where required for disputes or compliance.

Depending on your location, you may have the following rights regarding your personal information:

• Right to access your personal information
• Right to rectify inaccurate information
• Right to request deletion of your information
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

We process your personal information based on one or more of the following legal bases: (1) Contract—to perform our agreement with you and provide the Service; (2) Consent—where you have given clear consent (e.g. for marketing or optional features); (3) Legitimate interests—to operate, secure, and improve our services, prevent fraud, and enforce our terms, where not overridden by your rights; (4) Legal obligations—to comply with applicable laws and regulations.

To submit a request to access, correct, delete, or otherwise exercise your rights over your personal information, contact us at support@winsta.ai. We may need to verify your identity before processing your request. We aim to respond to valid requests within 30 days, though complex or high-volume requests may take longer. You may also have the right to lodge a complaint with a supervisory authority in your jurisdiction.

You may delete your account and associated data through in-app account settings where available, or by contacting us at support@winsta.ai. Upon request, we will delete or anonymize your personal data as required by applicable law. We may retain certain information where necessary for legal, security, or fraud-prevention purposes (e.g. transaction records, logs related to abuse or legal process).

We use analytics to understand how our website and apps are used (e.g. performance, stability, feature usage). This may involve device identifiers, advertising IDs (such as IDFA on iOS or Advertising ID on Android) where permitted, and similar technologies for analytics, security, and—if applicable—advertising. You can manage or reset advertising identifiers and related permissions in your device settings (e.g. iOS Privacy settings, Google Play settings). We do not sell your personal information to third parties for their advertising.

We do not currently use your personal information to deliver targeted or personalized third-party advertising within our apps. If we introduce such advertising in the future, we will update this policy and provide clear controls and opt-out options. You can manage ad-related preferences in your device settings.

We do not use your email address, phone number, or name for advertising purposes. These identifiers are used only for account creation and sign-in, account recovery, communicating with you about your account and our services, security and fraud prevention, and as otherwise described in this Privacy Policy. We do not sell, license, or share your email, phone number, or name with third parties for their advertising or marketing.

This section explains our collection, use, disclosure, sharing, and retention of face data in connection with user avatars (profile photos). It is the primary place in this Privacy Policy where face data is addressed.

• What face data we collect: If you set a profile photo (avatar), we store the image file you upload. That image may contain your face. We do not collect or derive biometric identifiers (e.g. faceprints or facial templates), and we do not perform facial recognition or analysis on your photo. We collect only the single profile image you choose for your account.
• Planned uses of face data; third-party sharing and storage: Your profile photo is used solely to display your avatar across our services (e.g. next to your name in feeds, comments, messages, and connection lists) in accordance with your privacy and visibility settings. We do not use your profile photo or any face data for advertising, for building user profiles for third-party marketing, or for identification outside the operation of our platform. We do not share your profile photo or any face data with third parties for advertising or marketing. Your avatar is stored on our own infrastructure or on that of our trusted hosting or storage providers, under contracts that require appropriate security and data protection. We do not sell face data.
• Retention: Face data (your profile photo) is retained for as long as your account is active and you keep that photo as your avatar. If you change or remove your profile photo, we remove the previous image from display and delete it in accordance with our standard data retention and deletion procedures. After you delete your account, we delete or anonymize your profile photo and other personal data as described in the Account Deletion and Data Retention sections of this policy.
• Where in this Privacy Policy: The app's collection, use, disclosure, sharing, and retention of face data are explained in this section (Section 17 — Face Data and User Avatar). For related practices, see also: Section 3 (Information We Collect), Section 5 (How We Use Your Information), Section 6 (Information Sharing and Disclosure), Section 7 (Content Visibility and Controls), Section 9 (Data Retention), and Section 13 (Account Deletion).

We use cookies and similar technologies on our website and may use analytics in our mobile apps to understand usage and improve our services. You can manage cookie preferences in your browser. App permissions (e.g. on iOS and Android) can be managed in your device settings.

Our website and apps may contain links to third-party sites or integrate with services such as Apple and Google. We are not responsible for the privacy practices of these third parties. We encourage you to review Apple's Privacy Policy, Google's Privacy Policy, and the policies of any other services you use in connection with our apps.

Our Service is not intended for individuals under the age of 18, consistent with our Terms of Use. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@winsta.ai and we will take steps to delete such information.

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using our Service (including our iOS and Android apps), you consent to such transfer. We take steps to ensure your data is treated in line with this policy and applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For app users, we may also notify you via the app or email. Your continued use of our website or apps after changes constitutes acceptance of the updated policy.

For questions about this Privacy Policy, or for App Store or Google Play privacy-related inquiries, please contact us: